
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
File: 2044bf03-a0f3-4eed-9707-b517f4923781.cer (raw, json)
Hash identifier: +3CGlPLkMEg7tdDlz4KGYx1v3BBpZfOXSnmzl/juL1I=
Subject key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D03754FD0B246054B21A52700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 28 Feb 2026 13:45:22 +0000
Certificate not after: Fri 02 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 16428
IP: 162.254.124.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:75:4f:d0:b2:46:05:4b:21:a5:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 28 13:45:22 2026 GMT
Not After : Jun 2 12:45:22 2028 GMT
Subject: CN=2044bf03-a0f3-4eed-9707-b517f4923781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:47:ce:f7:db:b1:a9:75:bb:73:c1:a0:ae:
07:22:03:78:42:7e:e8:83:0d:db:6f:c6:5a:e5:9f:
2b:28:47:3a:80:1c:70:e6:06:9c:c0:94:16:b9:c1:
52:60:e7:3b:cf:ec:ba:0d:32:5c:12:85:ea:cb:cc:
0a:0d:6d:92:01:13:6e:63:9e:08:ef:04:27:44:35:
29:c1:19:36:d4:ce:1c:a8:73:c2:d5:20:27:97:4b:
fe:a9:61:78:e9:8d:39:c7:62:3b:9b:e6:d4:e6:0b:
8c:f5:98:fe:34:59:e4:cb:fd:96:4f:05:b6:e3:44:
4d:1b:9c:09:a0:92:ae:e8:fd:9a:76:29:bf:1b:dd:
e6:e5:54:c1:06:68:9b:c5:7c:0b:e5:59:72:77:af:
11:df:7a:d4:ff:91:50:ea:b8:e2:a6:03:30:0d:b7:
72:35:8e:28:32:4e:d0:37:9f:af:db:c2:6a:8a:56:
cb:48:7d:a5:d3:d7:e9:c5:59:79:d6:b3:de:5d:5d:
63:91:cd:1b:d5:08:ff:c0:2d:d4:34:e3:85:be:04:
ce:40:05:bd:d3:5f:9f:6f:02:05:e3:c3:86:8f:2f:
2a:2e:66:3c:a8:3a:7a:b8:11:6d:9a:e3:35:69:fa:
ca:ca:11:06:b2:b1:75:de:86:92:6b:40:68:07:4b:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.124.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16428
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d2:f2:c9:d6:cf:a2:34:ab:35:d7:c0:8a:eb:ed:90:10:0d:
50:ac:99:a8:57:01:e2:a7:d2:6b:04:46:1b:be:24:63:5f:e7:
c7:43:6a:11:21:95:17:1c:cc:f2:92:53:a0:d8:5a:a8:9b:ee:
25:a5:17:90:8e:95:6f:87:c1:0b:a1:31:15:31:05:8e:83:14:
8c:46:f9:2b:70:ad:5e:7b:c2:3c:de:a8:6b:0c:e5:b4:ef:e2:
3b:5f:d4:0c:5b:00:84:c1:5c:52:75:1d:62:e2:ba:60:77:14:
31:17:50:72:44:00:52:b7:3e:4d:07:58:c1:b7:80:3f:ba:0d:
e1:25:58:4b:2c:98:05:4a:a0:51:b6:3b:9d:74:e1:ba:ed:36:
cf:0b:61:fd:6e:26:4a:ac:0b:39:dc:11:4d:6a:5c:43:2c:eb:
9b:e8:02:e3:5c:a6:de:db:7b:12:bf:a3:cb:46:a6:39:b1:92:
2d:cf:1a:4a:f6:f4:eb:09:f6:f4:fe:90:fa:76:1b:30:f8:4f:
fa:31:06:7d:01:58:bc:29:52:3e:cd:c4:d9:00:e6:70:0d:6e:
f2:a0:55:15:33:d9:f0:5e:9d:79:c7:42:fa:44:f2:a7:d9:06:
d4:a2:48:19:d9:9a:d3:bf:bf:3f:5f:c4:2d:4d:5f:56:19:c9:
2f:26:2e:56
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0DdU/QskYFSyGlJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDIyODEzNDUyMloXDTI4MDYwMjEyNDUyMlowLzEtMCsGA1UEAxMk
MjA0NGJmMDMtYTBmMy00ZWVkLTk3MDctYjUxN2Y0OTIzNzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZHzvfbsal1u3PBoK4HIgN4Qn7ogw3bb8Za
5Z8rKEc6gBxw5gacwJQWucFSYOc7z+y6DTJcEoXqy8wKDW2SARNuY54I7wQnRDUp
wRk21M4cqHPC1SAnl0v+qWF46Y05x2I7m+bU5guM9Zj+NFnky/2WTwW240RNG5wJ
oJKu6P2adim/G93m5VTBBmibxXwL5Vlyd68R33rU/5FQ6rjipgMwDbdyNY4oMk7Q
N5+v28JqilbLSH2l09fpxVl51rPeXV1jkc0b1Qj/wC3UNOOFvgTOQAW901+fbwIF
48OGjy8qLmY8qDp6uBFtmuM1afrKyhEGsrF13oaSa0BoB0u0VwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFGPJ7eMKy7bGoOhh8Isvlx3uL668MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y
MDQ0YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3ZjQ5MjM3ODEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIwNDRiZjAzLWEwZjMtNGVlZC05
NzA3LWI1MTdmNDkyMzc4MS8yMDQ0YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3ZjQ5
MjM3ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKi/nwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
QCwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEApNLyydbPojSrNdfAiuvtkBANUKyZqFcB4qfSawRGG74kY1/n
x0NqESGVFxzM8pJToNhaqJvuJaUXkI6Vb4fBC6ExFTEFjoMUjEb5K3CtXnvCPN6o
awzltO/iO1/UDFsAhMFcUnUdYuK6YHcUMRdQckQAUrc+TQdYwbeAP7oN4SVYSyyY
BUqgUbY7nXThuu02zwth/W4mSqwLOdwRTWpcQyzrm+gC41ym3tt7Er+jy0amObGS
Lc8aSvb06wn29P6Q+nYbMPhP+jEGfQFYvClSPs3E2QDmcA1u8qBVFTPZ8F6decdC
+kTyp9kG1KJIGdma07+/P1/ELU1fVhnJLyYuVg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:59 2026 by rpki-client