
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
File: dd638a66-157d-4b37-b487-c2b5f4dbe940.cer (raw, json)
Hash identifier: Wk7I8KtesUmgwv0LaNIzcM/2l6ld9xZ+zKF2fK9jlK8=
Subject key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584DFB5734F0406A35D911FA60E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 May 2026 08:45:11 +0000
Certificate not after: Wed 30 Aug 2028 08:45:11 +0000
Subordinate resources: AS: 46192
IP: 144.86.200.0/22
IP: 2620:9a:a000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fb:57:34:f0:40:6a:35:d9:11:fa:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: May 28 08:45:11 2026 GMT
Not After : Aug 30 08:45:11 2028 GMT
Subject: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:a4:f1:98:51:e6:5c:46:91:10:45:e9:c9:
8a:df:51:74:33:d5:82:47:05:9f:df:db:2c:ce:63:
7b:96:89:8c:49:e1:57:c2:4c:be:c0:6b:4f:e8:35:
17:7a:b1:af:70:d3:4e:5d:99:89:93:a2:d2:52:cf:
d1:e8:d7:1c:87:10:06:b0:8e:3d:62:f1:01:38:88:
47:06:f3:dc:bf:5f:3c:a4:1a:cb:6b:28:af:18:63:
97:4a:7a:a0:df:bf:fb:cc:a6:57:c5:a0:a1:be:0a:
13:32:27:71:9c:ff:1d:d5:8b:b9:eb:de:72:f7:f3:
64:bb:79:01:87:09:81:fa:a2:0e:e9:9c:52:69:32:
a6:32:25:ea:d4:99:46:e2:65:87:f4:8f:08:c6:2d:
1b:70:dc:e2:01:9e:43:da:3f:93:c3:c8:4d:57:50:
d5:36:2e:13:00:1f:ad:6d:c3:52:3a:ff:36:9c:d2:
37:1f:90:7f:19:88:30:c8:aa:17:4a:d4:94:41:ed:
17:57:53:95:0f:47:e4:47:14:50:73:ee:2c:a7:4e:
d3:87:7a:57:54:93:b5:af:ea:9c:79:5c:66:73:c8:
9c:a0:06:20:7c:51:4a:99:4c:09:d6:51:49:fe:3e:
60:56:a1:6c:cf:6c:e9:b3:e5:1d:38:89:a2:66:a8:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.200.0/22
IPv6:
2620:9a:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46192
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:3a:20:88:1e:84:74:41:38:ad:8a:66:6f:c8:22:3a:e0:a4:
eb:aa:c7:2f:82:6f:a5:36:5c:bb:43:15:49:eb:f2:9b:3d:19:
55:e4:13:8d:27:77:63:d3:2e:9a:0a:03:26:8c:40:a8:9c:cd:
15:e9:c8:ab:37:91:ab:79:64:bb:c1:67:63:6b:b1:5b:f6:d5:
f7:8b:40:c5:d3:eb:b8:41:26:7b:72:4e:dc:7d:09:80:49:52:
0d:34:1f:4c:96:1c:77:23:53:12:a5:49:bd:91:dd:98:5b:c9:
7e:5c:94:bd:d8:4e:c8:ca:d3:5f:41:8e:9a:dc:79:90:ef:c9:
8c:14:7d:ad:fc:3e:b5:66:08:62:ed:92:89:17:4a:8f:9f:44:
9d:04:ee:7c:b5:c5:99:46:3a:b9:98:83:2c:b4:55:77:aa:bf:
8c:ec:e8:e9:a5:4b:48:86:f8:46:0a:57:3c:cc:27:3a:c4:fe:
1f:dd:59:2a:91:6b:23:a8:25:d8:c8:db:60:4c:be:96:ad:86:
4c:ac:f0:48:d1:e8:96:03:8f:e7:a1:3f:b4:6b:aa:02:d7:43:
5e:89:ec:15:80:20:13:d9:e5:20:07:1d:35:46:57:a4:77:bd:
f9:5d:0f:fc:2d:b5:96:7c:ca:69:8b:7e:62:ad:9b:84:0a:71:
49:31:8b:82
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE37VzTwQGo12RH6YOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI2MDUyODA4NDUxMVoXDTI4MDgzMDA4NDUxMVowLzEtMCsGA1UEAxMk
ZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJlOTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w6k8ZhR5lxGkRBF6cmK31F0M9WCRwWf39ss
zmN7lomMSeFXwky+wGtP6DUXerGvcNNOXZmJk6LSUs/R6NcchxAGsI49YvEBOIhH
BvPcv188pBrLayivGGOXSnqg37/7zKZXxaChvgoTMidxnP8d1Yu5695y9/Nku3kB
hwmB+qIO6ZxSaTKmMiXq1JlG4mWH9I8Ixi0bcNziAZ5D2j+Tw8hNV1DVNi4TAB+t
bcNSOv82nNI3H5B/GYgwyKoXStSUQe0XV1OVD0fkRxRQc+4sp07Th3pXVJO1r+qc
eVxmc8icoAYgfFFKmUwJ1lFJ/j5gVqFsz2zps+UdOImiZqjcqQIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFPEjJYFJArTHKpyQbSbFkBJ8lrZSMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
ZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RkNjM4YTY2LTE1N2QtNGIzNy1i
NDg3LWMyYjVmNGRiZTk0MC9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRk
YmU5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAKQVsgwDwQCAAIwCQMHACYgAJqgADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMAtHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMjogiB6EdEE4rYpmb8giOuCk
66rHL4JvpTZcu0MVSevymz0ZVeQTjSd3Y9MumgoDJoxAqJzNFenIqzeRq3lku8Fn
Y2uxW/bV94tAxdPruEEme3JO3H0JgElSDTQfTJYcdyNTEqVJvZHdmFvJflyUvdhO
yMrTX0GOmtx5kO/JjBR9rfw+tWYIYu2SiRdKj59EnQTufLXFmUY6uZiDLLRVd6q/
jOzo6aVLSIb4RgpXPMwnOsT+H91ZKpFrI6gl2MjbYEy+lq2GTKzwSNHolgOP56E/
tGuqAtdDXonsFYAgE9nlIAcdNUZXpHe9+V0P/C21lnzKaYt+Yq2bhApxSTGLgg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:36 2026 by rpki-client