
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
File: c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer (raw, json)
Hash identifier: w4gAxNo7AlJKxB37dBMad8Mfz4vN1cJD2pHM4JFZNX4=
Subject key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584D8EEDB0BA4FE18426CA78C400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 19 Apr 2026 12:45:17 +0000
Certificate not after: Sat 22 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 393581
IP: 2620:1fe::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 09 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:ed:b0:ba:4f:e1:84:26:ca:78:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Apr 19 12:45:17 2026 GMT
Not After : Jul 22 12:45:17 2028 GMT
Subject: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:2e:20:5c:42:9a:29:1a:95:74:84:33:3c:
54:7d:af:fe:3b:25:1c:e9:a5:43:aa:6c:77:50:3d:
dd:a5:9f:59:63:53:81:b8:4d:85:b5:a5:ab:fc:7a:
2a:94:2b:5b:e8:f9:60:f0:82:e7:03:35:02:ca:2d:
e7:d7:1d:25:d3:29:16:1c:7d:3b:d8:0c:71:d6:a2:
18:9e:95:22:40:17:ac:f2:1b:f6:10:09:c9:4e:a0:
84:65:69:8b:65:66:54:32:ba:70:f7:dd:3c:cb:28:
02:09:c4:1d:7d:ad:54:1a:30:15:b1:a5:da:a2:35:
fe:10:06:09:f9:f6:22:bd:0c:89:9c:11:33:62:46:
bb:af:37:8f:ea:22:c4:15:70:62:2c:10:a8:50:1f:
6e:69:d1:f7:1c:79:08:90:35:b6:7d:1a:8c:3b:5d:
7e:85:27:72:37:c8:d2:ec:48:a4:13:f9:0c:13:87:
87:fe:77:57:1f:f3:98:c8:48:71:68:da:2e:20:7a:
b4:89:4b:14:10:64:fb:c4:51:11:43:4b:4e:69:55:
fa:93:7d:47:57:e0:36:ce:06:4f:16:29:4f:6a:98:
11:83:89:d5:67:24:cb:fd:8e:04:15:08:ab:c7:3d:
6c:e3:ab:5e:46:b5:60:6a:61:02:f7:40:6e:80:32:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:1fe::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393581
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:0c:7c:cf:39:b3:b1:28:95:17:70:65:89:2e:54:34:e4:bb:
12:b0:62:d9:ba:7c:4b:4d:3b:01:21:b7:b2:b6:b7:30:83:8f:
2d:e1:c7:64:f6:51:a6:b6:65:59:bb:5d:84:77:61:d2:9b:90:
1f:79:c9:a6:9e:c4:20:cd:f3:e5:60:09:86:34:87:3b:fa:28:
46:ac:85:8f:52:f8:4e:f0:5c:5a:f5:2d:05:80:b2:08:2f:db:
34:f4:f5:90:73:cf:0e:0f:54:51:27:e9:78:79:a6:6f:33:57:
f2:03:16:52:ad:26:84:43:cd:73:1d:67:d5:b2:21:89:50:fb:
7d:63:d9:d7:7e:3c:37:44:33:26:d6:c1:8f:17:df:cf:82:ad:
bf:dd:5d:0f:15:3f:67:05:22:20:d2:66:c4:2b:07:de:88:9d:
be:5f:54:34:e0:e3:74:1f:07:5f:16:84:d7:51:6b:11:b9:7f:
c3:1f:5c:0b:a5:04:bd:6f:d0:fb:c9:55:0e:b6:a7:b0:47:96:
59:c5:99:66:21:ea:0c:ab:9e:bb:41:c5:08:c1:37:50:a3:5d:
e5:22:55:7c:f4:8a:67:e3:99:8f:82:14:94:dc:6c:ed:22:55:
9f:53:bc:ca:b8:b1:93:99:d1:ca:ab:7f:89:d8:11:89:d6:f3:
a5:0a:25:75
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE2O7bC6T+GEJsp4xAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI2MDQxOTEyNDUxN1oXDTI4MDcyMjEyNDUxN1owLzEtMCsGA1UEAxMk
YzI2NmZjNWUtOGEwNS00ODg1LThlMTgtMjMzMGE4M2ZjNWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYUuIFxCmikalXSEMzxUfa/+OyUc6aVDqmx3
UD3dpZ9ZY1OBuE2FtaWr/HoqlCtb6Plg8ILnAzUCyi3n1x0l0ykWHH072Axx1qIY
npUiQBes8hv2EAnJTqCEZWmLZWZUMrpw9908yygCCcQdfa1UGjAVsaXaojX+EAYJ
+fYivQyJnBEzYka7rzeP6iLEFXBiLBCoUB9uadH3HHkIkDW2fRqMO11+hSdyN8jS
7EikE/kME4eH/ndXH/OYyEhxaNouIHq0iUsUEGT7xFERQ0tOaVX6k31HV+A2zgZP
FilPapgRg4nVZyTL/Y4EFQirxz1s46teRrVgamEC90BugDI0QwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFM0WGd1mmYo55PxOsSQrosdjcgcqMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j
MjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgzZmM1ZjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MyNjZmYzVlLThhMDUtNDg4NS04
ZTE4LTIzMzBhODNmYzVmNi9jMjY2ZmM1ZS04YTA1LTQ4ODUtOGUxOC0yMzMwYTgz
ZmM1ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQmIAH+ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMGAW0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAXwx8zzmzsSiVF3BliS5UNOS7ErBi2bp8S007ASG3sra3
MIOPLeHHZPZRprZlWbtdhHdh0puQH3nJpp7EIM3z5WAJhjSHO/ooRqyFj1L4TvBc
WvUtBYCyCC/bNPT1kHPPDg9UUSfpeHmmbzNX8gMWUq0mhEPNcx1n1bIhiVD7fWPZ
1348N0QzJtbBjxffz4Ktv91dDxU/ZwUiINJmxCsH3oidvl9UNODjdB8HXxaE11Fr
Ebl/wx9cC6UEvW/Q+8lVDransEeWWcWZZiHqDKueu0HFCME3UKNd5SJVfPSKZ+OZ
j4IUlNxs7SJVn1O8yrixk5nRyqt/idgRidbzpQoldQ==
-----END CERTIFICATE-----
Generated at Wed May 6 23:40:59 2026 by rpki-client