
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742.cer
File: a3e0e865-5971-4911-9ddd-2f226be27742.cer (raw, json)
Hash identifier: Vnhr7NCPAGwYirgBOgAqLQXTciCl+c4jdYv+ztun/qQ=
Subject key identifier: 73:F8:42:35:D8:89:4B:F4:B7:21:DC:6F:73:7D:EB:12:B4:AE:DE:19
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E29677EF8F1695BAE21A13F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/a3e0e865-5971-4911-9ddd-2f226be27742.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 13 Jun 2026 20:45:11 +0000
Certificate not after: Fri 15 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 393907
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:67:7e:f8:f1:69:5b:ae:21:a1:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 13 20:45:11 2026 GMT
Not After : Sep 15 20:45:11 2028 GMT
Subject: CN=a3e0e865-5971-4911-9ddd-2f226be27742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:c7:2b:78:b5:d2:3d:7e:cd:a4:3a:ce:e1:
ce:65:8b:19:c5:68:8f:5e:d0:33:ee:1b:0d:3e:e2:
9c:66:2e:4d:29:9e:a3:7d:e3:36:52:45:9f:19:24:
4b:9f:73:0a:b1:7a:80:76:6f:88:f0:2a:58:9d:62:
47:83:7c:04:45:d5:b9:f1:d2:8f:d4:d9:5e:00:12:
bc:2a:28:65:f3:ea:f2:dc:05:eb:46:e4:1a:95:d2:
d8:65:03:09:85:16:0d:14:49:8a:20:2b:a2:60:cf:
30:8f:b8:ae:1f:7a:11:9b:39:c9:3a:62:6a:95:9d:
84:c0:a4:3d:c3:03:78:d4:b6:0d:b9:ef:b9:f1:f9:
c9:e5:b2:0e:d9:88:a4:e2:ba:52:1e:91:76:5f:81:
89:90:e5:b7:7b:83:0e:5b:ad:b7:d3:5c:d7:df:04:
f4:8b:d0:ac:ad:79:10:23:59:6f:ff:ac:32:cc:3d:
4e:19:84:44:45:7a:28:26:b6:95:99:a9:05:5d:19:
f1:4e:67:9f:5f:14:83:c6:27:89:bd:b6:94:5a:a3:
3f:99:8a:14:a4:e6:ce:12:ad:dc:0a:9b:1a:25:c2:
43:09:24:19:a8:a6:10:87:f2:ad:39:75:b1:65:ae:
0d:44:e3:c2:35:70:13:9d:22:f8:2b:f0:56:ae:91:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:42:35:D8:89:4B:F4:B7:21:DC:6F:73:7D:EB:12:B4:AE:DE:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3e0e865-5971-4911-9ddd-2f226be27742/a3e0e865-5971-4911-9ddd-2f226be27742.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393907
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:cd:8b:3b:ae:91:e8:1f:85:76:3d:bc:f9:21:32:df:3c:24:
60:a2:1c:d4:5d:f0:f7:ac:b4:cc:bc:cf:6a:fe:62:9e:29:ce:
1c:d1:5b:51:6c:e7:59:18:23:b5:1e:8d:5e:8e:7e:a0:d6:32:
ad:21:86:1f:fe:69:06:67:a2:88:50:94:f8:92:bc:f4:e7:bb:
13:5d:b7:84:cc:77:a6:b3:f0:75:7e:35:6e:1a:99:15:b3:69:
5a:18:6f:ee:d1:8e:2c:57:f6:73:fd:14:d2:2b:bf:03:12:07:
2a:2f:7b:aa:d6:35:3b:9a:5a:6d:75:9e:22:c0:e3:fd:72:97:
3e:20:af:e4:3e:23:cb:25:6a:36:5a:f7:9e:c0:5b:92:c6:13:
0a:cf:97:ed:97:a7:b2:c4:9f:86:2e:55:14:9f:ae:14:10:4d:
0e:06:ea:aa:5f:0c:15:26:1f:2c:d5:5a:bf:b8:2b:f3:27:15:
41:61:7d:14:3f:43:0a:85:63:3b:a2:99:70:eb:b0:45:2d:f1:
79:2d:6b:e8:fc:20:c4:f6:54:db:8a:0e:d4:d6:e8:74:27:de:
5b:99:fc:c6:e6:7f:39:2a:05:69:55:e3:c0:fe:52:f1:8a:ad:
51:d5:a6:5b:e0:d6:0f:32:7b:63:59:8a:4a:f4:ab:76:24:ab:
04:3f:ea:93
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4pZ3748WlbriGhP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYxMzIwNDUxMVoXDTI4MDkxNTIwNDUxMVowLzEtMCsGA1UEAxMk
YTNlMGU4NjUtNTk3MS00OTExLTlkZGQtMmYyMjZiZTI3NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzHK3i10j1+zaQ6zuHOZYsZxWiPXtAz7hsN
PuKcZi5NKZ6jfeM2UkWfGSRLn3MKsXqAdm+I8CpYnWJHg3wERdW58dKP1NleABK8
Kihl8+ry3AXrRuQaldLYZQMJhRYNFEmKICuiYM8wj7iuH3oRmznJOmJqlZ2EwKQ9
wwN41LYNue+58fnJ5bIO2Yik4rpSHpF2X4GJkOW3e4MOW62301zX3wT0i9CsrXkQ
I1lv/6wyzD1OGYRERXooJraVmakFXRnxTmefXxSDxieJvbaUWqM/mYoUpObOEq3c
CpsaJcJDCSQZqKYQh/KtOXWxZa4NROPCNXATnSL4K/BWrpFCvwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFHP4QjXYiUv0tyHcb3N96xK0rt4ZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h
M2UwZTg2NS01OTcxLTQ5MTEtOWRkZC0yZjIyNmJlMjc3NDIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EzZTBlODY1LTU5NzEtNDkxMS05
ZGRkLTJmMjI2YmUyNzc0Mi9hM2UwZTg2NS01OTcxLTQ5MTEtOWRkZC0yZjIyNmJl
Mjc3NDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgKzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGPNizuukegfhXY9vPkhMt88JGCi
HNRd8PestMy8z2r+Yp4pzhzRW1Fs51kYI7UejV6OfqDWMq0hhh/+aQZnoohQlPiS
vPTnuxNdt4TMd6az8HV+NW4amRWzaVoYb+7RjixX9nP9FNIrvwMSByove6rWNTua
Wm11niLA4/1ylz4gr+Q+I8slajZa957AW5LGEwrPl+2Xp7LEn4YuVRSfrhQQTQ4G
6qpfDBUmHyzVWr+4K/MnFUFhfRQ/QwqFYzuimXDrsEUt8Xkta+j8IMT2VNuKDtTW
6HQn3luZ/MbmfzkqBWlV48D+UvGKrVHVplvg1g8ye2NZikr0q3YkqwQ/6pM=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:25 2026 by rpki-client