
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer
File: 757f9f4f-7bcb-4918-ad77-cb1331456bac.cer (raw, json)
Hash identifier: FjepOVDGuBtnT794/dvYk9Gu09J1cEXBdUekiTTwMJM=
Subject key identifier: DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584ED42A571F72FB34B4BEF7D000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 14 Aug 2026 00:45:12 +0000
Certificate not after: Thu 16 Nov 2028 01:45:12 +0000
Subordinate resources: AS: 13953
IP: 108.59.144.0/20
IP: 2620:103:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:2a:57:1f:72:fb:34:b4:be:f7:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Aug 14 00:45:12 2026 GMT
Not After : Nov 16 01:45:12 2028 GMT
Subject: CN=757f9f4f-7bcb-4918-ad77-cb1331456bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:24:f2:fd:b9:ce:90:b9:d1:dc:2a:d7:ba:
78:90:cd:4e:e0:69:33:60:bb:1f:a2:bc:92:14:fd:
2e:26:f8:d6:90:6d:05:62:31:ec:22:bc:1e:88:c4:
34:ef:a3:d4:68:f3:1e:74:9d:07:6a:2e:ef:bb:be:
0e:bf:01:93:01:fe:d9:b4:9c:ef:a3:e5:4e:a5:e9:
15:89:88:aa:cb:8f:db:4a:7c:8c:2f:48:89:90:4f:
f3:5d:c2:00:93:a9:37:20:5b:0e:82:fb:a8:3c:c5:
b0:01:e8:e4:f5:9b:1e:3e:44:79:f9:3f:e0:b8:b2:
af:a8:2e:03:6c:ea:0e:fb:ce:12:86:b8:b0:5a:3c:
28:e7:e3:71:80:2d:43:75:dc:3c:99:37:87:d8:e4:
0d:41:9c:6a:15:54:e0:f9:5a:d1:e0:70:0f:6e:fa:
f6:94:cf:29:fb:0e:34:cc:c9:a8:e7:b8:0c:e5:43:
9b:53:a1:2d:ad:86:e7:a6:1d:d5:84:cc:9b:90:47:
42:12:f4:c6:e5:34:4b:29:1f:b9:c3:3c:e1:6b:72:
5e:64:a3:c0:ea:8d:81:6b:25:b9:d7:51:1b:7f:e7:
98:e2:e6:57:2b:e8:3c:29:f7:7e:c9:48:96:8b:87:
0d:6c:92:68:9a:cf:58:f0:b1:e8:a4:ad:d5:0c:45:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
108.59.144.0/20
IPv6:
2620:103:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13953
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:09:30:a4:f4:14:48:11:a7:8e:7f:6a:df:68:bb:44:73:1c:
e7:8a:8e:99:47:e0:5f:17:18:68:2f:62:5e:7a:de:b5:5e:db:
38:8e:46:b9:35:18:de:54:2d:8c:f0:b2:b5:39:30:1a:ec:80:
a7:5a:1d:c9:f2:97:ac:a3:38:c5:d7:02:5e:73:1a:18:c4:29:
ee:0a:61:3c:bc:96:54:9a:eb:69:cb:c3:9c:d4:fd:5d:ca:7e:
08:70:49:a9:3d:35:de:2f:e7:ad:6e:a7:1a:78:a3:76:92:57:
ce:5b:23:2b:7e:6d:eb:b8:19:b8:cc:2f:62:44:68:3a:0a:8c:
b1:8e:e5:f5:ef:f4:6b:3c:ba:a7:93:96:39:7f:95:b6:2e:74:
35:35:7f:16:22:10:a8:22:59:0d:1d:83:5b:95:06:5e:36:4e:
c2:20:66:78:42:55:ae:86:5c:ee:dd:f0:cf:06:17:d7:c1:09:
58:aa:d0:92:87:99:18:36:bf:d1:6f:50:8c:0a:bd:ae:ad:7b:
e5:44:0f:ef:26:4c:84:7d:82:c5:e9:ab:c9:ab:16:e5:3e:09:
39:e8:b3:d3:99:ca:8a:bc:59:67:52:bf:2c:b1:8b:10:ff:a2:
10:15:e2:01:16:29:7c:05:a4:00:b2:28:4f:7a:b6:5e:ab:e4:
e1:66:5a:b0
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE7UKlcfcvs0tL730AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI2MDgxNDAwNDUxMloXDTI4MTExNjAxNDUxMlowLzEtMCsGA1UEAxMk
NzU3ZjlmNGYtN2JjYi00OTE4LWFkNzctY2IxMzMxNDU2YmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqMk8v25zpC50dwq17p4kM1O4GkzYLsforyS
FP0uJvjWkG0FYjHsIrweiMQ076PUaPMedJ0Hai7vu74OvwGTAf7ZtJzvo+VOpekV
iYiqy4/bSnyML0iJkE/zXcIAk6k3IFsOgvuoPMWwAejk9ZsePkR5+T/guLKvqC4D
bOoO+84ShriwWjwo5+NxgC1Dddw8mTeH2OQNQZxqFVTg+VrR4HAPbvr2lM8p+w40
zMmo57gM5UObU6EtrYbnph3VhMybkEdCEvTG5TRLKR+5wzzha3JeZKPA6o2BayW5
11Ebf+eY4uZXK+g8Kfd+yUiWi4cNbJJoms9Y8LHopK3VDEUmnQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFNoAtl+sP+9ouleFv5a0ZULOJlSbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83
NTdmOWY0Zi03YmNiLTQ5MTgtYWQ3Ny1jYjEzMzE0NTZiYWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzc1N2Y5ZjRmLTdiY2ItNDkxOC1h
ZDc3LWNiMTMzMTQ1NmJhYy83NTdmOWY0Zi03YmNiLTQ5MTgtYWQ3Ny1jYjEzMzE0
NTZiYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBARsO5AwDwQCAAIwCQMHBCYgAQNAADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgI2gTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcCTCk9BRIEaeOf2rfaLtEcxzn
io6ZR+BfFxhoL2Jeet61Xts4jka5NRjeVC2M8LK1OTAa7ICnWh3J8pesozjF1wJe
cxoYxCnuCmE8vJZUmutpy8Oc1P1dyn4IcEmpPTXeL+etbqcaeKN2klfOWyMrfm3r
uBm4zC9iRGg6CoyxjuX17/RrPLqnk5Y5f5W2LnQ1NX8WIhCoIlkNHYNblQZeNk7C
IGZ4QlWuhlzu3fDPBhfXwQlYqtCSh5kYNr/Rb1CMCr2urXvlRA/vJkyEfYLF6avJ
qxblPgk56LPTmcqKvFlnUr8ssYsQ/6IQFeIBFil8BaQAsihPerZeq+ThZlqw
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:38:12 2026 by rpki-client