
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd.cer
File: e95ea91c-a6f4-43c9-b23b-311a7690adcd.cer (raw, json)
Hash identifier: q1nYj74G2nzpgw7TSbPnt9R6x7LDbw2iCxXeKianpEA=
Subject key identifier: F5:DC:3F:9F:C9:67:C8:89:2C:52:AC:64:FF:8B:E2:8A:EA:E5:F6:E0
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E5FD7D6F4935D83B7F8A8F980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 03 Jul 2026 08:45:11 +0000
Certificate not after: Thu 05 Oct 2028 08:45:11 +0000
Subordinate resources: IP: 23.181.232.0/24
IP: 2602:f8a0::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:d7:d6:f4:93:5d:83:b7:f8:a8:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 3 08:45:11 2026 GMT
Not After : Oct 5 08:45:11 2028 GMT
Subject: CN=e95ea91c-a6f4-43c9-b23b-311a7690adcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:4c:bc:f5:af:a1:c7:51:82:31:74:ff:5c:
5e:37:77:90:08:4e:8e:ef:af:69:a4:00:8f:17:66:
1e:d0:9f:b9:d6:0c:5e:24:37:22:03:62:33:5f:bd:
05:85:1c:a9:2a:28:fa:e3:c8:c4:af:5d:4b:e0:5e:
22:03:56:70:ef:a0:2f:aa:f8:8f:04:17:a2:54:a3:
43:d6:c2:f0:c3:8c:43:9c:b0:39:a8:72:2b:d1:84:
a8:94:9f:26:69:3f:e6:9e:c3:fd:cd:f9:82:91:53:
0b:5a:19:97:dc:51:5f:66:71:b1:61:78:7b:ac:a2:
93:22:87:29:1a:38:43:83:fc:96:e3:27:95:c5:cd:
ae:13:3e:f3:5e:f7:8a:da:90:34:f4:0f:aa:ce:98:
05:dd:7c:a3:6b:7d:d9:bb:fe:4b:f6:97:26:c0:63:
f7:ba:f3:34:7c:b8:ab:99:66:11:96:d2:f3:13:ad:
6f:3a:d5:05:6e:4d:1e:ac:b6:47:b7:b5:8c:24:35:
a8:53:4e:f3:1e:14:2f:bb:c2:96:0d:97:be:77:57:
0c:50:9e:74:38:04:e0:92:53:4a:4b:63:3a:ab:e7:
29:39:a9:41:7e:7a:19:ae:2e:60:84:88:f1:ce:ad:
c4:06:92:d3:a1:68:59:27:b9:79:3f:e2:52:a7:4c:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:3F:9F:C9:67:C8:89:2C:52:AC:64:FF:8B:E2:8A:EA:E5:F6:E0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95ea91c-a6f4-43c9-b23b-311a7690adcd/e95ea91c-a6f4-43c9-b23b-311a7690adcd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.232.0/24
IPv6:
2602:f8a0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:82:43:0d:8e:a7:09:e1:b2:47:5c:cc:b4:ca:f6:2e:9f:f3:
dd:3f:d4:82:cd:60:12:4f:0e:01:82:f9:a5:6d:c2:b7:0a:0c:
d8:f1:ba:18:6a:d4:da:bc:95:c1:4a:5f:4e:d8:0c:ec:3e:43:
43:95:73:2d:69:00:db:55:27:6c:68:0f:7a:bd:56:26:3e:95:
5b:ac:9f:e8:5f:7e:36:62:91:7d:51:ae:bc:fe:d6:75:4b:fb:
a0:5f:63:77:ff:81:a7:f5:b4:43:e1:a3:32:19:c5:84:90:e9:
6a:ab:cb:0d:a1:5b:cf:1a:0b:c4:f0:fc:d3:d9:3b:4f:93:e4:
c2:c2:81:f7:a5:a0:05:27:72:cb:5d:0d:cc:cf:7e:86:b6:42:
ea:e6:8c:04:e9:8e:00:50:1f:62:36:5b:4c:86:20:46:22:7d:
67:8e:d6:b9:19:36:48:f4:8c:9f:bf:4d:9d:15:9d:3e:b5:34:
7d:8e:e9:9d:75:00:af:5e:c2:00:4c:16:54:b6:48:46:28:13:
ba:e6:38:e7:04:35:b3:c9:19:4e:7c:8d:7c:bb:ec:a5:5e:09:
d8:8e:09:ff:08:09:57:38:eb:ab:63:d7:ef:6d:b0:fa:c5:9d:
27:19:15:42:9d:35:43:3d:12:14:37:f5:8d:ed:bc:53:57:2e:
b1:ce:2e:e6
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE5f19b0k12Dt/io+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDcwMzA4NDUxMVoXDTI4MTAwNTA4NDUxMVowLzEtMCsGA1UEAxMk
ZTk1ZWE5MWMtYTZmNC00M2M5LWIyM2ItMzExYTc2OTBhZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR1MvPWvocdRgjF0/1xeN3eQCE6O769ppACP
F2Ye0J+51gxeJDciA2IzX70FhRypKij648jEr11L4F4iA1Zw76AvqviPBBeiVKND
1sLww4xDnLA5qHIr0YSolJ8maT/mnsP9zfmCkVMLWhmX3FFfZnGxYXh7rKKTIocp
GjhDg/yW4yeVxc2uEz7zXveK2pA09A+qzpgF3Xyja33Zu/5L9pcmwGP3uvM0fLir
mWYRltLzE61vOtUFbk0erLZHt7WMJDWoU07zHhQvu8KWDZe+d1cMUJ50OATgklNK
S2M6q+cpOalBfnoZri5ghIjxzq3EBpLToWhZJ7l5P+JSp0yk1wIDAQABo4IEDzCC
BAswHQYDVR0OBBYEFPXcP5/JZ8iJLFKsZP+L4orq5fbgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l
OTVlYTkxYy1hNmY0LTQzYzktYjIzYi0zMTFhNzY5MGFkY2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U5NWVhOTFjLWE2ZjQtNDNjOS1i
MjNiLTMxMWE3NjkwYWRjZC9lOTVlYTkxYy1hNmY0LTQzYzktYjIzYi0zMTFhNzY5
MGFkY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXtegwDgQCAAIwCAMGACYC+KAAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AF6CQw2OpwnhskdczLTK9i6f890/1ILNYBJPDgGC+aVtwrcKDNjxuhhq1Nq8lcFK
X07YDOw+Q0OVcy1pANtVJ2xoD3q9ViY+lVusn+hffjZikX1Rrrz+1nVL+6BfY3f/
gaf1tEPhozIZxYSQ6Wqryw2hW88aC8Tw/NPZO0+T5MLCgfeloAUncstdDczPfoa2
QurmjATpjgBQH2I2W0yGIEYifWeO1rkZNkj0jJ+/TZ0VnT61NH2O6Z11AK9ewgBM
FlS2SEYoE7rmOOcENbPJGU58jXy77KVeCdiOCf8ICVc466tj1+9tsPrFnScZFUKd
NUM9EhQ39Y3tvFNXLrHOLuY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:42 2026 by rpki-client