
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb.cer
File: cd24b3f3-8c24-4212-b596-7495552f2bbb.cer (raw, json)
Hash identifier: L8q0vIfT1WCpIIQiEC94RZKFdSyetbaL+LzjU+wjx4E=
Subject key identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DB6034621F72218E71E27D500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 03 May 2026 12:45:17 +0000
Certificate not after: Sat 05 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 4314
AS: 11943
AS: 13693
AS: 14765
AS: 14791
AS: 19734
AS: 25798
AS: 32898
AS: 33507
AS: 35924
AS: 54340
AS: 62911
AS: 63001
AS: 393526
AS: 393814
AS: 397772
AS: 398149
AS: 400569
AS: 401284
IP: 64.130.64.0/19
IP: 64.185.0.0/18
IP: 65.182.64.0/19
IP: 145.224.0.0/19
IP: 172.110.0.0/19
IP: 199.254.157.0/24
IP: 205.209.224.0/19
IP: 206.251.160.0/19
IP: 209.16.64.0/19
IP: 209.205.128.0/18
IP: 216.97.240.0/20
IP: 216.131.24.0/21
IP: 216.167.128.0/18
IP: 2606:1600::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b6:03:46:21:f7:22:18:e7:1e:27:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 3 12:45:17 2026 GMT
Not After : Aug 5 12:45:17 2028 GMT
Subject: CN=cd24b3f3-8c24-4212-b596-7495552f2bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:6a:9a:4e:56:16:33:7c:c6:27:67:ba:55:
7f:e4:6c:83:79:e7:df:6d:7d:f2:f7:e9:71:e0:50:
71:e4:88:c9:0b:7d:77:f9:b7:01:40:d2:56:7c:1b:
6f:48:53:2a:25:00:ca:1d:a6:4f:d5:a1:51:bb:dd:
09:3f:86:6a:63:58:0e:43:5a:bd:46:d9:a8:ae:9b:
aa:b0:2c:95:3c:b2:ab:12:ff:a1:d6:a8:ef:9c:46:
12:5f:9c:d2:69:89:95:48:cf:df:2c:ea:91:59:6b:
a4:be:04:7c:79:76:be:2e:df:e4:73:c6:d8:2b:23:
c7:85:84:f1:ff:c0:0e:39:a8:bf:cf:52:99:9f:60:
5e:78:46:7b:32:b3:08:0b:22:bb:b1:b5:04:d2:d4:
1c:e7:68:f5:9e:a8:49:5a:63:ca:b3:67:99:e0:83:
1f:8c:d8:33:f1:7b:e4:63:a7:a5:48:e0:01:70:d5:
8d:97:0e:17:82:97:df:6f:8b:5e:1b:0c:1b:fd:65:
11:19:a2:e7:ca:9d:44:4e:d8:4a:b9:ae:aa:fe:75:
5e:12:52:fd:fe:fa:1f:15:fa:50:69:44:0e:22:63:
e0:47:e8:b4:d6:c0:2b:8e:8f:0c:27:47:e5:b2:bb:
c3:78:6a:ab:b5:83:b6:b0:39:24:c7:68:f7:11:72:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
64.130.64.0/19
64.185.0.0/18
65.182.64.0/19
145.224.0.0/19
172.110.0.0/19
199.254.157.0/24
205.209.224.0/19
206.251.160.0/19
209.16.64.0/19
209.205.128.0/18
216.97.240.0/20
216.131.24.0/21
216.167.128.0/18
IPv6:
2606:1600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4314
11943
13693
14765
14791
19734
25798
32898
33507
35924
54340
62911
63001
393526
393814
397772
398149
400569
401284
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3b:bf:13:84:9c:2f:31:0a:88:49:09:bb:bb:a0:f8:88:ab:
c8:da:83:a3:49:ac:7b:d9:bc:1b:15:74:0d:0d:ff:4a:3c:9e:
b7:79:d5:a7:c3:ae:a8:d0:d3:98:ee:71:db:70:fa:c0:c6:24:
a3:a2:19:74:28:4f:73:94:1b:b5:f0:44:c2:11:68:88:9b:06:
c0:8f:2c:c3:f5:c6:9b:a1:fb:45:13:9e:98:85:f4:1a:e9:79:
38:ac:8c:a1:2c:f3:7f:ba:33:fd:4d:b0:17:9e:58:bb:9a:6c:
71:4f:60:77:84:b9:c1:34:76:69:f8:d5:98:85:c0:cb:b7:ca:
56:08:f8:77:43:38:4b:31:c5:33:dc:5f:9d:79:04:3c:f9:5e:
d9:ea:c4:e4:30:24:3a:bd:f1:38:e8:e4:ba:4e:8d:e3:b0:ac:
94:45:b0:46:25:fe:10:ae:59:4d:c7:8f:8a:a6:5f:63:be:62:
61:6b:3d:c2:e5:fa:48:56:dd:fa:65:c5:f6:69:32:53:97:41:
b2:7e:cb:16:16:dd:e3:34:7a:ec:e9:b9:4e:ba:c3:20:80:96:
32:c2:36:a2:ce:5a:15:e7:4c:81:20:1e:68:41:0f:8a:0e:39:
4b:17:21:f7:b9:28:a4:4d:ab:21:12:61:1c:88:73:2a:8c:21:
a7:3e:18:6b
-----BEGIN CERTIFICATE-----
MIIHszCCBpugAwIBAgIUAQ0Mn0MoWE22A0Yh9yIY5x4n1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDUwMzEyNDUxN1oXDTI4MDgwNTEyNDUxN1owLzEtMCsGA1UEAxMk
Y2QyNGIzZjMtOGMyNC00MjEyLWI1OTYtNzQ5NTU1MmYyYmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvxqmk5WFjN8xidnulV/5GyDeeffbX3y9+lx
4FBx5IjJC313+bcBQNJWfBtvSFMqJQDKHaZP1aFRu90JP4ZqY1gOQ1q9Rtmorpuq
sCyVPLKrEv+h1qjvnEYSX5zSaYmVSM/fLOqRWWukvgR8eXa+Lt/kc8bYKyPHhYTx
/8AOOai/z1KZn2BeeEZ7MrMICyK7sbUE0tQc52j1nqhJWmPKs2eZ4IMfjNgz8Xvk
Y6elSOABcNWNlw4Xgpffb4teGwwb/WURGaLnyp1ETthKua6q/nVeElL9/vofFfpQ
aUQOImPgR+i01sArjo8MJ0flsrvDeGqrtYO2sDkkx2j3EXKAWwIDAQABo4IExTCC
BMEwHQYDVR0OBBYEFAf4mpIbYuRT4CnPeUgXkAk1UVMFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j
ZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUyZjJiYmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NkMjRiM2YzLThjMjQtNDIxMi1i
NTk2LTc0OTU1NTJmMmJiYi9jZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUy
ZjJiYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwdgYIKwYBBQUH
AQcBAf8EZzBlMFQEAgABME4DBAVAgkADBAZAuQADBAVBtkADBAWR4AADBAWsbgAD
BADH/p0DBAXN0eADBAXO+6ADBAXREEADBAbRzYADBATYYfADBAPYgxgDBAbYp4Aw
DQQCAAIwBwMFACYGFgAwbQYIKwYBBQUHAQgBAf8EXjBcoFowWAICENoCAi6nAgI1
fQICOa0CAjnHAgJNFgICZMYCAwCAggIDAILjAgMAjFQCAwDURAIDAPW/AgMA9hkC
AwYBNgIDBgJWAgMGEcwCAwYTRQIDBhy5AgMGH4QwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUDu/E4ScLzEK
iEkJu7ug+IiryNqDo0mse9m8GxV0DQ3/Sjyet3nVp8OuqNDTmO5x23D6wMYko6IZ
dChPc5QbtfBEwhFoiJsGwI8sw/XGm6H7RROemIX0Gul5OKyMoSzzf7oz/U2wF55Y
u5pscU9gd4S5wTR2afjVmIXAy7fKVgj4d0M4SzHFM9xfnXkEPPle2erE5DAkOr3x
OOjkuk6N47CslEWwRiX+EK5ZTcePiqZfY75iYWs9wuX6SFbd+mXF9mkyU5dBsn7L
Fhbd4zR67Om5TrrDIICWMsI2os5aFedMgSAeaEEPig45Sxch97kopE2rIRJhHIhz
Kowhpz4Yaw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:46 2026 by rpki-client