
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a.cer
File: e3e4a23c-f99b-45fd-947d-f5496607a32a.cer (raw, json)
Hash identifier: AQmUQKwhXiJhBhcQwZ2+NmULNXKPJfcDu2FfXfCPRS4=
Subject key identifier: CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584F37459FB51731DD6C24C08780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 18 Sep 2026 12:45:11 +0000
Certificate not after: Thu 21 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 36191
IP: 192.122.215.0/24
IP: 2620:86:e000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:45:9f:b5:17:31:dd:6c:24:c0:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Sep 18 12:45:11 2026 GMT
Not After : Dec 21 13:45:11 2028 GMT
Subject: CN=e3e4a23c-f99b-45fd-947d-f5496607a32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:69:ad:03:24:03:64:53:01:7e:d2:7e:c6:
47:85:9b:f0:ff:86:32:8f:61:28:f5:59:61:be:c5:
60:03:5b:99:41:e9:91:f3:1b:29:e2:54:3f:d7:a1:
aa:de:d7:eb:2f:45:eb:bc:c3:ac:2e:8c:40:bb:db:
f0:16:ca:cc:4a:e8:a0:f7:29:f2:ce:1e:ff:c0:b7:
dd:15:0b:5e:37:cc:cf:fc:af:c2:fd:8c:66:29:89:
16:f2:81:6f:80:59:41:93:a0:4f:53:03:78:cf:d5:
d3:35:30:20:22:90:e9:8e:b5:5a:ad:aa:61:5d:cf:
5f:3f:f6:83:d4:72:f2:48:0a:54:8e:1e:39:d3:12:
41:1a:92:da:e2:2c:b6:96:5b:71:64:d8:f2:8e:91:
60:93:b6:08:d3:59:0b:3d:05:2d:b7:d7:74:b6:5c:
9f:36:75:43:4f:a2:e2:04:29:dc:14:0c:ca:ef:ed:
7b:28:a2:e8:6f:b9:b4:5f:55:aa:7e:98:6e:5b:57:
df:93:8c:6c:75:24:99:e0:4c:85:d3:5d:9e:fe:03:
80:fa:5a:71:7b:55:12:40:c0:de:24:a2:11:9e:03:
81:08:5f:f4:1b:19:d9:e0:0c:8a:91:ab:90:e9:3e:
1d:03:96:44:d5:90:46:3f:cd:21:bf:92:7b:ae:7f:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.215.0/24
IPv6:
2620:86:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36191
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:ed:b4:3f:59:0d:56:0a:d6:5a:16:9b:8d:84:a3:22:d2:fb:
d2:fb:f1:0b:1f:1d:60:22:a4:33:3d:cf:5b:54:47:87:8c:6a:
b0:21:f4:15:b5:38:90:7d:96:26:a7:0e:1d:f3:0f:8b:71:c5:
21:07:19:65:15:cc:9f:07:7f:46:f3:c4:9f:c3:46:7b:3d:a2:
cd:75:60:6f:ea:61:ee:18:e9:c3:c4:ad:07:47:8e:2d:8c:b7:
66:b7:77:2c:49:8e:a9:60:54:a2:8a:cb:72:a6:69:12:a3:d1:
69:cf:36:69:f4:18:42:1a:70:b7:31:19:b9:21:95:e3:9e:c9:
ad:d5:7f:e5:62:1b:a7:ac:05:b1:52:23:f9:27:d8:2e:51:a4:
76:bf:3e:f8:93:e1:62:47:9c:a3:ad:e2:90:c7:94:4b:b6:5b:
61:34:6d:ad:07:80:fc:5e:87:18:2d:63:a1:f3:47:aa:4a:76:
c4:1b:25:d5:4f:ae:61:97:50:71:af:b0:84:5b:b8:25:2b:18:
ef:a3:ad:c4:36:a6:01:73:67:8a:38:ab:b3:20:f8:43:d3:8a:
96:11:f3:bf:ab:9b:4a:0c:79:31:42:73:fe:e1:66:78:ba:59:
50:5c:62:c0:d4:ec:8d:80:b5:ea:e1:aa:68:8a:c1:9c:f6:b4:
90:b4:63:66
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE83RZ+1FzHdbCTAh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MDkxODEyNDUxMVoXDTI4MTIyMTEzNDUxMVowLzEtMCsGA1UEAxMk
ZTNlNGEyM2MtZjk5Yi00NWZkLTk0N2QtZjU0OTY2MDdhMzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucBprQMkA2RTAX7SfsZHhZvw/4Yyj2Eo9Vlh
vsVgA1uZQemR8xsp4lQ/16Gq3tfrL0XrvMOsLoxAu9vwFsrMSuig9ynyzh7/wLfd
FQteN8zP/K/C/YxmKYkW8oFvgFlBk6BPUwN4z9XTNTAgIpDpjrVaraphXc9fP/aD
1HLySApUjh450xJBGpLa4iy2lltxZNjyjpFgk7YI01kLPQUtt9d0tlyfNnVDT6Li
BCncFAzK7+17KKLob7m0X1WqfphuW1ffk4xsdSSZ4EyF012e/gOA+lpxe1USQMDe
JKIRngOBCF/0GxnZ4AyKkauQ6T4dA5ZE1ZBGP80hv5J7rn/vcQIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFM8tteu8brTnlTFoNjoxD170w5jdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
M2U0YTIzYy1mOTliLTQ1ZmQtOTQ3ZC1mNTQ5NjYwN2EzMmEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UzZTRhMjNjLWY5OWItNDVmZC05
NDdkLWY1NDk2NjA3YTMyYS9lM2U0YTIzYy1mOTliLTQ1ZmQtOTQ3ZC1mNTQ5NjYw
N2EzMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBADAetcwDwQCAAIwCQMHACYgAIbgADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMAjV8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVe20P1kNVgrWWhabjYSjItL7
0vvxCx8dYCKkMz3PW1RHh4xqsCH0FbU4kH2WJqcOHfMPi3HFIQcZZRXMnwd/RvPE
n8NGez2izXVgb+ph7hjpw8StB0eOLYy3Zrd3LEmOqWBUoorLcqZpEqPRac82afQY
QhpwtzEZuSGV457JrdV/5WIbp6wFsVIj+SfYLlGkdr8++JPhYkeco63ikMeUS7Zb
YTRtrQeA/F6HGC1jofNHqkp2xBsl1U+uYZdQca+whFu4JSsY76OtxDamAXNnijir
syD4Q9OKlhHzv6ubSgx5MUJz/uFmeLpZUFxiwNTsjYC16uGqaIrBnPa0kLRjZg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:15:47 2026 by rpki-client