
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
File: c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer (raw, json)
Hash identifier: 3HKLC08jpc+kQqDpmDGB1Y4kdnlfyNlhTDeZXObgess=
Subject key identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E41224F6E87D477CA054E2420
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 22 Jun 2026 08:45:11 +0000
Certificate not after: Sun 24 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 62902
IP: 2607:2540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 01 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:22:4f:6e:87:d4:77:ca:05:4e:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 22 08:45:11 2026 GMT
Not After : Sep 24 08:45:11 2028 GMT
Subject: CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:20:c9:3a:ee:40:c5:fa:51:54:07:a6:32:ab:
bd:d7:b3:a7:58:32:d1:1c:ab:ca:81:e0:69:cb:49:
b3:d4:da:01:ee:ed:6d:64:d5:20:a7:c0:e3:f1:ab:
f3:a4:a3:dd:9b:22:d8:a0:c7:e4:93:fc:6b:29:91:
2c:8b:a6:3e:6e:e8:07:64:88:42:95:db:81:27:76:
5d:7b:f4:00:93:b2:63:9c:02:1f:e2:42:15:db:97:
bc:bf:4a:fe:08:9a:b6:94:06:ea:05:4f:1e:59:b4:
66:90:7a:af:e8:43:c3:4b:6c:31:5f:ed:36:4d:99:
61:33:d3:40:0a:70:86:33:c7:61:79:41:51:83:e9:
12:62:83:49:f4:0d:8a:ee:f0:e1:34:f3:96:25:12:
f0:37:db:54:d3:fc:fe:b9:e9:ed:57:30:11:ca:30:
98:0d:51:e4:ad:31:68:7d:e6:14:3a:6a:9d:a9:55:
02:00:b1:3a:b1:5b:f0:f3:a1:00:dc:6c:55:a9:25:
8b:a8:a5:94:95:45:81:2b:5e:d4:57:89:06:ed:c7:
97:16:ab:96:6f:0c:e7:ad:c0:4e:32:38:fe:44:07:
db:01:4d:b8:45:ec:1f:5c:c9:9d:2a:43:66:19:03:
c6:e8:01:ec:47:c9:b7:7e:01:f2:fb:5e:a0:07:88:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:2540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62902
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:da:c3:c4:fe:3e:55:62:43:b6:f0:dd:bb:b4:da:ff:30:c7:
11:40:ba:be:46:6b:f6:bb:22:5d:2e:ff:b5:30:17:0b:c9:a5:
79:77:23:6a:d7:2b:7e:aa:d8:39:16:04:1e:f3:4d:50:f9:a7:
df:21:40:17:af:7c:40:7e:58:94:64:12:fe:6b:3f:53:04:22:
55:3b:77:f5:e9:49:f2:7c:15:b5:80:5c:13:52:0d:78:3c:be:
f0:bd:e5:ab:1d:7e:83:b7:68:93:18:f7:7f:1a:a8:3e:fe:c7:
a7:1d:61:30:46:99:64:8f:28:22:1b:8c:47:f6:ed:3c:2a:a7:
cb:de:de:c9:93:df:a6:08:48:c5:22:c9:cb:f9:11:cd:c9:fa:
9e:60:8f:f2:ea:2f:f2:c2:29:a3:91:8c:c7:86:d9:a9:80:a6:
8c:7b:00:85:20:8c:b6:72:39:fb:a6:6e:d1:68:9e:70:5a:d9:
b6:68:84:16:1a:a3:11:df:95:e6:40:64:b1:33:68:c9:0e:0b:
26:cb:34:73:37:ec:71:8a:12:0e:fb:ff:da:27:18:da:ae:41:
5a:d0:e9:eb:7b:01:b2:1f:1d:fc:6b:60:1d:8d:1c:3e:a4:d4:
48:6e:25:6d:e3:5b:98:5e:78:56:7c:be:dd:30:16:bd:60:53:
c0:4c:34:10
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWE5BIk9uh9R3ygVOJCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYyMjA4NDUxMVoXDTI4MDkyNDA4NDUxMVowLzEtMCsGA1UEAxMk
YzMwNWY2NWUtNTRhMC00MWVjLWI2NWMtYWU5MWVjYTZjY2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyDJOu5AxfpRVAemMqu917OnWDLRHKvKgeBp
y0mz1NoB7u1tZNUgp8Dj8avzpKPdmyLYoMfkk/xrKZEsi6Y+bugHZIhClduBJ3Zd
e/QAk7JjnAIf4kIV25e8v0r+CJq2lAbqBU8eWbRmkHqv6EPDS2wxX+02TZlhM9NA
CnCGM8dheUFRg+kSYoNJ9A2K7vDhNPOWJRLwN9tU0/z+uentVzARyjCYDVHkrTFo
feYUOmqdqVUCALE6sVvw86EA3GxVqSWLqKWUlUWBK17UV4kG7ceXFquWbwznrcBO
Mjj+RAfbAU24RewfXMmdKkNmGQPG6AHsR8m3fgHy+16gB4iJWwIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFMnad8d7J0ZOtoH2pGVnPUXF1MUzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j
MzA1ZjY1ZS01NGEwLTQxZWMtYjY1Yy1hZTkxZWNhNmNjYTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2MzMDVmNjVlLTU0YTAtNDFlYy1i
NjVjLWFlOTFlY2E2Y2NhMC9jMzA1ZjY1ZS01NGEwLTQxZWMtYjY1Yy1hZTkxZWNh
NmNjYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmByVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwD1tjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQCT2sPE/j5VYkO28N27tNr/MMcRQLq+Rmv2uyJdLv+1MBcL
yaV5dyNq1yt+qtg5FgQe801Q+affIUAXr3xAfliUZBL+az9TBCJVO3f16UnyfBW1
gFwTUg14PL7wveWrHX6Dt2iTGPd/Gqg+/senHWEwRplkjygiG4xH9u08KqfL3t7J
k9+mCEjFIsnL+RHNyfqeYI/y6i/ywimjkYzHhtmpgKaMewCFIIy2cjn7pm7RaJ5w
Wtm2aIQWGqMR35XmQGSxM2jJDgsmyzRzN+xxihIO+//aJxjarkFa0OnrewGyHx38
a2AdjRw+pNRIbiVt41uYXnhWfL7dMBa9YFPATDQQ
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:42 2026 by rpki-client