
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
File: 9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer (raw, json)
Hash identifier: seABSgpjmHkWcTSsPjbjxwwTaAm29K+vm4SWPZl6his=
Subject key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E78F7FDE276551C9AC0516EA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 12 Jul 2026 08:45:11 +0000
Certificate not after: Sat 14 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 35870
IP: 23.144.200.0/24
IP: 2602:fac0::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:f7:fd:e2:76:55:1c:9a:c0:51:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 12 08:45:11 2026 GMT
Not After : Oct 14 08:45:11 2028 GMT
Subject: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:66:0a:8c:c2:ec:31:dc:b8:d5:bf:5b:b1:
3d:8a:1f:c1:b0:6b:37:3c:ff:a6:bb:3d:03:2d:77:
bc:c7:db:47:8d:77:f5:eb:55:9e:cf:a8:bb:7c:87:
a2:7e:f7:1f:04:aa:9c:57:3c:a6:04:6b:4c:62:09:
e9:3f:73:25:ff:24:6d:d8:a0:d1:4e:00:00:ae:1d:
aa:f2:5b:da:1d:d9:66:4c:d5:fa:b5:d1:9d:e2:3b:
cf:b7:7a:e5:e9:5f:e1:5a:ff:35:f6:40:c3:2d:9e:
57:be:8b:22:62:09:b9:09:b9:58:7b:9f:bb:69:08:
0b:3e:7f:ad:4d:6c:52:a3:a1:d4:4d:0e:c8:0b:f4:
fb:68:9a:57:53:f6:e7:8d:b5:5f:f2:e7:dd:15:fe:
0b:d5:aa:30:63:11:50:ea:99:3b:16:0a:f6:c0:aa:
f7:57:bd:f5:68:30:89:ce:ae:5a:02:9e:ff:b5:9b:
fc:d9:ab:04:8a:c6:ca:3e:1c:e9:1d:86:1b:6f:73:
5c:cb:cc:73:ca:56:a3:da:bd:a8:7a:9b:a2:ab:2c:
ad:0c:59:ab:3f:8c:49:45:7a:aa:b1:d9:21:7b:1b:
6b:72:09:00:a0:32:85:a7:1e:ac:e3:cd:2a:4f:24:
ff:74:a0:f4:06:47:fc:7f:bb:91:9f:2e:4c:31:29:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.200.0/24
IPv6:
2602:fac0::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35870
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:4a:c4:b0:c8:f3:68:05:19:d1:c2:57:b5:ee:a6:da:f9:ff:
a6:82:2c:34:5c:d9:b0:8e:2d:50:87:50:17:85:df:d4:b5:80:
93:5c:19:89:f8:62:9b:83:a3:7a:7e:ca:ac:55:83:c3:29:00:
1c:83:97:bf:da:52:76:37:7e:8f:49:09:cd:5d:02:06:43:cc:
86:ef:bf:6d:a6:39:b9:7c:d6:3a:7b:a5:5b:83:32:4a:a8:62:
03:76:8c:af:33:3b:54:46:ff:f3:d5:bd:1c:df:6d:6f:c1:86:
01:ff:19:07:79:56:2d:e7:f5:3e:21:9c:2b:50:51:c6:e0:f2:
9c:0a:85:5a:b5:ac:7b:fc:63:23:6a:ef:ec:a0:97:18:4d:b0:
b3:96:ef:78:f0:31:a8:86:5d:1b:29:68:1e:5a:8c:e9:e0:db:
09:71:2a:5b:53:71:a4:1e:3d:00:30:bd:a9:0c:f9:84:bb:3b:
ab:d7:b3:f5:38:89:87:ec:7a:bb:e9:0d:35:9c:db:1f:2c:50:
26:f7:a8:20:29:9c:29:43:07:06:fc:ae:a2:de:ae:1a:ec:11:
86:be:df:e4:c1:95:06:96:8d:6d:36:96:d5:fa:20:bd:aa:80:
03:53:86:17:ec:66:4e:52:ee:68:20:fc:00:cb:91:4e:6a:3d:
42:43:d7:eb
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE549/3idlUcmsBRbqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDcxMjA4NDUxMVoXDTI4MTAxNDA4NDUxMVowLzEtMCsGA1UEAxMk
OWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVhMzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt1mCozC7DHcuNW/W7E9ih/BsGs3PP+muz0D
LXe8x9tHjXf161Wez6i7fIeifvcfBKqcVzymBGtMYgnpP3Ml/yRt2KDRTgAArh2q
8lvaHdlmTNX6tdGd4jvPt3rl6V/hWv819kDDLZ5XvosiYgm5CblYe5+7aQgLPn+t
TWxSo6HUTQ7IC/T7aJpXU/bnjbVf8ufdFf4L1aowYxFQ6pk7Fgr2wKr3V731aDCJ
zq5aAp7/tZv82asEisbKPhzpHYYbb3Ncy8xzylaj2r2oepuiqyytDFmrP4xJRXqq
sdkhextrcgkAoDKFpx6s480qTyT/dKD0Bkf8f7uRny5MMSm3EwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFKY7GW5MMQhndFcFaq0dKOO/A8r1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlmOWNhMDJjLTcyMWUtNGNhOC05
NmQ0LTZlYjEwZDhlYTM4ZS85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4
ZWEzOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXkMgwDgQCAAIwCAMGACYC+sAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCMHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZSsSwyPNoBRnRwle17qba+f+m
giw0XNmwji1Qh1AXhd/UtYCTXBmJ+GKbg6N6fsqsVYPDKQAcg5e/2lJ2N36PSQnN
XQIGQ8yG779tpjm5fNY6e6VbgzJKqGIDdoyvMztURv/z1b0c321vwYYB/xkHeVYt
5/U+IZwrUFHG4PKcCoVatax7/GMjau/soJcYTbCzlu948DGohl0bKWgeWozp4NsJ
cSpbU3GkHj0AML2pDPmEuzur17P1OImH7Hq76Q01nNsfLFAm96ggKZwpQwcG/K6i
3q4a7BGGvt/kwZUGlo1tNpbV+iC9qoADU4YX7GZOUu5oIPwAy5FOaj1CQ9fr
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:50 2026 by rpki-client