
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
File: e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer (raw, json)
Hash identifier: zi73gqepDJU6mxUQlGVHz2diaXTLm/VALGhKPf7mR/U=
Subject key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584DC3F8B073029EDDE015C40400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 08 May 2026 12:45:16 +0000
Certificate not after: Thu 10 Aug 2028 12:45:16 +0000
Subordinate resources: AS: 395647
IP: 67.221.32.0 -- 67.221.37.255
IP: 69.194.7.0/24
IP: 97.64.76.0/24
IP: 97.64.84.0/23
IP: 97.64.93.0/24
IP: 97.64.100.0/22
IP: 204.11.216.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c3:f8:b0:73:02:9e:dd:e0:15:c4:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: May 8 12:45:16 2026 GMT
Not After : Aug 10 12:45:16 2028 GMT
Subject: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:12:24:0e:b5:8a:14:9a:bd:3e:6e:ae:5e:
6e:92:70:13:f3:ed:d8:f4:50:ef:d6:21:ec:ad:08:
bc:b2:50:3d:21:93:6e:99:55:c1:3f:56:9a:b8:f6:
9b:f7:d7:10:47:71:53:f3:c4:fb:d2:6a:7e:b2:33:
99:1f:21:1b:7d:29:44:69:b5:2e:02:33:5f:4e:f0:
71:40:52:d6:b7:b3:26:d9:1d:50:08:33:e0:b9:bd:
d1:99:93:60:f2:b3:92:4b:2e:b0:6b:dd:79:a2:83:
18:3c:bd:90:48:14:a9:70:b1:70:74:85:3d:ec:5c:
91:95:46:2e:bd:a7:44:c4:5b:23:99:a5:d1:9f:be:
2c:2f:3a:05:9d:b0:48:b1:23:77:c5:fe:63:c9:70:
9e:bf:a6:c1:6c:8e:9d:2b:c1:2e:ed:e2:7c:cf:5f:
20:34:36:1e:3e:19:1d:09:87:af:5f:20:ca:46:42:
03:6d:47:ae:a3:29:14:ba:97:31:eb:af:c0:e5:d7:
cf:2b:a0:4d:31:d0:57:7e:18:b8:5b:8d:20:bd:2d:
72:00:e4:f3:f4:7f:1c:90:4c:e1:e8:ad:14:7b:5f:
5a:94:10:6c:bb:09:29:2e:1f:b0:27:cb:85:fa:ab:
8a:39:dd:44:66:3e:99:03:54:8d:1a:4b:9d:86:2d:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.32.0-67.221.37.255
69.194.7.0/24
97.64.76.0/24
97.64.84.0/23
97.64.93.0/24
97.64.100.0/22
204.11.216.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395647
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:0e:69:07:1f:2d:60:a2:7e:de:0e:54:67:56:30:61:27:4b:
a1:3d:dd:a1:fb:15:ab:70:18:18:cf:e7:54:dc:92:fe:61:dc:
72:93:d4:51:35:95:b4:1c:f7:aa:6a:93:4a:ff:e9:48:fd:f3:
dd:52:bb:c4:ec:86:11:b8:33:fb:6b:be:2e:7d:e5:95:ff:5f:
ae:d4:16:4d:48:19:31:b3:ef:c8:d1:d1:18:7a:7f:2b:b3:51:
85:9e:9c:79:d9:4a:ee:02:cb:ec:c1:10:8f:6a:9f:a7:75:6a:
cf:4c:ea:8a:bd:f6:27:5c:1d:77:e2:4a:31:24:93:5d:f9:19:
5e:5c:9b:02:d3:9b:a3:27:98:49:15:b9:94:ee:b9:fa:5d:3f:
06:f3:30:79:ae:68:9f:47:b5:b0:55:1e:46:64:c8:de:52:98:
4d:3c:1f:1b:76:1f:c8:ba:da:da:b8:32:9b:3f:ed:9c:5f:bf:
e1:84:d9:96:e0:43:18:fc:d8:27:62:5a:d5:39:c2:51:c9:d9:
fb:93:93:21:19:09:4a:b2:ba:2e:71:b8:8d:50:8c:c8:68:dc:
96:aa:0f:d7:ac:f6:ee:9a:76:41:84:51:c8:e7:3e:5e:8f:eb:
2a:65:d3:3f:7b:88:c0:23:41:63:52:3f:a5:0d:cc:63:a9:9f:
b0:fa:44:27
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWE3D+LBzAp7d4BXEBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI2MDUwODEyNDUxNloXDTI4MDgxMDEyNDUxNlowLzEtMCsGA1UEAxMk
ZTZmYjY5NjYtZTZlNy00Y2IyLWJkZWUtOGQyNmU1OWQ5YTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0MSJA61ihSavT5url5uknAT8+3Y9FDv1iHs
rQi8slA9IZNumVXBP1aauPab99cQR3FT88T70mp+sjOZHyEbfSlEabUuAjNfTvBx
QFLWt7Mm2R1QCDPgub3RmZNg8rOSSy6wa915ooMYPL2QSBSpcLFwdIU97FyRlUYu
vadExFsjmaXRn74sLzoFnbBIsSN3xf5jyXCev6bBbI6dK8Eu7eJ8z18gNDYePhkd
CYevXyDKRkIDbUeuoykUupcx66/A5dfPK6BNMdBXfhi4W40gvS1yAOTz9H8ckEzh
6K0Ue19alBBsuwkpLh+wJ8uF+quKOd1EZj6ZA1SNGkudhi0/ywIDAQABo4IERzCC
BEMwHQYDVR0OBBYEFPDsfnm1vsi0Z1p+BaKzeEN/FChsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l
NmZiNjk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2ZTU5ZDlhMTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U2ZmI2OTY2LWU2ZTctNGNiMi1i
ZGVlLThkMjZlNTlkOWExNC9lNmZiNjk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2ZTU5
ZDlhMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwSwYIKwYBBQUH
AQcBAf8EPDA6MDgEAgABMDIwDAMEBUPdIAMEAUPdJAMEAEXCBwMEAGFATAMEAWFA
VAMEAGFAXQMEAmFAZAMEAcwL2DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGCX8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZg5pBx8tYKJ+3g5UZ1YwYSdLoT3dofsVq3AYGM/nVNyS/mHccpPU
UTWVtBz3qmqTSv/pSP3z3VK7xOyGEbgz+2u+Ln3llf9frtQWTUgZMbPvyNHRGHp/
K7NRhZ6cedlK7gLL7MEQj2qfp3Vqz0zqir32J1wdd+JKMSSTXfkZXlybAtOboyeY
SRW5lO65+l0/BvMwea5on0e1sFUeRmTI3lKYTTwfG3YfyLra2rgymz/tnF+/4YTZ
luBDGPzYJ2Ja1TnCUcnZ+5OTIRkJSrK6LnG4jVCMyGjclqoP16z27pp2QYRRyOc+
Xo/rKmXTP3uIwCNBY1I/pQ3MY6mfsPpEJw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:41 2026 by rpki-client