
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
File: ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer (raw, json)
Hash identifier: ojOnFx2gjTtljrJtDzXje3g9ws1q/F7kKtIJB5d7k38=
Subject key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CA5EF6487AB45C479F14AEF60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 26 Jan 2026 01:45:21 +0000
Certificate not after: Sun 30 Apr 2028 00:45:21 +0000
Subordinate resources: AS: 395567
AS: 396058
IP: 64.225.240.0/22
IP: 172.83.200.0/24
IP: 192.111.24.0/22
IP: 198.73.0.0 -- 198.73.4.255
IP: 207.65.42.0/23
IP: 216.153.24.0/22
IP: 2602:fead::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:ef:64:87:ab:45:c4:79:f1:4a:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Jan 26 01:45:21 2026 GMT
Not After : Apr 30 00:45:21 2028 GMT
Subject: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:06:ea:61:7f:e8:6a:e2:25:2a:c4:fc:e2:
93:31:c4:ca:dc:3f:02:1b:71:44:87:4f:e2:6d:32:
31:24:a8:55:75:4e:06:52:78:45:4f:ea:04:29:b8:
94:f7:6e:43:9e:92:4a:39:6f:aa:4c:8f:9c:a2:10:
80:c7:4a:53:c7:49:db:fa:a7:f8:ef:5b:42:7b:a0:
c8:b8:4b:c7:22:8d:77:df:22:c4:65:e1:98:e6:03:
fb:f3:48:03:75:fa:41:6d:78:e0:29:c9:30:d2:95:
43:6b:46:a5:86:8e:a6:1e:ca:0e:b1:57:42:86:5d:
1f:3e:97:8a:59:e6:02:0b:14:aa:fc:9d:6c:30:86:
32:4c:c4:b5:89:a1:e4:5a:21:8c:0d:50:e0:a5:5d:
2f:ee:0e:12:41:96:d8:48:e0:72:21:ff:47:3a:85:
75:54:86:d7:65:00:5b:e6:a0:73:86:fe:7b:46:24:
bc:a4:0a:df:9b:a6:a6:41:3c:0b:90:7d:0e:b7:a1:
10:89:5c:ec:e6:0d:18:ed:55:1f:9e:ea:5b:2a:ae:
bf:06:87:ee:d9:b3:cd:04:df:8c:ab:9d:f9:8a:f3:
6a:96:fa:78:d3:98:63:40:05:3c:1a:3e:97:27:5d:
1f:d3:4e:5c:fa:33:e0:ed:c5:e1:66:bd:c9:fb:dd:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
64.225.240.0/22
172.83.200.0/24
192.111.24.0/22
198.73.0.0-198.73.4.255
207.65.42.0/23
216.153.24.0/22
IPv6:
2602:fead::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395567
396058
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:eb:ac:9e:82:61:98:f4:b6:ec:d8:b6:d3:58:de:f0:ba:90:
a4:2c:b4:2e:a5:8b:c6:9d:fd:00:da:c1:23:69:e8:6b:2d:39:
ad:23:33:53:93:60:5e:69:93:22:46:91:b4:01:7b:b7:f4:d6:
25:6a:6f:4f:6b:39:07:3a:91:46:e0:f2:2a:cd:b2:93:ee:0e:
fb:9c:24:55:d8:09:ae:97:ab:d5:cf:02:8c:82:28:60:3c:04:
86:3a:87:a2:ba:6c:90:f6:4b:72:8c:8e:d7:d0:67:12:93:ee:
5f:59:a7:3b:5a:dd:dc:f8:bb:9d:48:cc:ed:8f:22:29:3c:d7:
87:3f:9d:53:b6:d7:14:74:02:84:b9:bf:1e:bc:ff:b8:53:17:
36:c0:25:6f:06:76:91:15:e5:a1:21:53:e1:af:e5:bd:62:9e:
e4:14:59:15:be:6a:93:6f:e6:83:1f:1d:f6:ec:27:c5:75:c7:
5b:d8:43:c3:13:0b:fc:99:6b:7f:12:ff:9c:5e:8f:de:72:5c:
ec:e9:97:9e:96:86:0a:3c:6f:82:ce:ff:42:16:26:a8:76:f7:
e4:c6:d4:f9:33:8a:f0:f1:9c:d4:37:07:5e:8b:6c:02:2d:77:
d6:f8:44:9d:51:2b:0e:23:fb:0c:68:28:b6:1b:15:fe:16:23:
fc:2b:1c:08
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEyl72SHq0XEefFK72AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MDEyNjAxNDUyMVoXDTI4MDQzMDAwNDUyMVowLzEtMCsGA1UEAxMk
YWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3Y2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXgG6mF/6GriJSrE/OKTMcTK3D8CG3FEh0/i
bTIxJKhVdU4GUnhFT+oEKbiU925DnpJKOW+qTI+cohCAx0pTx0nb+qf471tCe6DI
uEvHIo133yLEZeGY5gP780gDdfpBbXjgKckw0pVDa0alho6mHsoOsVdChl0fPpeK
WeYCCxSq/J1sMIYyTMS1iaHkWiGMDVDgpV0v7g4SQZbYSOByIf9HOoV1VIbXZQBb
5qBzhv57RiS8pArfm6amQTwLkH0Ot6EQiVzs5g0Y7VUfnupbKq6/Bofu2bPNBN+M
q535ivNqlvp405hjQAU8Gj6XJ10f005c+jPg7cXhZr3J+91LaQIDAQABo4IEVTCC
BFEwHQYDVR0OBBYEFEPG2WVWMIeSgkoFwdfOYaPNXT4ZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h
ZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FlNzdiNWFmLWExYjUtNDg1OC1i
NjFkLWYwOWZkNjdmN2NiMy9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3
ZjdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwVAYIKwYBBQUH
AQcBAf8ERTBDMDEEAgABMCsDBAJA4fADBACsU8gDBALAbxgwCwMDAMZJAwQAxkkE
AwQBz0EqAwQC2JkYMA4EAgACMAgDBgQmAv6tADAfBggrBgEFBQcBCAEB/wQQMA6g
DDAKAgMGCS8CAwYLGjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc66yegmGY9Lbs2LbTWN7wupCkLLQupYvG
nf0A2sEjaehrLTmtIzNTk2BeaZMiRpG0AXu39NYlam9PazkHOpFG4PIqzbKT7g77
nCRV2Amul6vVzwKMgihgPASGOoeiumyQ9ktyjI7X0GcSk+5fWac7Wt3c+LudSMzt
jyIpPNeHP51TttcUdAKEub8evP+4Uxc2wCVvBnaRFeWhIVPhr+W9Yp7kFFkVvmqT
b+aDHx327CfFdcdb2EPDEwv8mWt/Ev+cXo/eclzs6ZeeloYKPG+Czv9CFiaodvfk
xtT5M4rw8ZzUNwdei2wCLXfW+ESdUSsOI/sMaCi2GxX+FiP8KxwI
-----END CERTIFICATE-----
Generated at Sun Feb 22 16:38:38 2026 by rpki-client