
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
File: 08a6d347-5170-4470-abb6-1b99491a1406.cer (raw, json)
Hash identifier: wJw7leO+ZLBPuJWy8GOPR0xoayWWbWZVGy5r8ZV8CiQ=
Subject key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DB7689E29310C03447BB9A6E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 04 May 2026 00:45:17 +0000
Certificate not after: Sun 06 Aug 2028 00:45:17 +0000
Subordinate resources: IP: 23.152.0.0/24
IP: 23.163.0.0/24
IP: 66.85.26.0/23
IP: 142.202.205.0/24
IP: 192.52.166.0/23
IP: 192.169.6.0/23
IP: 192.189.2.0/24
IP: 2602:ff75::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:68:9e:29:31:0c:03:44:7b:b9:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 4 00:45:17 2026 GMT
Not After : Aug 6 00:45:17 2028 GMT
Subject: CN=08a6d347-5170-4470-abb6-1b99491a1406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5e:87:09:31:be:fd:cf:af:ef:8c:cc:d4:a8:
29:f7:54:9b:34:db:e2:a1:e5:c2:42:1a:82:df:b3:
cf:76:2d:ab:08:23:f2:1a:b5:e9:78:86:34:56:5e:
ed:72:5c:b4:59:0c:14:6c:51:72:5c:3d:cb:8e:d1:
27:22:6b:e6:18:ee:2a:58:54:b4:1e:61:33:7c:e1:
92:18:cf:75:49:63:cb:89:7b:87:a6:79:68:14:7e:
9c:6f:96:de:b5:eb:50:0c:70:d8:65:23:71:aa:1c:
01:62:11:8d:ca:7a:8d:7f:54:a7:6a:9d:e2:93:91:
45:13:0d:f5:b8:d7:a7:5c:77:9a:f8:5f:f7:30:4e:
cb:5f:ef:55:c3:57:1e:e6:05:ed:5d:4b:1c:10:e8:
85:0b:d1:2e:7f:8a:2e:b3:2b:98:3a:d2:66:16:b0:
7d:a0:f6:68:e6:50:15:f9:59:8a:9d:37:d5:45:a6:
16:88:a0:d1:58:5f:0d:03:be:bf:6d:a0:ba:58:65:
2e:eb:bd:a2:bc:45:64:a0:8f:08:88:d5:6d:7b:5e:
97:30:b0:e5:da:24:c1:1e:b6:01:59:60:d4:46:15:
2f:8a:6d:ef:69:b6:46:ab:42:6e:56:99:6b:e7:8c:
53:7a:47:1a:5a:a6:0f:e6:f5:96:56:0a:83:14:9c:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.0.0/24
23.163.0.0/24
66.85.26.0/23
142.202.205.0/24
192.52.166.0/23
192.169.6.0/23
192.189.2.0/24
IPv6:
2602:ff75::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:54:51:61:06:97:e9:3f:db:08:23:c2:e0:40:20:c9:ab:e5:
61:fd:db:68:67:5d:85:ae:b0:a0:b5:d7:31:24:0f:b5:c7:bc:
cf:25:3d:c1:49:bc:d9:52:c7:3e:61:b7:b5:0d:0f:83:c3:84:
d0:f3:ee:a7:0c:13:aa:81:24:a9:4e:3a:9d:a7:e3:dc:f1:0e:
9a:27:13:66:7b:59:0c:b8:64:1a:f7:04:da:3a:0d:31:2a:ca:
2a:f1:4e:32:d0:58:c2:6b:0a:bb:f5:0a:0a:37:a3:9c:f6:14:
5a:73:4d:0c:8d:0d:ec:3f:67:2e:71:5d:12:ef:b9:8a:de:b7:
40:2a:32:fd:51:5d:ab:27:d3:e2:c1:e6:1e:5b:b3:b9:09:87:
83:63:0d:ee:f3:00:6d:25:95:6f:8a:7b:4d:f4:b0:f9:00:9b:
b5:77:d8:2c:54:8e:a1:c2:dc:f5:8f:98:00:de:8e:83:01:f0:
1a:c4:60:b8:b7:ab:55:df:c1:65:71:45:84:ac:73:85:f4:fa:
85:7c:29:c5:bf:a5:0b:0a:27:cf:75:1c:ba:20:1f:fc:11:dc:
d1:2c:fd:a1:af:df:52:b8:b6:93:8b:3b:5c:69:11:02:ce:d1:
9f:a8:b0:22:91:f8:00:c3:27:5c:1a:f0:fd:23:6c:b8:95:ef:
fc:87:c6:b0
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE23aJ4pMQwDRHu5pugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDUwNDAwNDUxN1oXDTI4MDgwNjAwNDUxN1owLzEtMCsGA1UEAxMk
MDhhNmQzNDctNTE3MC00NDcwLWFiYjYtMWI5OTQ5MWExNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF6HCTG+/c+v74zM1Kgp91SbNNvioeXCQhqC
37PPdi2rCCPyGrXpeIY0Vl7tcly0WQwUbFFyXD3LjtEnImvmGO4qWFS0HmEzfOGS
GM91SWPLiXuHpnloFH6cb5betetQDHDYZSNxqhwBYhGNynqNf1Snap3ik5FFEw31
uNenXHea+F/3ME7LX+9Vw1ce5gXtXUscEOiFC9Euf4ousyuYOtJmFrB9oPZo5lAV
+VmKnTfVRaYWiKDRWF8NA76/baC6WGUu672ivEVkoI8IiNVte16XMLDl2iTBHrYB
WWDURhUvim3vabZGq0JuVplr54xTekcaWqYP5vWWVgqDFJzMnQIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFDTpk6hWhjkVhbo3k5UekMrQnBOPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w
OGE2ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5NDkxYTE0MDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzA4YTZkMzQ3LTUxNzAtNDQ3MC1h
YmI2LTFiOTk0OTFhMTQwNi8wOGE2ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5NDkx
YTE0MDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwUgYIKwYBBQUH
AQcBAf8EQzBBMDAEAgABMCoDBAAXmAADBAAXowADBAFCVRoDBACOys0DBAHANKYD
BAHAqQYDBADAvQIwDQQCAAIwBwMFACYC/3UwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARFRRYQaX6T/bCCPC
4EAgyavlYf3baGddha6woLXXMSQPtce8zyU9wUm82VLHPmG3tQ0Pg8OE0PPupwwT
qoEkqU46nafj3PEOmicTZntZDLhkGvcE2joNMSrKKvFOMtBYwmsKu/UKCjejnPYU
WnNNDI0N7D9nLnFdEu+5it63QCoy/VFdqyfT4sHmHluzuQmHg2MN7vMAbSWVb4p7
TfSw+QCbtXfYLFSOocLc9Y+YAN6OgwHwGsRguLerVd/BZXFFhKxzhfT6hXwpxb+l
Cwonz3UcuiAf/BHc0Sz9oa/fUri2k4s7XGkRAs7Rn6iwIpH4AMMnXBrw/SNsuJXv
/IfGsA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:34:50 2026 by rpki-client