
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650.cer
File: b1ee2515-763a-406a-bc31-a3b9c15f3650.cer (raw, json)
Hash identifier: OuskzHqeke2j1FcfTkr1xMYqxxyEqnZO30MXZW0ml7Q=
Subject key identifier: A4:90:54:5E:A9:A0:0F:EA:DC:CA:F7:66:E4:B7:1F:17:80:1D:E1:4A
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584E2EF57431DEAD5FFF7D6C6A08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/b1ee2515-763a-406a-bc31-a3b9c15f3650.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 Jun 2026 20:30:15 +0000
Certificate not after: Wed 22 Sep 2027 00:45:35 +0000
Subordinate resources: AS: 23367
AS: 26272
IP: 23.166.160.0/24
IP: 64.250.112.0/20
IP: 204.144.120.0/22
IP: 206.198.181.0 -- 206.198.183.255
IP: 2605:ec0::/32
IP: 2605:1080::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2e:f5:74:31:de:ad:5f:ff:7d:6c:6a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Jun 15 20:30:15 2026 GMT
Not After : Sep 22 00:45:35 2027 GMT
Subject: CN=b1ee2515-763a-406a-bc31-a3b9c15f3650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f8:b8:03:c5:45:e7:bb:e6:36:63:ba:ed:ca:
48:e4:ff:55:e8:a5:fb:ec:c1:0a:f8:29:8a:56:cc:
16:f2:95:de:e0:74:df:40:b3:a9:89:aa:85:df:aa:
b3:55:86:cc:83:a3:91:80:b9:b4:01:8c:7a:43:fa:
40:db:44:37:24:48:96:48:d8:74:30:44:3a:45:a5:
ab:d9:d4:f9:d6:42:15:33:fb:ce:ce:df:f8:29:e4:
66:01:d9:df:92:d3:b2:ed:b8:c0:3a:5d:8e:6d:47:
49:62:ce:3e:f8:9c:b7:59:9b:56:ef:af:3f:8f:35:
e9:ed:33:a3:55:9d:0c:d8:c9:17:b8:c7:94:26:60:
ac:a3:a5:78:f8:d0:d9:03:89:36:49:64:8d:0c:7b:
0b:45:94:4f:25:95:69:4c:bf:be:d2:e5:44:36:76:
c1:36:48:b8:51:22:e7:37:d6:bb:c5:dd:4b:1d:b3:
18:f5:65:af:4a:82:7a:2c:b3:15:43:3f:8c:e9:d2:
7e:37:d8:20:15:ce:0c:78:a2:8e:ba:84:9d:ad:79:
91:52:3b:5e:56:11:a5:3f:6e:2c:9c:e0:95:02:41:
81:b6:10:89:00:8d:cf:f0:05:be:ca:32:13:ae:d7:
e4:d3:29:fd:9a:14:19:6b:5b:93:66:9d:68:8e:ad:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:54:5E:A9:A0:0F:EA:DC:CA:F7:66:E4:B7:1F:17:80:1D:E1:4A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1ee2515-763a-406a-bc31-a3b9c15f3650/b1ee2515-763a-406a-bc31-a3b9c15f3650.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.160.0/24
64.250.112.0/20
204.144.120.0/22
206.198.181.0-206.198.183.255
IPv6:
2605:ec0::/32
2605:1080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23367
26272
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:ec:f3:f5:2e:59:dd:4c:b8:95:92:a7:73:ed:e1:24:a7:7a:
b8:34:53:c7:0c:0a:d0:c8:fb:05:90:88:44:e7:c5:dc:71:b6:
f8:26:42:33:61:7f:dc:fd:06:a5:d3:48:42:cd:d3:09:79:81:
20:40:b4:69:c4:a2:60:66:cd:c3:41:b5:5f:78:f4:ca:69:b3:
d8:3c:9d:5c:e6:62:b7:77:49:1e:57:76:02:55:87:36:b9:8c:
a4:f5:3c:e3:f3:71:d6:ac:c4:0a:6d:59:f7:8c:7b:a7:85:bc:
0e:69:bd:6f:49:d4:38:20:65:a5:6f:af:2f:e4:fb:86:e2:d1:
43:2a:e7:74:bc:67:54:90:35:77:8a:ec:16:7e:00:5b:2b:11:
c5:cc:b6:a6:3e:4f:4c:62:62:0d:3d:e8:5d:af:3d:68:8b:e2:
a1:ab:4d:84:02:1d:7d:f9:a1:ea:7c:23:73:7f:a4:db:fe:6c:
8b:cf:ff:fa:f8:f6:ef:2a:de:a8:39:eb:b1:98:9b:2c:43:52:
e9:05:2d:fc:7c:1f:71:f0:83:0a:42:42:78:42:b6:64:2f:c3:
45:6d:09:75:0a:d6:06:6d:26:0b:91:78:03:19:7c:e7:9f:71:
8c:19:f8:15:9f:18:8c:75:87:81:33:cd:4b:12:cd:f2:c5:d3:
c0:9b:fa:be
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWE4u9XQx3q1f/31saggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI2MDYxNTIwMzAxNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk
YjFlZTI1MTUtNzYzYS00MDZhLWJjMzEtYTNiOWMxNWYzNjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivi4A8VF57vmNmO67cpI5P9V6KX77MEK+CmK
VswW8pXe4HTfQLOpiaqF36qzVYbMg6ORgLm0AYx6Q/pA20Q3JEiWSNh0MEQ6RaWr
2dT51kIVM/vOzt/4KeRmAdnfktOy7bjAOl2ObUdJYs4++Jy3WZtW768/jzXp7TOj
VZ0M2MkXuMeUJmCso6V4+NDZA4k2SWSNDHsLRZRPJZVpTL++0uVENnbBNki4USLn
N9a7xd1LHbMY9WWvSoJ6LLMVQz+M6dJ+N9ggFc4MeKKOuoSdrXmRUjteVhGlP24s
nOCVAkGBthCJAI3P8AW+yjITrtfk0yn9mhQZa1uTZp1ojq0aYQIDAQABo4IETjCC
BEowHQYDVR0OBBYEFKSQVF6poA/q3Mr3ZuS3HxeAHeFKMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i
MWVlMjUxNS03NjNhLTQwNmEtYmMzMS1hM2I5YzE1ZjM2NTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2IxZWUyNTE1LTc2M2EtNDA2YS1i
YzMxLWEzYjljMTVmMzY1MC9iMWVlMjUxNS03NjNhLTQwNmEtYmMzMS1hM2I5YzE1
ZjM2NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTwYIKwYBBQUH
AQcBAf8EQDA+MCYEAgABMCADBAAXpqADBARA+nADBALMkHgwDAMEAM7GtQMEA87G
sDAUBAIAAjAOAwUAJgUOwAMFACYFEIAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC
W0cCAmagMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAGfs8/UuWd1MuJWSp3Pt4SSnerg0U8cMCtDI+wWQiETn
xdxxtvgmQjNhf9z9BqXTSELN0wl5gSBAtGnEomBmzcNBtV949Mpps9g8nVzmYrd3
SR5XdgJVhza5jKT1POPzcdasxAptWfeMe6eFvA5pvW9J1DggZaVvry/k+4bi0UMq
53S8Z1SQNXeK7BZ+AFsrEcXMtqY+T0xiYg096F2vPWiL4qGrTYQCHX35oep8I3N/
pNv+bIvP//r49u8q3qg567GYmyxDUukFLfx8H3HwgwpCQnhCtmQvw0VtCXUK1gZt
JguReAMZfOefcYwZ+BWfGIx1h4EzzUsSzfLF08Cb+r4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:23 2026 by rpki-client