
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
File: e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer (raw, json)
Hash identifier: bpXQTCbC94vVWCFvHirZ9yolcOg5mjmIdnZxYdl9tOM=
Subject key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584CD42DCEB0299D1F1DB6ECF000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Feb 2026 15:18:18 +0000
Certificate not after: Tue 07 Dec 2027 01:45:24 +0000
Subordinate resources: AS: 30644
AS: 39967
AS: 396998
IP: 23.183.240.0/21
IP: 64.52.81.0/24
IP: 104.152.140.0/22
IP: 136.175.222.0/23
IP: 141.193.68.0/24
IP: 163.123.193.0/24
IP: 163.123.195.0/24
IP: 172.111.32.0/22
IP: 205.178.176.0/23
IP: 205.178.182.0/23
IP: 205.220.224.0 -- 205.220.228.255
IP: 205.220.230.0/23
IP: 206.71.159.0/24
IP: 209.127.214.0/24
IP: 209.237.140.0/23
IP: 216.126.207.0/24
IP: 2600:3500::/28
IP: 2602:fd00::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:2d:ce:b0:29:9d:1f:1d:b6:ec:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 11 15:18:18 2026 GMT
Not After : Dec 7 01:45:24 2027 GMT
Subject: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:41:8e:a1:cc:95:46:aa:ea:df:c8:b0:16:
b8:fc:ec:9e:e9:ba:05:2a:d2:15:12:70:9d:f4:9f:
ab:59:cb:b5:a2:29:0e:84:4b:57:04:c6:24:84:25:
74:58:01:31:e6:2e:16:2a:d8:25:3c:c7:60:6e:be:
c4:42:b3:f9:fd:d6:02:7c:b1:a2:05:5f:ef:70:15:
97:ac:8a:83:4a:69:e5:ee:06:d4:51:01:7d:b5:f6:
32:0c:e3:81:43:1f:84:c2:00:3c:fa:3e:db:9e:d0:
9a:52:e6:dc:c2:78:18:5a:c6:9f:61:c3:ca:77:f5:
92:b9:16:51:1a:fe:d5:59:11:bb:b2:2c:94:6d:9f:
4c:7e:53:22:d4:29:aa:c8:a3:9b:39:a4:a8:ec:6a:
15:67:38:8a:18:3a:ab:35:bc:c9:02:8f:be:7f:57:
b4:63:5c:fe:8a:60:89:ed:e4:81:a6:a6:38:20:f4:
7f:c7:16:6d:a4:a4:42:56:4f:56:81:38:ab:cb:f1:
0b:2d:b5:19:c2:ac:b1:7c:3c:a6:2a:df:cc:ec:1b:
31:22:57:d3:d5:e5:c7:43:84:b7:76:88:c3:af:bb:
e8:b1:42:68:1b:47:7e:a4:1e:04:04:88:7a:4e:e9:
9a:29:4e:af:fe:58:7b:b8:7d:3f:7c:10:fb:86:4f:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.183.240.0/21
64.52.81.0/24
104.152.140.0/22
136.175.222.0/23
141.193.68.0/24
163.123.193.0/24
163.123.195.0/24
172.111.32.0/22
205.178.176.0/23
205.178.182.0/23
205.220.224.0-205.220.228.255
205.220.230.0/23
206.71.159.0/24
209.127.214.0/24
209.237.140.0/23
216.126.207.0/24
IPv6:
2600:3500::/28
2602:fd00::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30644
39967
396998
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:ba:af:2a:91:36:c4:b4:7f:4e:16:20:5b:ae:a6:72:fa:64:
17:58:97:c1:0f:ab:f4:19:b7:6c:5c:07:48:f9:9d:4a:19:7c:
c1:af:b7:bf:e0:a1:18:97:60:db:b9:06:66:e6:c4:2a:cf:88:
90:10:7f:31:72:3f:7b:bd:17:d8:0d:51:80:75:2c:c0:11:c0:
c1:5a:2e:92:05:5c:f3:fd:c1:de:7f:0e:d7:0a:05:9f:14:e6:
ed:33:d1:b7:ee:b0:3d:d7:88:6b:b2:cc:ce:2b:5e:c4:5e:9a:
fe:a9:19:1e:3c:f1:92:12:04:ca:41:63:ee:20:bd:37:6f:c1:
f8:fc:0e:43:0f:8e:aa:8d:ef:ad:bd:df:a8:f8:04:23:f7:58:
ff:01:53:f7:1c:88:5a:eb:1b:bd:70:4b:14:f5:60:50:34:88:
77:1a:23:de:05:b4:51:cd:32:a9:c6:7e:d4:3e:d4:2e:b2:88:
08:eb:37:70:04:56:b2:3e:b6:39:7e:2a:bb:e4:5a:8b:b2:bb:
7c:99:40:b4:88:e2:04:7b:ae:26:86:b2:8d:9b:d4:5e:d4:76:
36:10:ab:6c:cf:7d:56:33:ae:b1:c6:19:8a:4c:a9:3b:99:81:
08:3f:7b:34:71:1e:a0:ad:44:45:40:cd:42:f7:e5:2e:50:47:
36:da:d8:2b
-----BEGIN CERTIFICATE-----
MIIHjjCCBnagAwIBAgIUAQ0Mn0MoWEzULc6wKZ0fHbbs8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MDIxMTE1MTgxOFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk
ZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4ZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb1BjqHMlUaq6t/IsBa4/Oye6boFKtIVEnCd
9J+rWcu1oikOhEtXBMYkhCV0WAEx5i4WKtglPMdgbr7EQrP5/dYCfLGiBV/vcBWX
rIqDSmnl7gbUUQF9tfYyDOOBQx+EwgA8+j7bntCaUubcwngYWsafYcPKd/WSuRZR
Gv7VWRG7siyUbZ9MflMi1CmqyKObOaSo7GoVZziKGDqrNbzJAo++f1e0Y1z+imCJ
7eSBpqY4IPR/xxZtpKRCVk9WgTiry/ELLbUZwqyxfDymKt/M7BsxIlfT1eXHQ4S3
dojDr7vosUJoG0d+pB4EBIh6TumaKU6v/lh7uH0/fBD7hk88KwIDAQABo4IEoDCC
BJwwHQYDVR0OBBYEFKu245A2RkvQC5rVIlpeo2B8ndV8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
OTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U5NmIyNGM0LWI2OTItNGI5NC04
M2Y1LTFkYTU0OTBiOGYzYy9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkw
YjhmM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgZoGCCsGAQUF
BwEHAQH/BIGKMIGHMG4EAgABMGgDBAMXt/ADBABANFEDBAJomIwDBAGIr94DBACN
wUQDBACje8EDBACje8MDBAKsbyADBAHNsrADBAHNsrYwDAMEBc3c4AMEAM3c5AME
Ac3c5gMEAM5HnwMEANF/1gMEAdHtjAMEANh+zzAVBAIAAjAPAwUEJgA1AAMGBCYC
/QAAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAne0AgMAnB8CAwYOxjBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQB5uq8qkTbEtH9OFiBbrqZy+mQXWJfBD6v0GbdsXAdI+Z1KGXzBr7e/4KEYl2Db
uQZm5sQqz4iQEH8xcj97vRfYDVGAdSzAEcDBWi6SBVzz/cHefw7XCgWfFObtM9G3
7rA914hrsszOK17EXpr+qRkePPGSEgTKQWPuIL03b8H4/A5DD46qje+tvd+o+AQj
91j/AVP3HIha6xu9cEsU9WBQNIh3GiPeBbRRzTKpxn7UPtQusogI6zdwBFayPrY5
fiq75FqLsrt8mUC0iOIEe64mhrKNm9Re1HY2EKtsz31WM66xxhmKTKk7mYEIP3s0
cR6grURFQM1C9+UuUEc22tgr
-----END CERTIFICATE-----
Generated at Mon Feb 23 16:21:36 2026 by rpki-client