
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
File: 601d8cf8-4cca-4295-8f3b-916dcd50b673.cer (raw, json)
Hash identifier: VuIjXTyaEXIuoMNlhEE7eLGkHsdhm5S1aY9aIg4IkFU=
Subject key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CD3FFAFABDA8EB077DC92DB20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Feb 2026 13:45:22 +0000
Certificate not after: Tue 16 May 2028 12:45:22 +0000
Subordinate resources: IP: 192.139.36.0/24
IP: 204.209.16.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d3:ff:af:ab:da:8e:b0:77:dc:92:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 11 13:45:22 2026 GMT
Not After : May 16 12:45:22 2028 GMT
Subject: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:77:14:90:e6:9c:c6:79:23:19:d2:3a:9d:
64:d7:3a:27:18:1d:eb:98:12:f6:aa:a1:fa:6e:51:
3e:2e:ee:91:58:2d:f4:fa:a0:1d:06:fa:11:17:23:
20:a9:ed:99:b9:b4:60:e0:af:e4:30:28:a6:21:a6:
1c:e2:03:50:8c:a0:9d:66:2b:42:54:e6:3a:6d:19:
f6:43:12:0b:1e:95:e5:5a:63:d8:eb:18:48:c2:97:
b0:8d:1c:ca:a5:03:3d:3b:b8:f4:82:cb:fd:fa:b9:
f7:b7:29:ee:65:41:8e:36:d6:17:28:c6:3a:dc:96:
02:88:dc:ef:de:27:68:b8:3a:2b:d5:3f:ad:c8:e1:
04:76:d6:7a:1e:e5:a9:ba:ab:bd:10:dc:06:db:7d:
7f:11:a0:13:aa:a6:87:47:04:34:39:4f:97:cc:dc:
5d:c0:9e:19:01:d3:ab:40:94:03:c3:8c:f6:ca:9a:
9d:7d:26:07:57:82:06:b3:29:a4:04:8f:24:ea:7d:
c4:8a:3b:51:a3:27:6b:2e:3c:24:83:64:8c:5f:79:
50:bd:27:9c:13:4a:e8:6d:58:eb:83:a5:08:b8:04:
83:32:29:52:b9:4f:02:be:e7:01:e4:65:b8:13:ca:
e2:c8:a3:93:4c:e0:e6:13:10:66:34:78:be:68:ca:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
192.139.36.0/24
204.209.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e0:d2:ff:f2:8f:1d:f2:dc:93:bd:36:a1:7d:59:5a:99:5a:
e2:a6:68:a1:51:a8:0e:4f:f3:23:30:3f:5e:8b:6b:38:fb:5f:
c3:56:f0:94:47:0a:52:45:4b:e7:f0:b6:f1:64:53:fd:57:a5:
b8:f1:71:74:e1:d1:4e:88:b7:b2:ca:ed:b4:99:25:b8:7b:26:
a4:08:73:4f:7e:36:dd:8b:6e:fa:03:75:18:b7:d1:75:3e:67:
47:11:8c:65:b9:c9:b6:51:d7:9f:cb:ba:98:57:a2:3e:ea:04:
ab:e3:98:c0:79:ab:c3:36:e2:35:ad:a8:83:d6:14:ce:24:09:
d1:02:9e:1c:26:12:d2:a7:28:af:be:66:cb:5c:2c:64:ed:be:
a4:dc:b9:9e:24:c8:9d:04:e9:c0:36:df:f4:27:16:fc:41:cf:
5a:4f:ff:0e:9d:51:2d:63:b5:38:63:22:4c:08:4f:5a:9a:88:
d7:1c:2f:5a:21:69:25:05:3e:ce:79:10:31:1e:f9:27:1a:75:
5d:bc:86:10:86:d4:22:2d:e6:f2:bd:4b:6a:04:79:94:19:c0:
d6:19:ee:d2:65:48:87:54:68:5a:d0:05:55:26:ea:0a:d2:62:
78:1f:5e:05:b8:48:9d:31:c2:a6:64:a8:c4:95:b9:e5:6f:fc:
cc:77:28:b2
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEzT/6+r2o6wd9yS2yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MDIxMTEzNDUyMloXDTI4MDUxNjEyNDUyMlowLzEtMCsGA1UEAxMk
NjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBiNjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoel3FJDmnMZ5IxnSOp1k1zonGB3rmBL2qqH6
blE+Lu6RWC30+qAdBvoRFyMgqe2ZubRg4K/kMCimIaYc4gNQjKCdZitCVOY6bRn2
QxILHpXlWmPY6xhIwpewjRzKpQM9O7j0gsv9+rn3tynuZUGONtYXKMY63JYCiNzv
3idouDor1T+tyOEEdtZ6HuWpuqu9ENwG231/EaATqqaHRwQ0OU+XzNxdwJ4ZAdOr
QJQDw4z2ypqdfSYHV4IGsymkBI8k6n3EijtRoydrLjwkg2SMX3lQvSecE0robVjr
g6UIuASDMilSuU8CvucB5GW4E8riyKOTTODmExBmNHi+aMrQpwIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFLX7uXVC2C8PfWFu43ehoe1N9yC7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82
MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYwMWQ4Y2Y4LTRjY2EtNDI5NS04
ZjNiLTkxNmRjZDUwYjY3My82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1
MGI2NzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBADAiyQDBALM0RAwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAduDS//KPHfLc
k702oX1ZWpla4qZooVGoDk/zIzA/XotrOPtfw1bwlEcKUkVL5/C28WRT/VeluPFx
dOHRToi3ssrttJkluHsmpAhzT3423Ytu+gN1GLfRdT5nRxGMZbnJtlHXn8u6mFei
PuoEq+OYwHmrwzbiNa2og9YUziQJ0QKeHCYS0qcor75my1wsZO2+pNy5niTInQTp
wDbf9CcW/EHPWk//Dp1RLWO1OGMiTAhPWpqI1xwvWiFpJQU+znkQMR75Jxp1XbyG
EIbUIi3m8r1LagR5lBnA1hnu0mVIh1RoWtAFVSbqCtJieB9eBbhInTHCpmSoxJW5
5W/8zHcosg==
-----END CERTIFICATE-----
Generated at Thu Feb 26 04:59:17 2026 by rpki-client