
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/98f9541d-72d1-4985-a70d-86c6878d2002.cer
File: 98f9541d-72d1-4985-a70d-86c6878d2002.cer (raw, json)
Hash identifier: f8Wp/M2OqnsDJp/3uevmcsOOQuPbdWaNGKXBpZC7vaQ=
Subject key identifier: BB:1F:8F:A9:0D:DD:F8:89:B9:E0:96:7B:89:48:BD:32:96:F1:3C:A1
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial: 010D0C9F4328584FC0A6F3FC236EDAFE19771D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/98f9541d-72d1-4985-a70d-86c6878d2002/98f9541d-72d1-4985-a70d-86c6878d2002.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/98f9541d-72d1-4985-a70d-86c6878d2002/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 06 Nov 2026 17:47:03 +0000
Certificate not after: Thu 08 Feb 2029 17:47:03 +0000
Subordinate resources: IP: 192.157.164.0/24
IP: 199.188.32.0 -- 199.188.43.255
IP: 204.225.193.0 -- 204.225.199.255
IP: 205.210.208.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:c0:a6:f3:fc:23:6e:da:fe:19:77:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Validity
Not Before: Nov 6 17:47:03 2026 GMT
Not After : Feb 8 17:47:03 2029 GMT
Subject: CN=98f9541d-72d1-4985-a70d-86c6878d2002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:6e:83:8d:59:12:a6:7c:db:11:4e:0b:0f:
42:57:ce:c4:5e:62:55:e6:4b:79:02:1c:9f:d2:f5:
bb:3a:f7:0f:2b:ac:aa:3e:de:b1:80:f3:ac:8d:38:
a8:58:78:f9:65:08:26:e7:64:ff:37:52:62:64:fe:
60:3f:d7:7d:ad:2f:30:65:db:b4:9f:72:41:bd:aa:
a5:c2:29:ca:f1:24:31:0d:8d:9c:3e:60:ec:3f:1e:
66:0e:b8:4c:1a:f9:dc:8d:af:33:77:8e:fa:f3:f1:
f7:1d:f2:a9:8e:94:64:8b:c9:6f:d0:74:b9:f8:a0:
e8:ea:bf:6a:b0:b7:cc:56:f3:1c:e4:24:47:e2:b1:
9b:af:36:aa:0e:80:63:8f:87:f9:85:b4:f2:ea:b2:
12:c9:08:ec:0d:e1:06:52:2a:4e:5c:d0:a1:6e:13:
46:e7:40:4f:51:59:9d:49:94:64:b9:1b:d4:8c:0f:
c7:d8:8f:4c:b3:95:1e:7e:09:b3:da:0b:54:2e:0a:
b6:38:e5:9d:1c:5d:a6:07:47:9a:7b:60:38:3f:76:
03:80:42:4e:35:1c:09:bd:81:19:0b:ee:3b:2a:69:
b4:d8:80:cf:72:43:d7:c8:0a:06:ca:f7:b2:e4:24:
0a:fa:47:15:7c:5f:36:50:b8:c3:e0:a5:3e:49:f3:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:8F:A9:0D:DD:F8:89:B9:E0:96:7B:89:48:BD:32:96:F1:3C:A1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/98f9541d-72d1-4985-a70d-86c6878d2002/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/98f9541d-72d1-4985-a70d-86c6878d2002/98f9541d-72d1-4985-a70d-86c6878d2002.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
X509v3 Authority Key Identifier:
keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.164.0/24
199.188.32.0-199.188.43.255
204.225.193.0-204.225.199.255
205.210.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:8c:b0:72:09:9d:0b:ca:cf:05:f1:9f:d9:24:a5:54:2b:ca:
82:95:4d:83:e1:af:8f:33:24:9b:8a:88:3b:c3:84:e7:1e:94:
7a:bf:68:39:2c:eb:ab:f0:64:86:bf:1a:5e:41:5e:a4:0a:28:
e0:fb:5c:98:2c:53:a8:a0:a1:5b:27:f3:5f:6e:12:41:ba:94:
3f:86:30:df:c6:65:09:6c:51:77:c4:4e:51:d9:a5:df:65:74:
1b:ae:2e:aa:04:cb:40:65:c3:84:b3:9e:9b:b0:0a:67:d4:91:
63:70:71:6e:e6:55:3a:bb:75:92:e9:bf:24:55:34:fc:15:39:
88:b4:cb:a9:3a:42:21:8d:71:e8:06:8d:ed:5a:51:dd:18:24:
3f:9e:68:b2:29:a6:9b:f9:43:1b:eb:4a:b7:6b:38:ed:2a:86:
d8:c9:e2:0c:14:17:b6:dd:9e:9c:7b:e3:27:a4:e0:a2:db:35:
d7:9f:bf:ce:78:7c:d5:52:5a:56:fd:37:42:f8:3a:f4:5e:64:
ed:50:f4:c0:8b:c8:31:3c:26:56:32:60:96:c5:55:58:aa:bb:
44:41:23:c9:62:aa:18:c3:09:86:e1:2a:b2:4d:5b:73:04:50:
39:46:f9:f4:af:19:ec:fd:c3:ef:81:c3:1f:8f:72:da:bf:e3:
e9:2b:f8:63
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE/ApvP8I27a/hl3HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3NTI2YTAtZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFl
YmYyMB4XDTI2MTEwNjE3NDcwM1oXDTI5MDIwODE3NDcwM1owLzEtMCsGA1UEAxMk
OThmOTU0MWQtNzJkMS00OTg1LWE3MGQtODZjNjg3OGQyMDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JZug41ZEqZ82xFOCw9CV87EXmJV5kt5Ahyf
0vW7OvcPK6yqPt6xgPOsjTioWHj5ZQgm52T/N1JiZP5gP9d9rS8wZdu0n3JBvaql
winK8SQxDY2cPmDsPx5mDrhMGvncja8zd4768/H3HfKpjpRki8lv0HS5+KDo6r9q
sLfMVvMc5CRH4rGbrzaqDoBjj4f5hbTy6rISyQjsDeEGUipOXNChbhNG50BPUVmd
SZRkuRvUjA/H2I9Ms5Uefgmz2gtULgq2OOWdHF2mB0eae2A4P3YDgEJONRwJvYEZ
C+47Kmm02IDPckPXyAoGyvey5CQK+kcVfF82ULjD4KU+SfMtsQIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFLsfj6kN3fiJueCWe4lIvTKW8TyhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi85
OGY5NTQxZC03MmQxLTQ5ODUtYTcwZC04NmM2ODc4ZDIwMDIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTc3NTI2YTAt
ZmU0ZS00NzQxLWIzOWItMzIzMzUzYTFlYmYyLzk4Zjk1NDFkLTcyZDEtNDk4NS1h
NzBkLTg2YzY4NzhkMjAwMi85OGY5NTQxZC03MmQxLTQ5ODUtYTcwZC04NmM2ODc4
ZDIwMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUy
NmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9hNzc1MjZhMC1mZTRlLTQ3
NDEtYjM5Yi0zMjMzNTNhMWViZjIuY3JsMB8GA1UdIwQYMBaAFGakHfh5AJ0FsTCO
67LYyf60sXZkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi5jZXIwQQYIKwYBBQUH
AQcBAf8EMjAwMC4EAgABMCgDBADAnaQwDAMEBce8IAMEAse8KDAMAwQAzOHBAwQD
zOHAAwQEzdLQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAJmMsHIJnQvKzwXxn9kkpVQryoKVTYPhr48zJJuK
iDvDhOcelHq/aDks66vwZIa/Gl5BXqQKKOD7XJgsU6igoVsn819uEkG6lD+GMN/G
ZQlsUXfETlHZpd9ldBuuLqoEy0Blw4SznpuwCmfUkWNwcW7mVTq7dZLpvyRVNPwV
OYi0y6k6QiGNcegGje1aUd0YJD+eaLIpppv5QxvrSrdrOO0qhtjJ4gwUF7bdnpx7
4yek4KLbNdefv854fNVSWlb9N0L4OvReZO1Q9MCLyDE8JlYyYJbFVViqu0RBI8li
qhjDCYbhKrJNW3MEUDlG+fSvGez9w++Bwx+Pctq/4+kr+GM=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:03 2026 by rpki-client