
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer
File: 50de7142-1147-4734-8a6c-9f603bd048cc.cer (raw, json)
Hash identifier: dNlJDXLMexsAhHkQedRmsUbOHarR5vmIygvV40ASk/s=
Subject key identifier: D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584ED9BFB646FCDDBF715DBAB280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 16 Aug 2026 00:45:12 +0000
Certificate not after: Sat 18 Nov 2028 01:45:12 +0000
Subordinate resources: AS: 40138
IP: 2620:95:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:bf:b6:46:fc:dd:bf:71:5d:ba:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Aug 16 00:45:12 2026 GMT
Not After : Nov 18 01:45:12 2028 GMT
Subject: CN=50de7142-1147-4734-8a6c-9f603bd048cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:5b:d1:94:27:e1:f7:1b:b6:e7:60:c2:67:
fc:56:8c:83:fe:0a:c8:ac:19:c9:7d:b1:14:aa:c0:
80:7e:dc:ab:ff:aa:de:8f:ae:79:b8:d9:0e:1b:d4:
e2:77:8d:9f:27:f3:56:33:5d:25:9d:b3:91:70:f6:
69:15:be:34:5d:73:fb:c5:5b:e4:58:8b:f6:b1:27:
56:d6:59:46:2f:7d:52:35:f2:01:b8:78:06:52:84:
cd:91:7e:48:94:f0:ea:92:88:e4:3c:f1:f5:08:6f:
c9:47:29:58:09:d0:b2:0f:51:cc:66:5e:8e:d5:a0:
9d:39:43:5e:0e:50:aa:dd:ef:be:30:d5:17:e3:3c:
07:11:d9:9d:b2:6f:a6:11:d5:18:1f:d6:7c:0b:6d:
88:61:cc:33:f8:6c:b7:4c:0a:04:80:5f:cc:b1:a5:
3c:8f:f7:ec:a3:6b:2f:43:17:d7:ae:05:c9:c7:c2:
3f:9d:8b:48:09:54:05:25:87:18:9a:a6:fb:d0:6a:
90:fe:b2:5b:a6:28:55:51:22:d3:b0:19:f6:a9:14:
31:a9:d4:28:c5:3e:6d:c9:fc:c8:c6:73:d8:a9:3d:
46:82:bb:5a:71:eb:8e:a0:9c:a0:a3:78:f5:56:da:
a5:8b:ac:48:21:99:31:ff:b2:12:6a:f4:43:b6:e1:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:95:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40138
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:be:9a:49:da:31:42:ca:94:97:5b:e0:11:7d:ea:23:55:72:
c0:de:60:b9:08:84:1a:13:e5:8a:0c:da:04:2d:70:ba:eb:59:
34:28:aa:9c:17:66:d0:22:74:95:84:2a:95:a2:19:2e:78:87:
39:a1:f9:d5:e0:12:4a:00:06:ad:bc:39:47:e8:17:c5:b3:c0:
b5:ce:e8:74:31:a2:a5:ba:02:60:d5:f4:e9:17:41:8a:a0:00:
1e:3e:12:44:b6:02:98:fc:7a:36:1a:ad:24:70:8f:70:4c:5e:
9c:7c:6f:4d:7b:41:5c:d5:80:ae:35:29:4c:7d:4d:cc:16:48:
39:e7:24:24:d0:b8:78:c0:94:32:20:fa:87:95:01:0b:29:a3:
70:88:d2:e8:dc:49:00:c9:37:87:9d:e0:45:af:31:8f:d0:ff:
42:09:78:a9:8e:66:b7:79:5c:80:72:43:9a:54:3b:49:30:12:
3a:81:fc:af:d5:15:d9:2d:1a:87:90:83:a9:1a:76:14:d0:5d:
4b:b8:11:b9:54:be:d9:24:85:2f:23:ea:37:e3:6c:a9:71:c6:
dd:8c:29:22:45:3a:ed:d2:00:10:0f:a8:9e:0c:80:17:6b:02:
72:73:b0:cd:c2:1a:7f:2f:04:9b:e3:71:11:db:6c:f7:64:bc:
36:2e:11:81
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE7Zv7ZG/N2/cV26soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI2MDgxNjAwNDUxMloXDTI4MTExODAxNDUxMlowLzEtMCsGA1UEAxMk
NTBkZTcxNDItMTE0Ny00NzM0LThhNmMtOWY2MDNiZDA0OGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Vb0ZQn4fcbtudgwmf8VoyD/grIrBnJfbEU
qsCAftyr/6rej655uNkOG9Tid42fJ/NWM10lnbORcPZpFb40XXP7xVvkWIv2sSdW
1llGL31SNfIBuHgGUoTNkX5IlPDqkojkPPH1CG/JRylYCdCyD1HMZl6O1aCdOUNe
DlCq3e++MNUX4zwHEdmdsm+mEdUYH9Z8C22IYcwz+Gy3TAoEgF/MsaU8j/fso2sv
QxfXrgXJx8I/nYtICVQFJYcYmqb70GqQ/rJbpihVUSLTsBn2qRQxqdQoxT5tyfzI
xnPYqT1GgrtaceuOoJygo3j1Vtqli6xIIZkx/7ISavRDtuGlEQIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFNJ3Jl0YWEvZz9RqkWugnpfQLcxsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81
MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2JkMDQ4Y2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUwZGU3MTQyLTExNDctNDczNC04
YTZjLTlmNjAzYmQwNDhjYy81MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2Jk
MDQ4Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmIACVQAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAJzKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBABK+mknaMULKlJdb4BF96iNVcsDeYLkIhBoT5YoM2gQt
cLrrWTQoqpwXZtAidJWEKpWiGS54hzmh+dXgEkoABq28OUfoF8WzwLXO6HQxoqW6
AmDV9OkXQYqgAB4+EkS2Apj8ejYarSRwj3BMXpx8b017QVzVgK41KUx9TcwWSDnn
JCTQuHjAlDIg+oeVAQspo3CI0ujcSQDJN4ed4EWvMY/Q/0IJeKmOZrd5XIByQ5pU
O0kwEjqB/K/VFdktGoeQg6kadhTQXUu4EblUvtkkhS8j6jfjbKlxxt2MKSJFOu3S
ABAPqJ4MgBdrAnJzsM3CGn8vBJvjcRHbbPdkvDYuEYE=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:02:47 2026 by rpki-client