
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a64279c7-02fa-4b37-9785-e2849b6b3e81.cer
File: a64279c7-02fa-4b37-9785-e2849b6b3e81.cer (raw, json)
Hash identifier: ZqTeGMzZ+vWPqyZdPpR4uDiOLuNfNtl8Mz/p9snVo7A=
Subject key identifier: FA:55:10:F2:DD:F3:54:19:2C:B0:D6:21:B8:2B:00:64:C7:A4:A9:5B
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DCD8BCC58FB7C621DD7F8C140
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a64279c7-02fa-4b37-9785-e2849b6b3e81/a64279c7-02fa-4b37-9785-e2849b6b3e81.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a64279c7-02fa-4b37-9785-e2849b6b3e81/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 11 May 2026 23:03:58 +0000
Certificate not after: Sun 13 Aug 2028 23:03:58 +0000
Subordinate resources: AS: 55045
AS: 396839
IP: 72.18.84.0/22
IP: 108.161.128.0/20
IP: 2606:4300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cd:8b:cc:58:fb:7c:62:1d:d7:f8:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 11 23:03:58 2026 GMT
Not After : Aug 13 23:03:58 2028 GMT
Subject: CN=a64279c7-02fa-4b37-9785-e2849b6b3e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:8b:cc:4f:96:80:58:97:18:ad:04:a9:90:
e2:f1:18:20:43:ea:83:a2:fe:ae:ce:d9:30:d0:11:
57:54:ce:5b:8f:f9:4e:bd:17:7a:b1:e6:68:35:f9:
6a:f0:af:95:6b:27:ee:b7:99:99:c3:57:c7:56:5f:
4b:68:90:23:85:2f:fc:46:3d:92:15:07:09:f3:53:
7f:88:2e:d8:bd:f8:96:bb:d3:02:3f:d3:e8:52:64:
f8:c1:5b:78:a2:4d:95:a7:6c:23:7a:9f:dd:9d:30:
4a:03:9c:90:70:c2:6f:1c:72:48:16:05:d4:79:e7:
80:71:a3:18:ed:23:ec:49:f0:b3:3e:8b:e4:f1:c3:
1f:18:34:1d:0e:1c:d3:5e:90:34:b0:b4:4c:ff:38:
64:58:87:80:99:4a:b0:a1:64:fd:b3:a8:c5:e2:3a:
3a:bb:c3:2a:20:8b:2a:12:38:15:1f:2c:e6:bd:b1:
4f:04:f5:b5:16:30:3f:23:c9:95:9b:e8:f9:1e:cf:
10:b7:ce:98:58:bd:df:cc:cf:4f:2b:ae:38:ef:25:
02:04:e6:70:ae:92:73:1e:95:61:e6:c9:a2:56:5a:
95:03:7a:f8:c9:73:05:6c:a3:41:94:33:60:62:b5:
05:09:54:6b:f8:3a:81:ae:44:01:3d:e5:63:a8:95:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:10:F2:DD:F3:54:19:2C:B0:D6:21:B8:2B:00:64:C7:A4:A9:5B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a64279c7-02fa-4b37-9785-e2849b6b3e81/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a64279c7-02fa-4b37-9785-e2849b6b3e81/a64279c7-02fa-4b37-9785-e2849b6b3e81.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.84.0/22
108.161.128.0/20
IPv6:
2606:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55045
396839
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:03:da:8d:9a:5c:ec:08:8a:e8:bc:7f:33:e5:c4:92:05:48:
83:13:26:6f:18:87:e5:89:17:f2:a7:90:e2:2d:06:7f:96:98:
73:48:a9:5b:66:7e:a0:96:e3:ea:0b:21:e4:0d:ae:49:a0:cf:
30:eb:6f:3e:05:d2:49:2d:47:7e:6a:8b:e5:f1:d5:ad:d9:cf:
63:fd:d0:04:a3:34:66:f2:c3:36:3b:39:e5:e3:4f:cb:43:39:
79:68:0e:c6:8d:c9:b9:84:02:94:c9:5b:92:03:51:c5:b1:91:
48:ff:34:c3:8e:e8:49:ca:57:86:01:e1:de:17:03:6c:f5:ca:
63:10:2c:03:90:1f:44:4a:26:2b:37:32:a4:9a:25:a3:39:17:
24:f9:af:06:ff:30:fb:f1:97:75:f1:35:f6:0d:34:fc:ad:c6:
9e:0f:e6:4c:f9:83:ab:98:fb:27:58:fc:0f:cc:1f:17:ab:7d:
02:99:86:52:d0:e5:f4:43:a3:b7:af:50:ee:e8:79:8f:ac:e7:
17:ed:0c:1f:d4:8e:25:fa:a4:6c:32:84:eb:37:38:8c:12:b6:
ed:99:e5:6c:47:de:e6:49:39:f3:4e:69:2a:de:fb:c0:e1:78:
42:e7:60:68:55:12:42:f1:3d:8d:69:ec:70:9c:f4:76:de:cc:
98:ee:67:a8
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE3Ni8xY+3xiHdf4wUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw
YjYyMB4XDTI2MDUxMTIzMDM1OFoXDTI4MDgxMzIzMDM1OFowLzEtMCsGA1UEAxMk
YTY0Mjc5YzctMDJmYS00YjM3LTk3ODUtZTI4NDliNmIzZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3GLzE+WgFiXGK0EqZDi8RggQ+qDov6uztkw
0BFXVM5bj/lOvRd6seZoNflq8K+Vayfut5mZw1fHVl9LaJAjhS/8Rj2SFQcJ81N/
iC7YvfiWu9MCP9PoUmT4wVt4ok2Vp2wjep/dnTBKA5yQcMJvHHJIFgXUeeeAcaMY
7SPsSfCzPovk8cMfGDQdDhzTXpA0sLRM/zhkWIeAmUqwoWT9s6jF4jo6u8MqIIsq
EjgVHyzmvbFPBPW1FjA/I8mVm+j5Hs8Qt86YWL3fzM9PK6447yUCBOZwrpJzHpVh
5smiVlqVA3r4yXMFbKNBlDNgYrUFCVRr+DqBrkQBPeVjqJVOwQIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFPpVEPLd81QZLLDWIbgrAGTHpKlbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h
NjQyNzljNy0wMmZhLTRiMzctOTc4NS1lMjg0OWI2YjNlODEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt
OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2E2NDI3OWM3LTAyZmEtNGIzNy05
Nzg1LWUyODQ5YjZiM2U4MS9hNjQyNzljNy0wMmZhLTRiMzctOTc4NS1lMjg0OWI2
YjNlODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk
YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh
MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v
JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1
YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJIElQDBARsoYAwDQQCAAIwBwMFACYGQwAwHwYI
KwYBBQUHAQgBAf8EEDAOoAwwCgIDANcFAgMGDicwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZgPajZpc7AiK
6Lx/M+XEkgVIgxMmbxiH5YkX8qeQ4i0Gf5aYc0ipW2Z+oJbj6gsh5A2uSaDPMOtv
PgXSSS1HfmqL5fHVrdnPY/3QBKM0ZvLDNjs55eNPy0M5eWgOxo3JuYQClMlbkgNR
xbGRSP80w47oScpXhgHh3hcDbPXKYxAsA5AfREomKzcypJolozkXJPmvBv8w+/GX
dfE19g00/K3Gng/mTPmDq5j7J1j8D8wfF6t9ApmGUtDl9EOjt69Q7uh5j6znF+0M
H9SOJfqkbDKE6zc4jBK27ZnlbEfe5kk5805pKt77wOF4QudgaFUSQvE9jWnscJz0
dt7MmO5nqA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:24 2026 by rpki-client