
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d.cer
File: 13855365-4e81-429f-91f9-55913aa1d92d.cer (raw, json)
Hash identifier: 8TjF9V9Ghxk9WaXtMBZ6JK+TgGiasXkmEdg3YIUV5SI=
Subject key identifier: FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D91B861165BCAB9E8EA7F3280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 20 Apr 2026 12:45:17 +0000
Certificate not after: Sun 23 Jul 2028 12:45:17 +0000
Subordinate resources: IP: 192.75.90.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:b8:61:16:5b:ca:b9:e8:ea:7f:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 20 12:45:17 2026 GMT
Not After : Jul 23 12:45:17 2028 GMT
Subject: CN=13855365-4e81-429f-91f9-55913aa1d92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:52:72:6d:b5:8d:23:03:23:e2:15:df:ad:
4b:a7:ac:b1:18:67:d2:be:0f:ab:30:2f:80:f4:1d:
ea:77:ac:68:36:30:22:4a:84:cc:01:90:a0:f4:3d:
27:9e:36:11:e3:57:9c:cf:e0:28:8e:6a:3c:cc:8f:
1e:b6:c8:2a:39:bd:b5:cf:87:c1:20:f0:13:ee:c7:
93:de:8c:19:98:dc:77:51:3f:eb:43:de:57:a6:a7:
08:32:86:ba:bf:8e:59:a9:0b:de:2d:ad:bc:4e:97:
68:57:2e:a3:cb:e7:14:f8:95:4c:aa:35:3c:97:f9:
13:db:e9:a5:f7:c6:40:fa:5e:57:bd:84:35:54:5e:
b6:e4:b9:6d:5e:af:64:bd:95:08:b7:06:15:8e:f4:
80:a1:a4:2c:07:79:fa:c6:d4:81:ca:ec:f7:5f:1a:
7b:9d:59:35:10:bc:c9:d4:02:ed:8c:17:61:d9:e6:
c5:f0:71:44:04:94:08:35:19:4e:3c:c8:df:83:85:
5b:de:24:cc:45:82:f9:07:d8:a3:38:90:00:48:4a:
9e:c4:8a:23:e0:9e:58:d5:8c:67:11:06:53:9f:3f:
92:65:b4:8d:ef:73:c9:c5:1e:b2:74:82:e2:dd:a4:
69:7f:19:de:3c:51:55:bc:4e:cd:c2:49:0f:e0:fd:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:B2:D1:10:3C:8A:74:73:E6:0F:54:BC:B7:D9:54:51:21:09:A3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13855365-4e81-429f-91f9-55913aa1d92d/13855365-4e81-429f-91f9-55913aa1d92d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
192.75.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3e:5a:75:0f:b2:74:3c:5e:05:5d:fa:3f:55:71:a7:a8:ec:
7a:4e:38:e7:53:40:07:ed:25:e0:a9:f3:d4:fa:40:7c:9a:60:
bb:83:33:3a:56:84:17:c1:f8:92:27:46:f1:a7:bb:7c:0d:0c:
73:9b:be:96:a3:bd:b4:2c:2a:21:90:7b:37:0a:49:59:f2:98:
5c:1e:89:70:ff:be:6f:05:6f:05:e4:d7:db:4d:7c:cc:87:97:
d0:4b:3a:23:c2:ef:11:a1:4e:72:62:bc:df:70:3e:51:5e:22:
5a:02:0f:7a:4d:d0:70:78:e1:dc:72:a9:f9:79:12:d0:25:c2:
10:30:91:7b:3c:19:4d:6f:a4:71:ce:a4:48:87:70:09:d9:dd:
5d:74:ee:10:d1:9f:bd:91:87:3e:79:08:5b:d9:85:3e:36:82:
d2:5f:35:74:55:0a:ff:2a:f4:00:6f:57:31:7b:55:9b:b1:d2:
52:38:0d:0f:07:2d:05:38:ee:1a:b4:7e:7a:89:e3:3c:da:bb:
79:06:5f:ad:5b:c4:87:c7:e1:9f:d5:3c:b7:13:78:11:eb:77:
7c:a8:f1:6c:60:d9:48:25:e4:19:02:e6:11:89:84:33:2a:95:
65:ca:a9:2f:ee:f7:ac:5d:4c:ba:6b:14:26:8b:97:22:b6:e9:
05:5b:f1:65
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2RuGEWW8q56Op/MoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDQyMDEyNDUxN1oXDTI4MDcyMzEyNDUxN1owLzEtMCsGA1UEAxMk
MTM4NTUzNjUtNGU4MS00MjlmLTkxZjktNTU5MTNhYTFkOTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ktScm21jSMDI+IV361Lp6yxGGfSvg+rMC+A
9B3qd6xoNjAiSoTMAZCg9D0nnjYR41ecz+Aojmo8zI8etsgqOb21z4fBIPAT7seT
3owZmNx3UT/rQ95XpqcIMoa6v45ZqQveLa28TpdoVy6jy+cU+JVMqjU8l/kT2+ml
98ZA+l5XvYQ1VF625LltXq9kvZUItwYVjvSAoaQsB3n6xtSByuz3Xxp7nVk1ELzJ
1ALtjBdh2ebF8HFEBJQINRlOPMjfg4Vb3iTMRYL5B9ijOJAASEqexIoj4J5Y1Yxn
EQZTnz+SZbSN73PJxR6ydILi3aRpfxnePFFVvE7NwkkP4P2rGwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFP4NstEQPIp0c+YPVLy32VRRIQmjMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
Mzg1NTM2NS00ZTgxLTQyOWYtOTFmOS01NTkxM2FhMWQ5MmQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzEzODU1MzY1LTRlODEtNDI5Zi05
MWY5LTU1OTEzYWExZDkyZC8xMzg1NTM2NS00ZTgxLTQyOWYtOTFmOS01NTkxM2Fh
MWQ5MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAS1owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYj5adQ+ydDxeBV36P1Vx
p6jsek4451NAB+0l4Knz1PpAfJpgu4MzOlaEF8H4kidG8ae7fA0Mc5u+lqO9tCwq
IZB7NwpJWfKYXB6JcP++bwVvBeTX2018zIeX0Es6I8LvEaFOcmK833A+UV4iWgIP
ek3QcHjh3HKp+XkS0CXCEDCRezwZTW+kcc6kSIdwCdndXXTuENGfvZGHPnkIW9mF
PjaC0l81dFUK/yr0AG9XMXtVm7HSUjgNDwctBTjuGrR+eonjPNq7eQZfrVvEh8fh
n9U8txN4Eet3fKjxbGDZSCXkGQLmEYmEMyqVZcqpL+73rF1MumsUJouXIrbpBVvx
ZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:47:11 2026 by rpki-client