
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer
File: b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer (raw, json)
Hash identifier: 5eF95/fFHc8QidcROwkKoCV/EMvmMb+EGLZdCej8zDA=
Subject key identifier: 86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584B71D099C2C9028A78D6237B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Oct 2025 16:54:21 +0000
Certificate not after: Tue 14 Sep 2027 19:03:23 +0000
Subordinate resources: AS: 400779
IP: 66.132.212.0/22
IP: 131.143.104.0/22
IP: 2607:c440::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:71:d0:99:c2:c9:02:8a:78:d6:23:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Oct 7 16:54:21 2025 GMT
Not After : Sep 14 19:03:23 2027 GMT
Subject: CN=b5cf26ad-4d46-4540-80d9-8a26a8c8ac61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:cd:03:c6:17:d3:4a:a2:65:d4:05:09:e5:
68:90:9e:21:d7:a9:67:91:66:02:d3:98:48:26:9d:
ad:58:ee:ae:16:ec:7e:5d:5b:fe:2d:67:cf:05:15:
f4:e7:30:28:e2:d0:c9:ef:15:fa:41:78:da:53:a6:
ac:ac:44:26:0b:4d:50:00:ad:c3:06:64:13:f5:da:
ea:da:b9:cd:48:fc:99:c3:f8:6b:18:58:2f:57:b6:
57:e3:0d:5c:1d:f4:22:ce:5d:4d:13:67:fe:e7:6a:
dc:98:96:7e:4e:b6:ca:f4:4f:0c:51:35:3f:14:03:
9d:f5:ce:4a:b1:20:9e:e9:e2:69:cd:72:b3:f1:22:
78:29:b9:42:e1:1e:74:65:47:eb:2e:4b:2a:64:bd:
38:8d:c7:89:f0:ee:43:f9:0d:e7:2b:ad:07:fe:21:
94:6c:3c:d8:bb:ee:6a:25:36:15:ea:f5:dc:88:99:
a8:f7:73:b7:3c:b7:20:67:d6:5b:a5:43:bb:d6:ba:
07:d6:76:1a:75:18:50:b6:4b:fe:65:53:40:0d:68:
77:2a:da:d8:f4:29:56:d4:16:7b:30:36:20:f1:93:
e2:76:eb:6d:5b:29:ef:63:f8:16:93:8d:db:ef:6a:
44:d3:75:69:28:0c:c7:f7:f4:07:d5:01:96:92:29:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.212.0/22
131.143.104.0/22
IPv6:
2607:c440::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400779
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:71:b9:2a:70:73:0b:6c:18:06:69:95:2b:5c:77:fb:7e:00:
c2:49:d4:0c:2a:56:f8:dd:8e:55:8d:da:2c:df:96:6c:bb:ae:
24:c2:68:41:d4:e2:44:03:85:d8:cf:14:63:62:7d:45:09:7e:
bd:85:94:48:e1:88:4c:72:e9:32:df:46:21:6f:5d:64:7b:de:
e3:c9:94:ec:36:76:51:91:64:cc:c2:ad:5a:e2:ef:3f:4c:64:
36:5f:7e:4c:eb:76:91:f0:b0:6e:84:b7:ac:ff:19:6d:24:14:
76:d4:33:1c:4b:80:b1:3b:9f:9d:63:b7:24:93:21:54:d9:cc:
44:6d:02:7b:d5:26:10:85:15:6a:e8:48:42:e7:2d:f7:3f:48:
46:70:b2:ac:8f:3e:02:76:8e:ff:46:f9:37:98:2f:d1:bf:06:
d1:a6:c8:d9:7b:0c:dd:7c:1d:13:de:01:35:96:54:2b:bb:35:
55:0b:52:20:c2:12:d7:7c:c5:54:5d:08:63:92:e4:08:c2:c5:
bb:6c:fa:68:5b:fe:95:39:9c:e9:29:ac:12:b6:cb:ba:4c:ca:
30:3b:dc:a2:d7:32:97:02:de:d0:d8:e4:e6:08:7a:81:f0:67:
9f:ab:75:a3:17:73:bd:d8:d5:56:00:3b:bf:b0:97:ba:08:e4:
6a:3a:d1:64
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEtx0JnCyQKKeNYjewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MTAwNzE2NTQyMVoXDTI3MDkxNDE5MDMyM1owLzEtMCsGA1UEAxMk
YjVjZjI2YWQtNGQ0Ni00NTQwLTgwZDktOGEyNmE4YzhhYzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rvNA8YX00qiZdQFCeVokJ4h16lnkWYC05hI
Jp2tWO6uFux+XVv+LWfPBRX05zAo4tDJ7xX6QXjaU6asrEQmC01QAK3DBmQT9drq
2rnNSPyZw/hrGFgvV7ZX4w1cHfQizl1NE2f+52rcmJZ+TrbK9E8MUTU/FAOd9c5K
sSCe6eJpzXKz8SJ4KblC4R50ZUfrLksqZL04jceJ8O5D+Q3nK60H/iGUbDzYu+5q
JTYV6vXciJmo93O3PLcgZ9ZbpUO71roH1nYadRhQtkv+ZVNADWh3KtrY9ClW1BZ7
MDYg8ZPiduttWynvY/gWk43b72pE03VpKAzH9/QH1QGWkilRJQIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFIai3k4dVLk1l7h6jIKFIjNHzbC3MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i
NWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThjOGFjNjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I1Y2YyNmFkLTRkNDYtNDU0MC04
MGQ5LThhMjZhOGM4YWM2MS9iNWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThj
OGFjNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJChNQDBAKDj2gwDQQCAAIwBwMFACYHxEAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBh2LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAlxuSpwcwtsGAZplStc
d/t+AMJJ1AwqVvjdjlWN2izflmy7riTCaEHU4kQDhdjPFGNifUUJfr2FlEjhiExy
6TLfRiFvXWR73uPJlOw2dlGRZMzCrVri7z9MZDZffkzrdpHwsG6Et6z/GW0kFHbU
MxxLgLE7n51jtySTIVTZzERtAnvVJhCFFWroSELnLfc/SEZwsqyPPgJ2jv9G+TeY
L9G/BtGmyNl7DN18HRPeATWWVCu7NVULUiDCEtd8xVRdCGOS5AjCxbts+mhb/pU5
nOkprBK2y7pMyjA73KLXMpcC3tDY5OYIeoHwZ5+rdaMXc73Y1VYAO7+wl7oI5Go6
0WQ=
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:23:56 2025 by rpki-client