
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
File: 9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer (raw, json)
Hash identifier: X6f+JAVq1zhionnKW1cRGCqomxVkheh+41EUiXbAyrY=
Subject key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584E38C242346B63535743D5D1C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 19 Jun 2026 08:45:11 +0000
Certificate not after: Thu 21 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 54098
IP: 23.92.32.0/20
IP: 2607:2740::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:38:c2:42:34:6b:63:53:57:43:d5:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jun 19 08:45:11 2026 GMT
Not After : Sep 21 08:45:11 2028 GMT
Subject: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:7e:12:84:1d:e8:b0:9b:49:e2:a3:6c:98:
c9:50:f7:64:7c:d2:ce:fe:f0:a3:2f:be:13:c8:20:
1f:8e:99:93:a0:76:e4:46:4b:ca:43:46:4b:55:ff:
f1:aa:64:2f:3e:d7:3d:89:e3:fb:57:29:42:b5:7a:
be:41:ba:52:f4:5b:cf:39:3c:54:09:e7:f9:de:9a:
00:8f:1f:16:3d:ea:be:e0:ec:64:e5:b7:ea:af:0f:
d7:d9:7f:1d:38:4e:91:5e:eb:6c:ee:b8:eb:93:da:
c7:e8:8c:cc:e2:15:37:2a:3e:ce:97:83:91:b1:03:
56:90:27:87:d3:c3:36:c0:a6:34:de:8f:52:2f:6c:
88:30:bc:a9:5d:03:4d:39:7d:e4:0a:e1:69:b7:60:
33:75:0a:65:ba:b2:4e:45:25:d6:83:4d:7d:15:c3:
37:8a:fb:08:69:1a:36:af:99:1c:88:0b:4e:52:77:
c1:c8:d2:ac:fa:92:dc:a5:48:b7:a0:ad:d6:13:54:
6f:3b:d1:f3:60:72:2b:3f:dc:95:be:4f:ef:e5:ce:
6b:f1:5b:0d:e4:b4:19:fa:76:02:ad:d1:88:9f:7e:
c2:12:7d:4e:6e:c4:bf:2d:53:08:27:9a:3d:1e:c0:
37:0f:0b:93:f2:b0:ea:ce:fa:67:17:ac:02:68:ab:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.92.32.0/20
IPv6:
2607:2740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54098
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c3:63:5a:ad:8e:3d:0c:69:f9:6a:52:23:d1:29:51:a5:76:
e7:33:2b:9a:53:5a:99:91:17:0f:62:62:16:87:da:47:5b:cc:
62:15:c4:d1:c6:15:af:ff:6f:76:03:ea:26:be:31:4d:67:d3:
63:ab:42:c5:1c:d4:41:0e:43:1f:7a:a7:b2:40:98:f4:56:58:
a3:92:3f:de:3e:80:18:eb:44:ca:31:ff:52:3e:5f:76:b1:ce:
75:ab:44:cf:ed:81:5d:d0:82:79:eb:ea:69:95:bb:0d:f3:a4:
95:1e:bf:95:53:f5:cb:34:8f:67:11:8a:1f:cd:f5:ac:01:ef:
05:b2:bd:51:87:78:7f:38:3a:5a:56:a9:f6:6e:2b:41:bd:84:
23:dc:cd:3b:2c:d4:04:d0:f5:6a:21:f9:43:68:8a:c9:ee:59:
02:5a:1b:88:26:44:1c:8f:0f:63:f1:d1:8f:50:ec:33:0e:a5:
49:3b:57:b4:f9:4a:f8:91:48:bb:50:1d:e0:76:c3:5b:47:32:
ed:a1:71:14:c8:0d:ca:e0:9e:15:f4:8b:56:58:b6:bb:58:d5:
7c:a6:de:93:d3:d2:84:97:bf:42:81:cb:13:56:60:38:6e:12:
77:44:03:6e:95:59:9c:e3:ce:6a:0a:0d:a5:a0:d1:c0:f9:10:
bc:8d:2a:8e
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE44wkI0a2NTV0PV0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI2MDYxOTA4NDUxMVoXDTI4MDkyMTA4NDUxMVowLzEtMCsGA1UEAxMk
OWE4NmViM2UtZDE0Mi00Y2I5LWFkNGQtZDdmNjBiYWMyZDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9t+EoQd6LCbSeKjbJjJUPdkfNLO/vCjL74T
yCAfjpmToHbkRkvKQ0ZLVf/xqmQvPtc9ieP7VylCtXq+QbpS9FvPOTxUCef53poA
jx8WPeq+4Oxk5bfqrw/X2X8dOE6RXuts7rjrk9rH6IzM4hU3Kj7Ol4ORsQNWkCeH
08M2wKY03o9SL2yIMLypXQNNOX3kCuFpt2AzdQplurJORSXWg019FcM3ivsIaRo2
r5kciAtOUnfByNKs+pLcpUi3oK3WE1RvO9HzYHIrP9yVvk/v5c5r8VsN5LQZ+nYC
rdGIn37CEn1ObsS/LVMIJ5o9HsA3DwuT8rDqzvpnF6wCaKuFewIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFHRyPr/CXWcowMEQYKdogI+eulxQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85
YTg2ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2MGJhYzJkMjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlhODZlYjNlLWQxNDItNGNiOS1h
ZDRkLWQ3ZjYwYmFjMmQyNi85YTg2ZWIzZS1kMTQyLTRjYjktYWQ0ZC1kN2Y2MGJh
YzJkMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAQXXCAwDQQCAAIwBwMFACYHJ0AwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDANNSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADzDY1qtjj0MaflqUiPRKVGlducz
K5pTWpmRFw9iYhaH2kdbzGIVxNHGFa//b3YD6ia+MU1n02OrQsUc1EEOQx96p7JA
mPRWWKOSP94+gBjrRMox/1I+X3axznWrRM/tgV3Qgnnr6mmVuw3zpJUev5VT9cs0
j2cRih/N9awB7wWyvVGHeH84OlpWqfZuK0G9hCPczTss1ATQ9Woh+UNoisnuWQJa
G4gmRByPD2Px0Y9Q7DMOpUk7V7T5SviRSLtQHeB2w1tHMu2hcRTIDcrgnhX0i1ZY
trtY1Xym3pPT0oSXv0KByxNWYDhuEndEA26VWZzjzmoKDaWg0cD5ELyNKo4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:36 2026 by rpki-client