
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/90d62181-53f6-4523-9b57-3027b94b5545.cer
File: 90d62181-53f6-4523-9b57-3027b94b5545.cer (raw, json)
Hash identifier: IGytDP8+qGNxEcWeIdMFfCaTNpyLFShJLQ5VB8y1c34=
Subject key identifier: 16:F1:D9:FC:BA:AB:EA:A7:E2:D1:A7:91:59:00:91:F7:E9:81:F2:E0
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D093ECBA8F575989CB9CAF990
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/90d62181-53f6-4523-9b57-3027b94b5545/90d62181-53f6-4523-9b57-3027b94b5545.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/90d62181-53f6-4523-9b57-3027b94b5545/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 02 Mar 2026 15:30:23 +0000
Certificate not after: Sun 04 Jun 2028 14:30:23 +0000
Subordinate resources: AS: 401707
IP: 78.109.20.0/22
IP: 2602:f4dc::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:3e:cb:a8:f5:75:98:9c:b9:ca:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 2 15:30:23 2026 GMT
Not After : Jun 4 14:30:23 2028 GMT
Subject: CN=90d62181-53f6-4523-9b57-3027b94b5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:de:82:e7:2b:58:02:b7:a5:bb:ea:03:62:
82:a6:d9:7d:86:b7:bd:4f:4c:85:f8:07:03:a9:cc:
23:10:c0:3c:e1:d8:0b:ce:12:9e:93:b6:44:d1:9b:
0b:a1:a2:5c:f9:f1:10:f6:9a:3e:d3:f8:d9:f9:5c:
b9:13:f6:7e:a2:41:75:f0:7e:0c:6b:a6:78:07:84:
82:b3:49:70:19:c5:32:86:34:59:0e:c3:f7:19:d4:
f3:45:61:82:c6:6e:3b:e8:df:1f:67:2d:e0:8d:ea:
88:53:76:6d:f3:f1:f9:cb:da:77:22:ad:dd:02:31:
cf:c3:15:2d:0a:fb:94:ca:cc:bd:97:03:ae:9a:72:
b8:e7:1a:7b:25:9b:28:81:a3:cd:c7:2e:f4:3e:e8:
34:b4:6c:7b:b0:9c:0a:fc:e8:32:b2:45:de:76:0d:
15:be:7d:87:a6:8f:cf:74:13:1c:45:f7:c6:2b:4b:
1a:08:4b:56:45:b2:92:77:de:20:4e:f6:e1:ff:85:
f4:86:21:a4:48:8e:99:82:ec:7e:e9:e0:7d:bf:8a:
06:bc:ac:0e:9e:12:b3:e7:4c:8d:37:4a:13:a4:95:
1a:90:12:4e:a4:d8:bd:05:74:ae:db:01:e1:b8:e6:
62:53:35:7b:2f:53:61:f7:16:f8:f9:f8:6a:2a:d6:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:D9:FC:BA:AB:EA:A7:E2:D1:A7:91:59:00:91:F7:E9:81:F2:E0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/90d62181-53f6-4523-9b57-3027b94b5545/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/90d62181-53f6-4523-9b57-3027b94b5545/90d62181-53f6-4523-9b57-3027b94b5545.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
78.109.20.0/22
IPv6:
2602:f4dc::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401707
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:7f:f0:9a:0f:12:12:05:57:ee:b6:2e:b5:9c:eb:fd:61:9c:
ff:32:16:1f:0e:17:85:89:7d:ec:7b:5c:ca:d9:ea:4b:18:c6:
88:b5:34:6c:55:83:4d:e1:0c:c0:55:87:e8:6d:1e:d3:5e:36:
39:24:e4:9e:f0:49:07:96:c8:89:4c:70:99:61:cc:c9:f8:78:
d5:41:ee:aa:47:e0:85:10:83:ea:78:66:b1:28:28:35:f1:9a:
9e:e3:e4:39:bb:29:da:c3:e0:88:6b:e2:46:6a:ec:ae:80:08:
22:e6:b5:76:dc:10:ed:37:89:44:ce:7f:52:e5:ef:6d:c5:03:
b4:12:76:48:ab:13:75:f8:3e:d0:47:79:42:ad:22:0b:a2:33:
ba:b2:22:e8:aa:01:c4:73:a2:ab:54:a9:5d:cc:bd:f0:ff:35:
1e:5e:26:27:05:93:ed:63:c0:8d:a6:77:17:b4:80:7f:f8:3a:
c8:79:7b:33:6d:b4:93:77:82:61:d9:39:36:11:dc:a5:b2:f5:
01:eb:e2:23:1b:7e:4a:16:a2:1e:0c:a0:1d:02:b7:81:95:77:
03:45:77:6f:18:bf:06:41:86:54:25:bb:ac:e5:10:a7:46:03:
37:b6:bb:6c:e0:ad:64:f6:72:68:f4:30:64:56:ec:1b:9d:1b:
02:90:03:34
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0JPsuo9XWYnLnK+ZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDMwMjE1MzAyM1oXDTI4MDYwNDE0MzAyM1owLzEtMCsGA1UEAxMk
OTBkNjIxODEtNTNmNi00NTIzLTliNTctMzAyN2I5NGI1NTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5zegucrWAK3pbvqA2KCptl9hre9T0yF+AcD
qcwjEMA84dgLzhKek7ZE0ZsLoaJc+fEQ9po+0/jZ+Vy5E/Z+okF18H4Ma6Z4B4SC
s0lwGcUyhjRZDsP3GdTzRWGCxm476N8fZy3gjeqIU3Zt8/H5y9p3Iq3dAjHPwxUt
CvuUysy9lwOumnK45xp7JZsogaPNxy70Pug0tGx7sJwK/OgyskXedg0Vvn2Hpo/P
dBMcRffGK0saCEtWRbKSd94gTvbh/4X0hiGkSI6Zgux+6eB9v4oGvKwOnhKz50yN
N0oTpJUakBJOpNi9BXSu2wHhuOZiUzV7L1Nh9xb4+fhqKta6mwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFBbx2fy6q+qn4tGnkVkAkffpgfLgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85
MGQ2MjE4MS01M2Y2LTQ1MjMtOWI1Ny0zMDI3Yjk0YjU1NDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzkwZDYyMTgxLTUzZjYtNDUyMy05
YjU3LTMwMjdiOTRiNTU0NS85MGQ2MjE4MS01M2Y2LTQ1MjMtOWI1Ny0zMDI3Yjk0
YjU1NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAJObRQwDgQCAAIwCAMGACYC9NwAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYhKzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5f/CaDxISBVfuti61nOv9YZz/
MhYfDheFiX3se1zK2epLGMaItTRsVYNN4QzAVYfobR7TXjY5JOSe8EkHlsiJTHCZ
YczJ+HjVQe6qR+CFEIPqeGaxKCg18Zqe4+Q5uynaw+CIa+JGauyugAgi5rV23BDt
N4lEzn9S5e9txQO0EnZIqxN1+D7QR3lCrSILojO6siLoqgHEc6KrVKldzL3w/zUe
XiYnBZPtY8CNpncXtIB/+DrIeXszbbSTd4Jh2Tk2EdylsvUB6+IjG35KFqIeDKAd
AreBlXcDRXdvGL8GQYZUJbus5RCnRgM3trts4K1k9nJo9DBkVuwbnRsCkAM0
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:10:59 2026 by rpki-client