
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
File: e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer (raw, json)
Hash identifier: TqOQfCwqD8wbiznbesPAsjVQNFbFCNAEy9z1jsjzi28=
Subject key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E43ECFEBC175D6D1A97B9D6E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 23 Jun 2026 08:45:11 +0000
Certificate not after: Mon 25 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 6432
AS: 16591
AS: 19448
IP: 23.228.128.0/18
IP: 23.255.128.0/17
IP: 45.56.0.0/18
IP: 99.198.128.0/17
IP: 107.188.128.0/17
IP: 136.23.128.0/17
IP: 136.32.0.0/11
IP: 136.96.0.0 -- 136.106.255.255
IP: 192.119.16.0/20
IP: 192.200.224.0/19
IP: 216.21.160.0/20
IP: 2605:a600::/31
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:43:ec:fe:bc:17:5d:6d:1a:97:b9:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 23 08:45:11 2026 GMT
Not After : Sep 25 08:45:11 2028 GMT
Subject: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:02:a5:5a:2e:fd:ad:20:03:e9:d6:9b:82:
b8:2e:fc:a4:52:55:7c:62:ea:3e:bf:cf:bf:32:3e:
fc:1d:ea:7c:2a:af:32:f2:ac:3e:57:62:86:d1:e0:
4e:45:aa:6e:9e:ae:50:fc:d9:6d:08:ff:24:d2:42:
fe:c6:bd:93:cb:ca:7f:1c:90:13:db:3d:aa:a4:fc:
92:6d:84:bd:bd:c3:7f:04:d9:3b:b7:bd:2b:01:d7:
62:1d:92:b2:fc:cd:0d:b4:fe:28:f5:0b:c7:00:13:
17:83:a2:9b:cc:88:54:22:e4:9a:1f:87:cd:ea:68:
c3:fb:92:09:7c:59:0d:14:d4:87:18:32:55:b7:3b:
66:0b:30:1f:1e:84:eb:8c:a1:f1:5f:ed:9c:43:28:
f7:6e:bd:7d:4a:a2:fc:d6:f7:e9:56:d9:e4:4c:47:
59:fc:c1:e6:11:06:ca:a6:90:62:d2:f1:d7:8b:02:
2d:2d:d3:b7:2c:dd:a1:71:7d:55:66:f8:fb:c6:4e:
58:68:09:05:55:d6:45:86:e1:2d:d6:fb:da:d2:ff:
87:de:02:c5:0b:f6:2f:1d:eb:8b:ab:8f:00:29:59:
9f:b0:1b:9c:44:fb:46:2d:5b:c7:9c:65:05:13:d8:
b9:0d:e7:43:3b:b0:1b:03:ed:e7:fa:36:2c:48:5d:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.228.128.0/18
23.255.128.0/17
45.56.0.0/18
99.198.128.0/17
107.188.128.0/17
136.23.128.0/17
136.32.0.0/11
136.96.0.0-136.106.255.255
192.119.16.0/20
192.200.224.0/19
216.21.160.0/20
IPv6:
2605:a600::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6432
16591
19448
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ce:00:ea:5f:17:ba:53:2a:83:6a:a6:a9:25:5d:e9:55:51:
c8:6f:75:70:5f:28:54:d0:c5:ff:2b:a6:b1:4e:84:2b:d0:8e:
ee:14:31:42:d0:59:10:bb:01:16:c1:be:ac:73:b9:ae:d3:34:
71:50:6c:de:8d:4e:78:f2:ad:cd:fd:41:95:b7:b6:be:12:63:
0a:be:16:1d:ce:db:78:ce:16:d8:7d:28:8b:27:9c:4b:31:c3:
1f:ea:a4:6a:9d:ac:ca:6f:61:6e:8e:69:20:46:95:ef:31:62:
1a:7e:3e:6d:1f:17:83:b7:d1:f6:03:d8:f4:ff:5a:21:01:1a:
57:12:41:d1:cc:66:89:ad:72:fc:f4:f1:33:08:c0:88:93:9a:
aa:e9:57:24:65:97:e2:a9:43:ee:bc:63:ab:df:ee:fe:71:c1:
e6:c2:b6:db:46:4e:40:dd:06:01:a0:40:3b:34:72:38:95:7a:
68:3e:da:6c:25:af:f8:78:60:36:8b:20:67:22:2b:8a:2e:37:
64:3e:fb:4b:7e:02:d3:75:c0:6d:66:60:cd:0a:bb:6c:85:0f:
29:11:c3:cf:84:f2:0c:d9:2f:cb:f2:69:b9:8f:23:76:fd:ad:
da:d4:ee:d1:12:68:80:cd:54:61:1c:05:4e:e3:a2:73:fa:83:
52:88:e0:c3
-----BEGIN CERTIFICATE-----
MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWE5D7P68F11tGpe51uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYyMzA4NDUxMVoXDTI4MDkyNTA4NDUxMVowLzEtMCsGA1UEAxMk
ZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2ZjlhMzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobkCpVou/a0gA+nWm4K4LvykUlV8Yuo+v8+/
Mj78Hep8Kq8y8qw+V2KG0eBORapunq5Q/NltCP8k0kL+xr2Ty8p/HJAT2z2qpPyS
bYS9vcN/BNk7t70rAddiHZKy/M0NtP4o9QvHABMXg6KbzIhUIuSaH4fN6mjD+5IJ
fFkNFNSHGDJVtztmCzAfHoTrjKHxX+2cQyj3br19SqL81vfpVtnkTEdZ/MHmEQbK
ppBi0vHXiwItLdO3LN2hcX1VZvj7xk5YaAkFVdZFhuEt1vva0v+H3gLFC/YvHeuL
q48AKVmfsBucRPtGLVvHnGUFE9i5DedDO7AbA+3n+jYsSF0KTwIDAQABo4IEcjCC
BG4wHQYDVR0OBBYEFNwaIz1mB2ang4HjrVDpY33DugJMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
N2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U3YjY1Y2E1LWVhZDgtNDI2OC1i
YzFhLTRjYTQwNmY5YTM0ZS9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZm
OWEzNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwbwYIKwYBBQUH
AQcBAf8EYDBeME0EAgABMEcDBAYX5IADBAcX/4ADBAYtOAADBAdjxoADBAdrvIAD
BAeIF4ADAwWIIDAKAwMFiGADAwCIagMEBMB3EAMEBcDI4AMEBNgVoDANBAIAAjAH
AwUBJgWmADAhBggrBgEFBQcBCAEB/wQSMBCgDjAMAgIZIAICQM8CAkv4MFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAA/OAOpfF7pTKoNqpqklXelVUchvdXBfKFTQxf8rprFOhCvQju4UMULQWRC7
ARbBvqxzua7TNHFQbN6NTnjyrc39QZW3tr4SYwq+Fh3O23jOFth9KIsnnEsxwx/q
pGqdrMpvYW6OaSBGle8xYhp+Pm0fF4O30fYD2PT/WiEBGlcSQdHMZomtcvz08TMI
wIiTmqrpVyRll+KpQ+68Y6vf7v5xwebCtttGTkDdBgGgQDs0cjiVemg+2mwlr/h4
YDaLIGciK4ouN2Q++0t+AtN1wG1mYM0Ku2yFDykRw8+E8gzZL8vyabmPI3b9rdrU
7tESaIDNVGEcBU7jonP6g1KI4MM=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:41 2026 by rpki-client