
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer
File: 505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer (raw, json)
Hash identifier: Qm0tm1AND2vztS3wWaNIRfpC+5MHRGOhA0J2Ngua/zo=
Subject key identifier: 4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F5F21441BC98DEA62F7078800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 02 Oct 2026 19:24:16 +0000
Certificate not after: Fri 22 Oct 2027 13:15:44 +0000
Subordinate resources: AS: 397081
IP: 45.74.252.0/23
IP: 143.203.192.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:21:44:1b:c9:8d:ea:62:f7:07:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 2 19:24:16 2026 GMT
Not After : Oct 22 13:15:44 2027 GMT
Subject: CN=505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:f6:08:36:20:16:0f:69:40:0b:41:55:76:
45:fb:bf:e6:95:c2:8e:52:a4:97:e7:48:52:87:ee:
2c:95:31:fe:da:c3:23:05:bc:a7:b7:ec:dd:5a:06:
ff:23:81:69:3f:c7:12:de:34:0c:30:eb:cf:b5:f5:
89:43:8c:28:9c:be:d9:db:d8:04:04:61:6c:b3:31:
5d:f4:b3:af:c1:ed:2a:7e:2b:6d:ac:9e:10:ee:60:
6d:32:ed:e3:4a:ed:d8:f1:f0:d3:a5:63:ac:9d:96:
e6:ff:5a:19:01:77:cc:c8:ab:16:7c:3a:bf:75:37:
65:06:9f:d8:3d:1b:98:ce:6f:3a:55:25:65:7a:53:
0a:30:e3:10:24:ba:4a:27:25:aa:6b:67:f9:25:9b:
80:84:8a:60:41:93:63:b3:e9:ce:ea:27:b6:f5:f5:
ed:0d:3a:54:ed:9a:1e:1c:be:9d:1e:22:f3:20:fe:
b5:30:f3:a4:36:90:78:e5:19:45:68:15:77:66:d7:
14:ca:fe:cc:51:d1:44:c6:74:61:e3:7c:78:dc:4b:
fc:0b:a4:5e:55:b5:3a:66:86:e7:6d:b7:76:13:20:
ac:e6:a6:cf:4c:84:d5:42:63:0d:78:45:35:7e:34:
0e:2b:aa:89:1d:89:56:2e:7c:82:6e:b5:7d:9c:0c:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.252.0/23
143.203.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397081
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c1:f7:9d:8c:7c:03:ca:05:2e:dd:1c:9a:ab:84:ad:e2:08:
07:52:cd:2a:c8:09:40:ba:de:a6:f5:68:d7:57:df:42:2d:71:
38:0a:2f:27:42:fb:82:2f:a7:2a:ca:de:f7:c3:d1:48:fe:32:
89:08:10:4e:c9:63:da:2c:19:6d:c6:2e:04:8d:a0:60:95:ec:
2f:b8:f1:c9:44:dc:a8:ea:80:74:d6:65:fa:65:b1:73:55:49:
45:07:51:91:33:c4:52:68:b6:07:7c:12:39:13:03:ac:46:89:
f3:16:28:c1:40:12:9e:24:e8:51:bc:ff:87:5a:ce:1a:2e:53:
46:9c:0c:b3:44:84:9d:64:bf:30:08:d0:fc:6f:a8:d3:bb:af:
ea:8e:38:37:94:87:78:8c:e5:44:d1:8c:c1:cd:5b:b4:db:77:
79:5f:b0:5c:a4:9f:68:b9:ed:b6:6f:53:04:92:c9:af:bc:8b:
08:8d:a7:7d:ce:9d:bd:2a:6e:b8:d8:07:bf:a1:e4:94:67:3f:
a0:ec:b0:da:51:9b:80:19:c6:55:29:29:47:9b:ad:6f:10:c6:
56:9b:9f:a7:30:96:79:de:58:dc:a8:ab:25:03:9d:86:31:9e:
fc:86:55:78:7f:d8:79:0e:f8:b7:bc:45:8f:a3:f8:a3:77:aa:
5d:7b:6c:97
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE9fIUQbyY3qYvcHiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI2MTAwMjE5MjQxNloXDTI3MTAyMjEzMTU0NFowLzEtMCsGA1UEAxMk
NTA1ZGRkMmItYjZjYS00ZDY2LThlMWUtNzRjNmZkN2FhYmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0P2CDYgFg9pQAtBVXZF+7/mlcKOUqSX50hS
h+4slTH+2sMjBbynt+zdWgb/I4FpP8cS3jQMMOvPtfWJQ4wonL7Z29gEBGFsszFd
9LOvwe0qfittrJ4Q7mBtMu3jSu3Y8fDTpWOsnZbm/1oZAXfMyKsWfDq/dTdlBp/Y
PRuYzm86VSVlelMKMOMQJLpKJyWqa2f5JZuAhIpgQZNjs+nO6ie29fXtDTpU7Zoe
HL6dHiLzIP61MPOkNpB45RlFaBV3ZtcUyv7MUdFExnRh43x43Ev8C6ReVbU6Zobn
bbd2EyCs5qbPTITVQmMNeEU1fjQOK6qJHYlWLnyCbrV9nAxmWQIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFE2fB+biTxlrJr4sI1YWhzli7GR5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81
MDVkZGQyYi1iNmNhLTRkNjYtOGUxZS03NGM2ZmQ3YWFiYWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUwNWRkZDJiLWI2Y2EtNGQ2Ni04
ZTFlLTc0YzZmZDdhYWJhYS81MDVkZGQyYi1iNmNhLTRkNjYtOGUxZS03NGM2ZmQ3
YWFiYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAEtSvwDBAKPy8AwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDBg8ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAA7B952MfAPKBS7dHJqrhK3iCAdSzSrICUC63qb1
aNdX30ItcTgKLydC+4IvpyrK3vfD0Uj+MokIEE7JY9osGW3GLgSNoGCV7C+48clE
3KjqgHTWZfplsXNVSUUHUZEzxFJotgd8EjkTA6xGifMWKMFAEp4k6FG8/4dazhou
U0acDLNEhJ1kvzAI0PxvqNO7r+qOODeUh3iM5UTRjMHNW7Tbd3lfsFykn2i57bZv
UwSSya+8iwiNp33Onb0qbrjYB7+h5JRnP6DssNpRm4AZxlUpKUebrW8Qxlabn6cw
lnneWNyoqyUDnYYxnvyGVXh/2HkO+Le8RY+j+KN3ql17bJc=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:34:10 2026 by rpki-client