
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
File: 994eeb97-12ef-4721-824f-9ba41ba67983.cer (raw, json)
Hash identifier: 4qcWZwtLmRpcXUjTkfq8MiOYkFNXvQfPmamV58ZCT9I=
Subject key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DB603462DDF5B1EA596AF3900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 03 May 2026 12:45:17 +0000
Certificate not after: Sat 05 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 23539
IP: 23.138.176.0/24
IP: 143.223.82.0/23
IP: 147.185.188.0/24
IP: 209.163.114.0/24
IP: 2605:4f40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b6:03:46:2d:df:5b:1e:a5:96:af:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 3 12:45:17 2026 GMT
Not After : Aug 5 12:45:17 2028 GMT
Subject: CN=994eeb97-12ef-4721-824f-9ba41ba67983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:77:72:eb:10:4d:6b:6c:93:bd:58:a5:14:
e3:62:ac:a4:55:aa:df:86:4a:fb:f4:d8:4f:27:e1:
d6:7f:52:8b:f5:f0:90:aa:fd:b0:55:05:c1:52:ad:
7a:49:ce:c3:2f:95:0c:22:93:9f:ac:3d:4c:18:8e:
a3:a7:27:b5:c2:73:3e:08:a7:28:2a:17:b7:13:35:
cb:54:47:ed:b4:f3:26:99:a4:89:2c:53:aa:b2:c2:
f9:75:cc:f8:a2:bc:8b:f0:eb:64:df:93:d8:be:e7:
d9:c9:ae:1c:16:f2:a7:e5:67:53:29:d7:09:67:e1:
79:9c:88:d6:3d:45:cd:56:25:07:dc:03:4d:59:79:
35:00:6f:74:ed:a3:4c:c8:f8:6d:c4:c2:36:5f:26:
88:42:30:1b:fe:52:96:58:94:c4:e1:12:ec:c6:7c:
3d:47:fe:11:21:ce:77:37:db:a8:52:68:b6:60:61:
b5:0b:d4:48:c4:40:75:18:ea:37:88:5a:14:99:1d:
52:3b:5d:3c:cc:a5:56:fb:f3:7d:ff:46:ea:4e:16:
66:1c:96:c0:de:33:e8:1c:49:0a:22:2d:10:38:1e:
e1:41:10:a4:35:d4:e9:ee:91:6f:d0:a7:6d:e6:b3:
ce:db:f9:a7:fa:77:88:0b:da:c3:e8:ce:ce:84:2d:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.176.0/24
143.223.82.0/23
147.185.188.0/24
209.163.114.0/24
IPv6:
2605:4f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23539
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:88:c4:fe:18:33:af:bc:a5:07:70:40:0e:0e:ad:e7:b5:aa:
4a:2e:d5:5f:da:46:b4:a8:35:8c:59:b4:ab:19:c5:07:ac:c0:
e0:61:33:ac:5d:54:d0:20:3d:cc:88:27:76:5b:60:9c:e8:98:
b5:49:8b:f4:6b:25:3b:f5:84:ba:f6:54:e8:cc:32:30:35:0b:
33:9b:5d:c0:a8:7b:e9:86:80:28:82:48:13:13:dc:22:e7:96:
df:a1:e4:b9:6a:87:d6:16:1c:69:0b:dd:a7:dc:9b:c4:50:ad:
a2:65:cb:33:59:a5:fb:67:d9:54:4c:f5:07:8a:c4:5b:a4:da:
0d:9a:4c:1b:59:c5:46:11:25:68:c7:73:8c:91:74:45:7a:d5:
b0:ca:60:73:28:3f:25:e7:bc:2a:b9:82:1d:ac:8b:f5:96:07:
c6:77:da:a2:88:4e:b1:7a:00:bb:01:eb:46:bb:fa:06:53:1a:
e9:5b:6c:65:c9:c1:ed:d9:29:8b:ff:e2:d8:31:2d:d5:db:7b:
76:51:53:74:be:b9:ad:f7:21:d8:8e:dc:7a:da:c6:b2:ac:84:
3d:b3:a9:63:5b:01:f6:9a:20:0e:07:ec:61:be:2a:bd:45:42:
6f:96:2e:73:c5:47:ec:ee:b4:7a:3b:f2:5a:59:96:11:a3:3f:
f1:ca:f7:48
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE22A0Yt31sepZavOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDUwMzEyNDUxN1oXDTI4MDgwNTEyNDUxN1owLzEtMCsGA1UEAxMk
OTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3OTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrh3cusQTWtsk71YpRTjYqykVarfhkr79NhP
J+HWf1KL9fCQqv2wVQXBUq16Sc7DL5UMIpOfrD1MGI6jpye1wnM+CKcoKhe3EzXL
VEfttPMmmaSJLFOqssL5dcz4oryL8Otk35PYvufZya4cFvKn5WdTKdcJZ+F5nIjW
PUXNViUH3ANNWXk1AG907aNMyPhtxMI2XyaIQjAb/lKWWJTE4RLsxnw9R/4RIc53
N9uoUmi2YGG1C9RIxEB1GOo3iFoUmR1SO108zKVW+/N9/0bqThZmHJbA3jPoHEkK
Ii0QOB7hQRCkNdTp7pFv0Kdt5rPO2/mn+neIC9rD6M7OhC2hZwIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFBx2xH/Cy/qMQmATE3feNUGa1OREMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzk5NGVlYjk3LTEyZWYtNDcyMS04
MjRmLTliYTQxYmE2Nzk4My85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJh
Njc5ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAAXirADBAGP31IDBACTubwDBADRo3IwDQQCAAIw
BwMFACYFT0AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICW/MwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXYjE
/hgzr7ylB3BADg6t57WqSi7VX9pGtKg1jFm0qxnFB6zA4GEzrF1U0CA9zIgndltg
nOiYtUmL9GslO/WEuvZU6MwyMDULM5tdwKh76YaAKIJIExPcIueW36HkuWqH1hYc
aQvdp9ybxFCtomXLM1ml+2fZVEz1B4rEW6TaDZpMG1nFRhElaMdzjJF0RXrVsMpg
cyg/Jee8KrmCHayL9ZYHxnfaoohOsXoAuwHrRrv6BlMa6VtsZcnB7dkpi//i2DEt
1dt7dlFTdL65rfch2I7cetrGsqyEPbOpY1sB9pogDgfsYb4qvUVCb5Yuc8VH7O60
ejvyWlmWEaM/8cr3SA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:55 2026 by rpki-client