
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
File: 332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer (raw, json)
Hash identifier: 08bropJTZAzhaTN9JxLqJVeVqzlogLpwZ/7677bOJB8=
Subject key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584DDD18DC0C3BE0127BE5E2C580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 17 May 2026 12:45:18 +0000
Certificate not after: Sat 19 Aug 2028 12:45:18 +0000
Subordinate resources: AS: 15233
AS: 15330
AS: 36476
AS: 53433
IP: 64.69.208.0/22
IP: 64.69.213.0 -- 64.69.218.255
IP: 64.69.220.0 -- 64.69.222.255
IP: 209.17.112.0 -- 209.17.117.255
IP: 209.17.119.0 -- 209.17.127.255
IP: 209.237.134.0/23
IP: 209.237.142.0/24
IP: 209.237.150.0 -- 209.237.152.255
IP: 209.237.155.0/24
IP: 209.237.160.0 -- 209.237.171.255
IP: 209.237.176.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:dd:18:dc:0c:3b:e0:12:7b:e5:e2:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: May 17 12:45:18 2026 GMT
Not After : Aug 19 12:45:18 2028 GMT
Subject: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:e1:0c:fa:16:14:4b:3e:1f:4a:0e:bc:ff:
c1:77:d3:d9:77:3a:55:ee:f2:fa:c8:1d:3a:0e:75:
0a:9b:18:bc:bd:eb:9b:63:db:e1:ed:92:41:0e:ff:
0d:a5:51:12:ac:ef:50:ff:df:b0:ee:e3:bc:b9:e7:
56:21:e7:c4:ae:54:5c:ce:93:92:a1:9f:e9:20:75:
d7:0d:93:d6:3a:c0:85:64:06:f1:ad:7a:9b:cd:fd:
a8:f9:ba:3f:92:ff:b9:92:4e:65:c8:80:80:1a:33:
c2:ad:cd:87:77:2f:e4:2c:fa:61:27:55:f0:df:cb:
33:7d:e0:fe:72:c4:2b:88:d3:42:1f:63:9a:3c:9c:
3a:a2:33:ae:c1:46:0b:f2:3b:28:3b:5e:7c:2e:4b:
aa:f1:df:9a:39:b2:fc:d4:f6:1b:e0:a2:9c:41:97:
5d:75:77:44:c1:85:ba:92:25:81:d9:49:4a:3f:de:
d4:a0:2c:75:e0:2d:66:27:ee:ca:bd:74:e3:ca:25:
a8:a3:7d:e2:99:52:b0:e5:ce:00:f1:f0:f7:f4:3a:
1d:4b:fb:8a:42:66:9f:af:bc:49:26:bc:d2:7b:d3:
5f:52:4d:65:78:5a:19:6c:90:ae:1c:f9:ba:8c:d3:
33:6d:39:35:53:82:36:d0:e0:4b:f4:96:26:ee:f6:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.208.0/22
64.69.213.0-64.69.218.255
64.69.220.0-64.69.222.255
209.17.112.0-209.17.117.255
209.17.119.0-209.17.127.255
209.237.134.0/23
209.237.142.0/24
209.237.150.0-209.237.152.255
209.237.155.0/24
209.237.160.0-209.237.171.255
209.237.176.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15233
15330
36476
53433
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:6f:a0:18:af:a0:0a:9f:d2:6c:25:ce:70:ec:6f:7f:7b:4e:
cf:40:20:55:fd:2f:7b:3f:54:fe:9f:60:cb:42:62:11:52:8b:
c3:fe:0a:fd:88:bd:14:9f:7e:90:ea:3f:6e:20:22:87:f9:eb:
8d:cb:01:28:5f:38:d9:99:3d:9a:09:95:5c:ab:da:20:c2:ac:
6d:d0:94:aa:05:42:f9:db:be:3a:dc:51:77:7e:65:34:c8:fd:
cf:a6:ef:e9:75:44:12:63:ef:9c:16:23:03:a2:8c:2c:76:78:
85:03:13:d2:be:ac:04:ca:59:66:10:85:d6:e7:49:9e:95:86:
28:61:92:56:83:d0:9a:2e:7b:f3:ef:60:2d:ca:18:3f:d7:7d:
da:87:b2:fa:cb:49:d1:7d:c1:3d:54:ed:90:f0:55:33:48:d1:
45:b6:fd:ac:a0:c3:90:f9:d4:38:26:0e:a2:3e:06:d0:a4:83:
08:83:db:53:22:df:54:9e:c5:ee:3b:50:ee:18:d8:ae:90:31:
e1:ec:3e:6a:d8:b0:58:97:f0:b0:c3:1c:5a:ef:ea:b1:1a:dc:
bb:6e:9d:89:4e:2d:8b:06:ba:a6:5f:b3:2b:c0:04:f6:0c:a9:
90:da:b2:d5:a2:50:a3:ba:59:e0:76:3d:43:b1:7a:19:dc:fb:
05:83:09:a6
-----BEGIN CERTIFICATE-----
MIIHgzCCBmugAwIBAgIUAQ0Mn0MoWE3dGNwMO+ASe+XixYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MDUxNzEyNDUxOFoXDTI4MDgxOTEyNDUxOFowLzEtMCsGA1UEAxMk
MzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0YmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS/hDPoWFEs+H0oOvP/Bd9PZdzpV7vL6yB06
DnUKmxi8veubY9vh7ZJBDv8NpVESrO9Q/9+w7uO8uedWIefErlRczpOSoZ/pIHXX
DZPWOsCFZAbxrXqbzf2o+bo/kv+5kk5lyICAGjPCrc2Hdy/kLPphJ1Xw38szfeD+
csQriNNCH2OaPJw6ojOuwUYL8jsoO158Lkuq8d+aObL81PYb4KKcQZdddXdEwYW6
kiWB2UlKP97UoCx14C1mJ+7KvXTjyiWoo33imVKw5c4A8fD39DodS/uKQmafr7xJ
JrzSe9NfUk1leFoZbJCuHPm6jNMzbTk1U4I20OBL9JYm7vbX9wIDAQABo4IElTCC
BJEwHQYDVR0OBBYEFATSUHzgVfRaGgJw0oSCQ8wweXHGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
MzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMzMmQ0YzFjLTY4ZmQtNDZiYS05
NDUwLTg0Njk3ZmJlNGJjYi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2Zi
ZTRiY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYsGCCsGAQUF
BwEHAQH/BHwwejB4BAIAATByAwQCQEXQMAwDBABARdUDBABARdowDAMEAkBF3AME
AEBF3jAMAwQE0RFwAwQB0RF0MAwDBADREXcDBAfREQADBAHR7YYDBADR7Y4wDAME
AdHtlgMEANHtmAMEANHtmzAMAwQF0e2gAwQC0e2oAwQE0e2wMCcGCCsGAQUFBwEI
AQH/BBgwFqAUMBICAjuBAgI74gIDAI58AgMA0LkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhm+gGK+gCp/S
bCXOcOxvf3tOz0AgVf0vez9U/p9gy0JiEVKLw/4K/Yi9FJ9+kOo/biAih/nrjcsB
KF842Zk9mgmVXKvaIMKsbdCUqgVC+du+OtxRd35lNMj9z6bv6XVEEmPvnBYjA6KM
LHZ4hQMT0r6sBMpZZhCF1udJnpWGKGGSVoPQmi578+9gLcoYP9d92oey+stJ0X3B
PVTtkPBVM0jRRbb9rKDDkPnUOCYOoj4G0KSDCIPbUyLfVJ7F7jtQ7hjYrpAx4ew+
atiwWJfwsMMcWu/qsRrcu26diU4tiwa6pl+zK8AE9gypkNqy1aJQo7pZ4HY9Q7F6
Gdz7BYMJpg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:45 2026 by rpki-client