
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
File: f330fac3-f4ae-4421-9305-7e1649195c36.cer (raw, json)
Hash identifier: pbQnzi3y6t7x4mnAWOG5BZbUP2uiYJ6vBIs2GRpz/jA=
Subject key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584D32E07F6D0F055541A903AC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 17 Mar 2026 13:24:20 +0000
Certificate not after: Wed 07 Jul 2027 15:24:42 +0000
Subordinate resources: AS: 401293
AS: 402252
AS: 402315
IP: 23.136.244.0/24
IP: 155.103.156.0/22
IP: 2602:f848::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:e0:7f:6d:0f:05:55:41:a9:03:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Mar 17 13:24:20 2026 GMT
Not After : Jul 7 15:24:42 2027 GMT
Subject: CN=f330fac3-f4ae-4421-9305-7e1649195c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:08:7a:e4:da:f0:b0:cd:c2:8e:36:84:a6:
bf:ef:0e:da:da:d3:dd:6f:17:b7:d8:69:29:73:d0:
97:85:21:99:01:6e:5d:59:94:83:85:bd:11:8e:fc:
c5:cf:71:59:48:4f:c3:dd:78:ea:6c:73:ca:f3:09:
a3:ff:3e:44:d1:45:5a:34:c7:72:ad:99:16:c9:0c:
45:1a:11:fa:e0:14:04:e7:61:21:ff:73:0b:2e:9d:
57:79:0c:e3:58:39:74:3a:89:33:29:d4:71:a8:34:
fd:bb:8b:f6:8d:ee:7a:e2:a0:45:32:3e:7d:f0:da:
fd:ca:84:3e:8e:b8:3a:70:47:f6:d6:ca:b2:c7:35:
5a:01:aa:ce:43:cb:07:2b:a9:8d:29:0c:95:57:cb:
7c:8f:a8:8e:07:d8:e7:7f:07:b3:70:68:a2:ad:ef:
4e:e6:36:db:68:27:73:3d:14:41:1a:9a:1f:c3:39:
0e:14:a6:f7:e2:04:bf:be:a6:da:f7:7e:86:94:d2:
9f:7d:cd:b4:ac:39:62:dc:db:ca:f1:5b:8a:3b:b6:
9f:26:44:0e:8a:d9:93:56:2d:33:a9:0a:4c:f7:52:
80:72:00:94:67:95:08:1d:a7:9c:9a:bb:4d:5a:cc:
dd:3e:18:b5:bc:27:10:b0:41:30:53:02:1e:e5:e5:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.244.0/24
155.103.156.0/22
IPv6:
2602:f848::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401293
402252
402315
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:71:1c:e8:5e:3e:4d:63:1c:db:79:4b:3d:f7:5e:2a:28:e7:
16:f4:cc:61:0e:e9:51:df:19:74:a8:b7:60:9a:a1:32:07:f1:
91:b3:68:42:c4:fe:95:35:b9:53:5a:eb:cc:42:e6:ba:a3:0c:
9a:9c:6c:31:9b:e7:b2:88:a4:e1:f3:3c:7f:74:23:66:9d:fc:
9f:0a:0d:bc:70:1e:6c:50:b6:91:ee:8c:b2:ea:2a:54:69:71:
42:20:32:49:5d:3a:fd:c7:bc:41:6d:96:c4:3e:87:9d:ca:51:
1d:76:d6:df:6a:0d:69:8b:87:8a:2b:04:22:2b:2b:a2:bf:79:
f9:ca:93:83:66:51:81:ae:b3:61:ca:5e:4a:50:f5:b2:14:3c:
46:c1:71:1b:73:52:c0:69:f5:6b:6b:84:c8:10:61:b5:d7:95:
db:1f:7d:c0:e4:e4:84:b0:8d:ce:b5:62:ed:65:29:70:ec:ad:
c8:7e:75:0e:b9:40:ee:11:27:1a:dd:8e:7c:ac:ad:d8:73:6c:
5a:27:c0:88:91:7e:bf:3a:46:65:58:b1:83:7d:bb:3d:38:95:
97:ff:a9:db:76:63:b6:ef:47:fd:ab:f6:30:06:db:95:c9:7e:
c5:ea:e6:86:0b:7e:a3:7b:95:8e:57:45:ef:62:df:4e:e1:98:
40:29:76:5e
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE0y4H9tDwVVQakDrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDMxNzEzMjQyMFoXDTI3MDcwNzE1MjQ0MlowLzEtMCsGA1UEAxMk
ZjMzMGZhYzMtZjRhZS00NDIxLTkzMDUtN2UxNjQ5MTk1YzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowYIeuTa8LDNwo42hKa/7w7a2tPdbxe32Gkp
c9CXhSGZAW5dWZSDhb0RjvzFz3FZSE/D3XjqbHPK8wmj/z5E0UVaNMdyrZkWyQxF
GhH64BQE52Eh/3MLLp1XeQzjWDl0OokzKdRxqDT9u4v2je564qBFMj598Nr9yoQ+
jrg6cEf21sqyxzVaAarOQ8sHK6mNKQyVV8t8j6iOB9jnfwezcGiire9O5jbbaCdz
PRRBGpofwzkOFKb34gS/vqba936GlNKffc20rDli3NvK8VuKO7afJkQOitmTVi0z
qQpM91KAcgCUZ5UIHaecmrtNWszdPhi1vCcQsEEwUwIe5eXIwwIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFOpn0IilWxtuSR6s3UVphAUgx5OvMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m
MzMwZmFjMy1mNGFlLTQ0MjEtOTMwNS03ZTE2NDkxOTVjMzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YzMzBmYWMzLWY0YWUtNDQyMS05
MzA1LTdlMTY0OTE5NWMzNi9mMzMwZmFjMy1mNGFlLTQ0MjEtOTMwNS03ZTE2NDkx
OTVjMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXiPQDBAKbZ5wwDgQCAAIwCAMGACYC+EgAMCQG
CCsGAQUFBwEIAQH/BBUwE6ARMA8CAwYfjQIDBiNMAgMGI4swVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdXEc
6F4+TWMc23lLPfdeKijnFvTMYQ7pUd8ZdKi3YJqhMgfxkbNoQsT+lTW5U1rrzELm
uqMMmpxsMZvnsoik4fM8f3QjZp38nwoNvHAebFC2ke6MsuoqVGlxQiAySV06/ce8
QW2WxD6HncpRHXbW32oNaYuHiisEIisror95+cqTg2ZRga6zYcpeSlD1shQ8RsFx
G3NSwGn1a2uEyBBhtdeV2x99wOTkhLCNzrVi7WUpcOytyH51DrlA7hEnGt2OfKyt
2HNsWifAiJF+vzpGZVixg327PTiVl/+p23Zjtu9H/av2MAbblcl+xermhgt+o3uV
jldF72LfTuGYQCl2Xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:14:41 2026 by rpki-client