
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7.cer
File: f87277fc-cecb-432c-a012-437d95808fb7.cer (raw, json)
Hash identifier: +9BitUC5dojPap2WamWmkW7AnFY9eiEBVEqoCK43+RY=
Subject key identifier: 34:9C:3C:68:93:5A:AE:BC:58:84:D1:D7:AA:81:FC:D9:07:D0:94:8A
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D370DB4FCE32DF84DB8F42BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/f87277fc-cecb-432c-a012-437d95808fb7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Mar 2026 01:18:39 +0000
Certificate not after: Wed 21 Jun 2028 01:18:39 +0000
Subordinate resources: AS: 402303
IP: 23.154.228.0/24
IP: 2602:f425::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:37:0d:b4:fc:e3:2d:f8:4d:b8:f4:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 19 01:18:39 2026 GMT
Not After : Jun 21 01:18:39 2028 GMT
Subject: CN=f87277fc-cecb-432c-a012-437d95808fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:e7:a0:ed:ac:69:7d:76:fa:10:72:ae:8d:
c9:0e:b0:14:d2:39:0e:25:12:6c:ee:7c:f8:36:30:
a0:4b:19:a8:51:0a:86:08:4e:4c:4b:9d:b5:05:15:
89:29:26:7e:a3:2a:a2:f6:d1:ab:c1:ca:9e:6b:da:
65:87:9f:8d:31:c2:e8:56:af:4b:87:8d:15:f3:78:
37:13:cd:3f:cb:77:91:aa:a6:4d:63:fe:61:aa:5d:
93:d1:7b:06:59:0a:db:b3:d4:40:34:ab:14:3a:f7:
5d:83:22:cf:12:e0:ee:b2:63:9f:d3:20:0e:18:e0:
8b:fa:ea:c3:5c:64:38:81:57:70:da:9d:22:40:42:
c5:87:b5:60:95:57:c1:59:63:e3:6f:af:6e:f0:d4:
74:0d:eb:bc:4f:de:86:94:0a:5c:46:cd:43:9b:5b:
b2:cd:d9:3d:d8:a9:f2:07:a1:be:bb:8b:50:10:03:
ab:a0:dd:c6:e9:ba:08:24:d4:5b:ba:3f:52:f7:14:
58:de:59:cb:f0:63:6f:59:d9:3c:a5:db:40:1d:12:
e2:80:cf:e9:c8:a9:17:58:88:75:a7:7e:dd:94:05:
b7:c9:46:2a:7a:0b:15:a1:11:80:f9:51:47:51:b1:
25:14:a2:37:cc:e5:d8:68:03:22:94:c4:7e:cd:7d:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:3C:68:93:5A:AE:BC:58:84:D1:D7:AA:81:FC:D9:07:D0:94:8A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f87277fc-cecb-432c-a012-437d95808fb7/f87277fc-cecb-432c-a012-437d95808fb7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.228.0/24
IPv6:
2602:f425::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402303
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:7e:f0:b1:f0:f6:dd:7b:38:ef:22:91:8f:78:03:87:36:3d:
a7:8c:e0:87:e2:81:87:d5:bd:9b:4b:1c:d6:54:de:a1:6b:ed:
e9:94:1c:06:b4:d2:18:64:f8:b6:5d:c9:dc:63:55:40:85:41:
28:d3:be:96:ec:0e:29:92:75:68:25:92:bb:b6:a7:a8:37:63:
16:e9:1b:97:d5:b7:01:64:ca:07:a1:b0:21:d3:8a:16:a1:3f:
c9:1f:3c:7f:e4:fe:05:0a:a8:bf:34:e0:bf:08:3f:3c:76:aa:
7c:bd:de:98:f9:f2:a9:12:bf:d0:cd:21:dc:b1:98:ed:cb:3e:
c4:e6:b1:e8:bc:e1:4d:8d:c4:1f:4f:e2:b0:7b:25:4b:a6:aa:
7b:77:08:fb:00:a6:26:04:83:dc:4a:d3:30:ff:95:3a:05:6a:
e7:58:3a:4e:84:f5:5f:4d:0d:bf:39:12:dd:12:ea:f4:31:f2:
1b:ab:50:8d:7e:28:37:f0:b4:98:64:32:3b:48:fb:22:30:98:
8f:9a:0f:ea:f8:17:1c:9b:d4:70:7f:3e:6d:87:2f:85:e0:7d:
fe:d5:9a:5a:43:d2:e5:0f:03:3c:bc:70:46:f1:e8:05:2b:be:
54:54:92:26:ff:36:d2:7a:c3:30:f1:c1:11:42:e1:e0:e5:ce:
ad:e2:f3:0b
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE03DbT84y34Tbj0K8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDMxOTAxMTgzOVoXDTI4MDYyMTAxMTgzOVowLzEtMCsGA1UEAxMk
Zjg3Mjc3ZmMtY2VjYi00MzJjLWEwMTItNDM3ZDk1ODA4ZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno/noO2saX12+hByro3JDrAU0jkOJRJs7nz4
NjCgSxmoUQqGCE5MS521BRWJKSZ+oyqi9tGrwcqea9plh5+NMcLoVq9Lh40V83g3
E80/y3eRqqZNY/5hql2T0XsGWQrbs9RANKsUOvddgyLPEuDusmOf0yAOGOCL+urD
XGQ4gVdw2p0iQELFh7VglVfBWWPjb69u8NR0Deu8T96GlApcRs1Dm1uyzdk92Kny
B6G+u4tQEAOroN3G6boIJNRbuj9S9xRY3lnL8GNvWdk8pdtAHRLigM/pyKkXWIh1
p37dlAW3yUYqegsVoRGA+VFHUbElFKI3zOXYaAMilMR+zX2TcQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFDScPGiTWq68WITR16qB/NkH0JSKMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m
ODcyNzdmYy1jZWNiLTQzMmMtYTAxMi00MzdkOTU4MDhmYjcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Y4NzI3N2ZjLWNlY2ItNDMyYy1h
MDEyLTQzN2Q5NTgwOGZiNy9mODcyNzdmYy1jZWNiLTQzMmMtYTAxMi00MzdkOTU4
MDhmYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXmuQwDgQCAAIwCAMGACYC9CUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYjfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqfvCx8PbdezjvIpGPeAOHNj2n
jOCH4oGH1b2bSxzWVN6ha+3plBwGtNIYZPi2XcncY1VAhUEo076W7A4pknVoJZK7
tqeoN2MW6RuX1bcBZMoHobAh04oWoT/JHzx/5P4FCqi/NOC/CD88dqp8vd6Y+fKp
Er/QzSHcsZjtyz7E5rHovOFNjcQfT+KweyVLpqp7dwj7AKYmBIPcStMw/5U6BWrn
WDpOhPVfTQ2/ORLdEur0MfIbq1CNfig38LSYZDI7SPsiMJiPmg/q+Bccm9Rwfz5t
hy+F4H3+1ZpaQ9LlDwM8vHBG8egFK75UVJIm/zbSesMw8cERQuHg5c6t4vML
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:50:00 2026 by rpki-client