
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
File: 1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer (raw, json)
Hash identifier: VD/UyMaFgPH3zCNzTBAlnmHnQ5RGccRItE2oNW9Gl2U=
Subject key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584E4C4D0C1403EBC885554DB100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Jun 2026 08:45:11 +0000
Certificate not after: Thu 28 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 53844
IP: 199.187.168.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:4d:0c:14:03:eb:c8:85:55:4d:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jun 26 08:45:11 2026 GMT
Not After : Sep 28 08:45:11 2028 GMT
Subject: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:04:d8:6f:a3:f3:b2:cb:db:24:9f:ba:bd:
60:de:a2:97:fe:68:67:eb:08:c7:6c:ac:50:9c:0f:
49:80:1f:e3:a5:ef:5f:94:03:84:de:da:4e:1c:e0:
ad:0d:fe:ba:d3:49:46:67:9e:c4:e0:44:de:be:52:
33:e8:77:3e:39:4b:81:75:1c:e1:e2:31:e9:6f:8b:
53:ad:ed:cc:0c:7f:cf:84:3d:4e:ff:c6:3b:5a:61:
15:d7:c4:9c:c6:33:80:81:12:5c:9e:5b:21:ab:d9:
0f:c6:74:9f:8a:62:f4:63:84:fa:3a:b1:de:3d:50:
e0:1b:a6:d9:46:7d:d6:c9:85:61:85:60:07:10:d0:
72:c4:26:ed:b4:29:1d:b6:9c:ec:8c:90:e9:8d:32:
22:bf:53:4e:19:84:0b:59:43:c9:db:c9:1d:4a:39:
05:7a:8f:71:57:c8:65:87:6a:50:ca:17:70:3c:ec:
59:38:33:fc:ae:e3:5d:df:b0:35:11:34:8a:38:e4:
4a:44:fd:79:37:2f:a1:98:64:a2:75:e7:de:2d:0b:
96:e8:59:d6:e0:df:7e:34:ec:45:c2:29:5d:af:e7:
3e:e2:ae:1a:fc:5c:32:7f:aa:1a:da:b7:ef:af:dd:
29:12:12:13:22:0e:94:37:b4:5f:92:fa:ca:a2:0b:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
199.187.168.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53844
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e8:0e:c7:53:68:0e:46:bb:27:a2:35:7e:a8:00:38:83:07:
de:a1:5d:02:dd:54:fb:6c:55:16:b7:b7:4e:0b:96:bc:cf:ff:
28:29:b1:98:78:8e:a1:9e:a8:73:86:69:25:ee:e7:b0:68:50:
e4:a8:aa:eb:1f:c1:f0:3c:32:fe:1c:c3:42:44:62:6a:ec:18:
b5:8f:38:cc:04:ea:78:6f:b0:98:6c:73:59:e9:9e:75:5a:8b:
14:1c:06:b2:11:cd:b5:f7:ac:39:62:b3:0f:22:a6:78:75:09:
29:5b:fe:48:44:76:2e:01:00:14:bd:74:b7:5f:e8:f8:89:f2:
5a:c9:e3:1b:c6:ae:dc:42:08:58:0f:76:bf:d8:6e:ee:fd:f2:
79:f4:2d:17:a2:61:7d:31:b5:04:e9:f8:ed:5d:68:1b:42:6c:
a1:85:7c:8f:a8:10:6e:83:8d:33:97:ce:71:9b:56:9d:a7:43:
f9:44:38:8e:be:94:ee:03:e2:fd:1c:a4:0c:87:60:c8:ae:e5:
ef:80:04:67:c8:19:37:4a:98:b0:75:b8:5d:12:0b:c2:d9:31:
74:4d:b0:e0:1c:7b:cf:b9:a8:76:84:6e:79:5d:7a:0a:39:69:
08:61:39:3a:0f:3f:fb:cc:73:3a:18:e1:3c:ca:28:04:cc:9c:
a0:a8:8e:db
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE5MTQwUA+vIhVVNsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI2MDYyNjA4NDUxMVoXDTI4MDkyODA4NDUxMVowLzEtMCsGA1UEAxMk
MWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNkYTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IYE2G+j87LL2ySfur1g3qKX/mhn6wjHbKxQ
nA9JgB/jpe9flAOE3tpOHOCtDf6600lGZ57E4ETevlIz6Hc+OUuBdRzh4jHpb4tT
re3MDH/PhD1O/8Y7WmEV18ScxjOAgRJcnlshq9kPxnSfimL0Y4T6OrHePVDgG6bZ
Rn3WyYVhhWAHENByxCbttCkdtpzsjJDpjTIiv1NOGYQLWUPJ28kdSjkFeo9xV8hl
h2pQyhdwPOxZODP8ruNd37A1ETSKOORKRP15Ny+hmGSidefeLQuW6FnW4N9+NOxF
wildr+c+4q4a/Fwyf6oa2rfvr90pEhITIg6UN7RfkvrKogtgIwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFNU/FF9BU1rwQcLSv307UOY1Mv/UMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x
Y2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzFjZjQzNWMwLTlkMjgtNDc3YS05
MGE5LTFiNGZkNzVjZGE3Ni8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1
Y2RhNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALHu6gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ANJUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHzoDsdTaA5GuyeiNX6oADiDB96hXQLdVPtsVRa3t04LlrzP
/ygpsZh4jqGeqHOGaSXu57BoUOSoqusfwfA8Mv4cw0JEYmrsGLWPOMwE6nhvsJhs
c1npnnVaixQcBrIRzbX3rDlisw8ipnh1CSlb/khEdi4BABS9dLdf6PiJ8lrJ4xvG
rtxCCFgPdr/Ybu798nn0LReiYX0xtQTp+O1daBtCbKGFfI+oEG6DjTOXznGbVp2n
Q/lEOI6+lO4D4v0cpAyHYMiu5e+ABGfIGTdKmLB1uF0SC8LZMXRNsOAce8+5qHaE
bnldego5aQhhOToPP/vMczoY4TzKKATMnKCojts=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:23:43 2026 by rpki-client