
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f37f19e3-17a8-4d5b-b5af-757764857718.cer
File: f37f19e3-17a8-4d5b-b5af-757764857718.cer (raw, json)
Hash identifier: BemkfRxgWgpf1C3iLiySWfS1k6Zr+l19xGzJ+bcVReQ=
Subject key identifier: 26:BB:71:BD:19:CF:E1:0F:4A:36:D6:58:14:0B:7A:1D:20:1D:97:19
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F835759E3667C904962977180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f37f19e3-17a8-4d5b-b5af-757764857718/f37f19e3-17a8-4d5b-b5af-757764857718.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f37f19e3-17a8-4d5b-b5af-757764857718/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 15 Oct 2026 18:42:21 +0000
Certificate not after: Wed 17 Jan 2029 19:42:21 +0000
Subordinate resources: AS: 29827
IP: 192.146.127.0/24
IP: 199.46.64.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:83:57:59:e3:66:7c:90:49:62:97:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 15 18:42:21 2026 GMT
Not After : Jan 17 19:42:21 2029 GMT
Subject: CN=f37f19e3-17a8-4d5b-b5af-757764857718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:b4:78:a4:c5:b2:50:9b:22:a8:90:68:87:
24:b4:16:37:47:aa:0a:58:4a:ae:40:a4:be:01:b3:
e1:b5:9b:2e:63:30:5f:eb:3e:99:9b:b5:a4:c8:7a:
97:9b:e5:7f:d9:53:61:96:18:b3:6c:23:48:dd:03:
5b:08:47:6f:f3:9d:ad:49:6f:c5:be:4e:7b:bf:5c:
98:ca:0f:30:09:5d:f1:c3:ed:61:6b:b4:a9:c0:bf:
65:24:e9:6b:3f:fd:6d:08:9a:3c:9c:7e:9f:db:8c:
23:0c:4a:fb:0a:f7:d6:ac:03:0f:3b:9e:81:40:5c:
f7:81:a5:aa:24:1e:35:5f:5a:33:e5:2b:e3:dd:12:
b4:68:36:8b:04:d0:17:3e:10:bc:2a:2a:a2:cb:05:
45:f5:4f:76:d6:10:1d:53:49:6b:d4:b2:2d:b5:9d:
1a:8d:a0:2d:eb:64:0d:a3:60:39:ad:fc:ce:f5:7f:
7d:6c:ba:5e:62:e5:c5:92:2d:b1:2c:41:23:27:29:
10:2b:a9:83:92:99:64:57:01:bf:ee:15:1b:8c:98:
85:8c:29:b7:b8:f1:fe:51:fd:23:77:ac:9e:d4:3d:
53:d2:35:04:00:c1:56:e2:0b:c9:b4:83:d3:6f:e3:
73:c7:55:74:62:b9:7a:70:b9:a7:7d:da:c1:42:66:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:71:BD:19:CF:E1:0F:4A:36:D6:58:14:0B:7A:1D:20:1D:97:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f37f19e3-17a8-4d5b-b5af-757764857718/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f37f19e3-17a8-4d5b-b5af-757764857718/f37f19e3-17a8-4d5b-b5af-757764857718.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
192.146.127.0/24
199.46.64.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29827
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e8:a5:c0:23:ad:64:99:e1:5d:f8:11:f4:2d:4d:b9:0d:d5:
84:67:e8:09:29:ea:e1:aa:0d:4d:01:64:d0:af:3f:d4:44:76:
49:c0:04:a1:34:95:3a:7d:69:c6:2e:2c:db:53:4e:0b:36:64:
3c:26:14:7b:86:50:fe:9e:27:e0:79:e2:f8:e9:a6:60:7e:e7:
d7:77:5f:84:01:91:50:52:81:76:36:7c:d4:73:20:52:98:f3:
53:f4:ed:f8:80:f6:2c:84:e1:6c:2e:9e:76:ef:52:8f:b1:5d:
9c:49:2a:7f:e0:84:45:8a:73:3c:c7:71:19:30:10:b5:ec:13:
9a:4e:72:6f:c6:dc:7d:7c:b0:b8:a3:c7:1f:e6:28:e0:b2:70:
0b:1d:45:25:e2:3c:55:d5:1c:80:30:e8:56:db:dc:60:db:22:
07:bc:f1:13:18:44:eb:85:98:52:5a:23:ed:87:c2:e7:c8:54:
41:d7:23:13:05:ad:f1:03:34:f4:80:2e:f6:31:d4:ec:0c:15:
00:7b:2e:25:79:9f:9f:8f:4b:e7:06:7e:27:7a:dc:ca:5b:39:
9b:d1:f3:c5:ef:95:1e:f2:1c:26:95:5f:34:b7:86:e8:94:38:
bb:8b:82:f4:c8:bc:38:fe:87:07:35:f1:4e:16:4f:8f:fe:29:
75:43:1b:a6
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE+DV1njZnyQSWKXcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNhM2Fk
OTE5MB4XDTI2MTAxNTE4NDIyMVoXDTI5MDExNzE5NDIyMVowLzEtMCsGA1UEAxMk
ZjM3ZjE5ZTMtMTdhOC00ZDViLWI1YWYtNzU3NzY0ODU3NzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJa0eKTFslCbIqiQaIcktBY3R6oKWEquQKS+
AbPhtZsuYzBf6z6Zm7WkyHqXm+V/2VNhlhizbCNI3QNbCEdv852tSW/Fvk57v1yY
yg8wCV3xw+1ha7SpwL9lJOlrP/1tCJo8nH6f24wjDEr7CvfWrAMPO56BQFz3gaWq
JB41X1oz5Svj3RK0aDaLBNAXPhC8KiqiywVF9U921hAdU0lr1LIttZ0ajaAt62QN
o2A5rfzO9X99bLpeYuXFki2xLEEjJykQK6mDkplkVwG/7hUbjJiFjCm3uPH+Uf0j
d6ye1D1T0jUEAMFW4gvJtIPTb+Nzx1V0Yrl6cLmnfdrBQmZmmwIDAQABo4IEIDCC
BBwwHQYDVR0OBBYEFCa7cb0Zz+EPSjbWWBQLeh0gHZcZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9m
MzdmMTllMy0xN2E4LTRkNWItYjVhZi03NTc3NjQ4NTc3MTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjIt
ZWRmZS00NjE5LTg2YmQtZGVmMmNhM2FkOTE5L2YzN2YxOWUzLTE3YTgtNGQ1Yi1i
NWFmLTc1Nzc2NDg1NzcxOC9mMzdmMTllMy0xN2E4LTRkNWItYjVhZi03NTc3NjQ4
NTc3MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1
OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZGZlNThmMi1lZGZlLTQ2
MTktODZiZC1kZWYyY2EzYWQ5MTkuY3JsMB8GA1UdIwQYMBaAFFYqTl67dK8ohXzn
WIVAihzm14H9MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBk
ZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBADAkn8DBAXHLkAwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICdIMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAduilwCOtZJnhXfgR9C1NuQ3VhGfoCSnq4aoNTQFk
0K8/1ER2ScAEoTSVOn1pxi4s21NOCzZkPCYUe4ZQ/p4n4Hni+OmmYH7n13dfhAGR
UFKBdjZ81HMgUpjzU/Tt+ID2LIThbC6edu9Sj7FdnEkqf+CERYpzPMdxGTAQtewT
mk5yb8bcfXywuKPHH+Yo4LJwCx1FJeI8VdUcgDDoVtvcYNsiB7zxExhE64WYUloj
7YfC58hUQdcjEwWt8QM09IAu9jHU7AwVAHsuJXmfn49L5wZ+J3rcyls5m9Hzxe+V
HvIcJpVfNLeG6JQ4u4uC9Mi8OP6HBzXxThZPj/4pdUMbpg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:28 2026 by rpki-client