
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer
File: f7cdccfc-98d6-46cd-9ca4-09360de8cb55.cer (raw, json)
Hash identifier: jFU7p/RgjsTcg4rwm0zeQhIzmvFT2jv9pU+wOEfkYDs=
Subject key identifier: A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D38A9EE6F1D352AF286B56CA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Mar 2026 15:09:14 +0000
Certificate not after: Wed 21 Jun 2028 15:09:14 +0000
Subordinate resources: AS: 402294
IP: 2602:f424::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:a9:ee:6f:1d:35:2a:f2:86:b5:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 19 15:09:14 2026 GMT
Not After : Jun 21 15:09:14 2028 GMT
Subject: CN=f7cdccfc-98d6-46cd-9ca4-09360de8cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:9e:bb:0c:d5:0a:f2:f9:13:6f:c7:75:74:
0b:af:50:e4:e5:20:1a:75:aa:dd:ff:20:e2:d0:27:
b6:2d:1f:88:f2:41:49:75:70:c8:ff:14:34:4e:2a:
3f:52:55:5b:9b:1c:b5:ae:52:37:e0:d8:13:06:73:
5c:7a:03:f7:45:0f:09:f0:5d:30:cb:1d:40:5a:41:
41:35:c4:31:63:05:ce:ae:08:58:aa:1b:c4:35:3b:
5d:74:51:6d:e2:f3:f3:e7:42:8f:0c:0f:40:c9:47:
81:78:32:94:bb:ca:ef:45:e1:71:18:9a:bd:5e:b3:
67:bb:e5:de:4c:fe:d7:b8:80:f1:3e:37:40:59:33:
66:a8:86:89:de:54:cf:6c:34:af:2f:12:75:a1:0f:
5e:28:32:07:e7:b8:75:f1:b6:d5:6f:99:52:0d:1d:
4e:11:b7:f4:95:fb:00:b3:1d:d3:5c:58:69:9b:4e:
94:c9:00:6e:56:c1:f0:44:e4:42:94:89:66:c4:74:
cc:ee:4d:45:31:d2:9a:7b:4f:20:72:91:5c:99:a2:
09:43:d7:6e:f6:b7:94:8b:7c:38:a1:15:44:df:5c:
53:e3:c9:d2:25:ea:94:07:92:a8:83:8c:c6:d5:7d:
04:cc:3e:65:55:1b:f6:30:dc:6a:f2:54:3a:23:cc:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:8B:CF:D6:99:D3:A1:DF:98:3B:AF:4A:5D:2F:70:A2:21:20:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f7cdccfc-98d6-46cd-9ca4-09360de8cb55/f7cdccfc-98d6-46cd-9ca4-09360de8cb55.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f424::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402294
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:4f:bc:c8:f5:41:f3:74:3c:c3:1e:84:71:db:ae:e0:43:53:
17:bf:69:0e:35:f1:87:36:d9:0d:d7:b7:b3:8d:5d:56:37:75:
9f:ef:03:52:c5:93:c2:ba:f8:9b:68:40:0b:4f:24:5d:8b:1a:
8f:37:e2:96:b2:28:b2:22:f6:63:be:62:f6:6f:4c:25:a6:f4:
1f:17:41:45:31:83:b8:a5:85:d4:db:1f:23:e4:82:d9:86:ed:
81:33:f6:e9:f8:52:bf:cc:8b:60:48:24:be:7f:fe:3d:c7:b8:
83:4b:ec:4d:ee:c6:11:d7:8b:09:74:74:be:47:48:9f:bf:35:
be:b8:b7:3a:7b:f7:25:1c:d4:a8:5a:38:f2:32:62:88:71:35:
7a:4f:84:16:dd:6c:85:ba:80:29:4d:b7:c4:70:26:72:74:92:
1b:3a:ed:b5:16:a9:8f:2d:3f:87:24:b8:c5:97:ca:b4:71:dc:
25:6d:42:ed:53:b9:7a:04:a1:e0:48:4f:b8:b8:4a:20:3c:29:
21:ba:2d:b5:a0:2e:b7:fa:0f:aa:20:e9:2e:72:e7:9e:f6:94:
6b:27:6e:a8:52:49:7f:88:15:32:a7:0d:eb:42:b3:4b:88:7d:
4f:37:53:3e:3c:57:ef:43:99:35:71:6b:62:b9:38:b3:a4:fb:
ad:b2:97:ab
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE04qe5vHTUq8oa1bKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDMxOTE1MDkxNFoXDTI4MDYyMTE1MDkxNFowLzEtMCsGA1UEAxMk
ZjdjZGNjZmMtOThkNi00NmNkLTljYTQtMDkzNjBkZThjYjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHieuwzVCvL5E2/HdXQLr1Dk5SAadard/yDi
0Ce2LR+I8kFJdXDI/xQ0Tio/UlVbmxy1rlI34NgTBnNcegP3RQ8J8F0wyx1AWkFB
NcQxYwXOrghYqhvENTtddFFt4vPz50KPDA9AyUeBeDKUu8rvReFxGJq9XrNnu+Xe
TP7XuIDxPjdAWTNmqIaJ3lTPbDSvLxJ1oQ9eKDIH57h18bbVb5lSDR1OEbf0lfsA
sx3TXFhpm06UyQBuVsHwRORClIlmxHTM7k1FMdKae08gcpFcmaIJQ9du9reUi3w4
oRVE31xT48nSJeqUB5Kog4zG1X0EzD5lVRv2MNxq8lQ6I8yNuwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFKefi8/WmdOh35g7r0pdL3CiISDVMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m
N2NkY2NmYy05OGQ2LTQ2Y2QtOWNhNC0wOTM2MGRlOGNiNTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Y3Y2RjY2ZjLTk4ZDYtNDZjZC05
Y2E0LTA5MzYwZGU4Y2I1NS9mN2NkY2NmYy05OGQ2LTQ2Y2QtOWNhNC0wOTM2MGRl
OGNiNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAmAvQkADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMGI3YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlk+8yPVB83Q8wx6Ecduu4ENTF79pDjXxhzbZDde3s41d
Vjd1n+8DUsWTwrr4m2hAC08kXYsajzfilrIosiL2Y75i9m9MJab0HxdBRTGDuKWF
1NsfI+SC2YbtgTP26fhSv8yLYEgkvn/+Pce4g0vsTe7GEdeLCXR0vkdIn781vri3
Onv3JRzUqFo48jJiiHE1ek+EFt1shbqAKU23xHAmcnSSGzrttRapjy0/hyS4xZfK
tHHcJW1C7VO5egSh4EhPuLhKIDwpIbottaAut/oPqiDpLnLnnvaUayduqFJJf4gV
MqcN60KzS4h9TzdTPjxX70OZNXFrYrk4s6T7rbKXqw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:35 2026 by rpki-client