
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
File: ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer (raw, json)
Hash identifier: lKNqbHFu5y153j5y8ts1sDOwyjVhViesrrbGZGs1KBM=
Subject key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584F67473FF54208929E8F67D880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 05 Oct 2026 17:27:16 +0000
Certificate not after: Fri 09 Jun 2028 00:45:20 +0000
Subordinate resources: AS: 10779
AS: 18932
IP: 23.161.104.0/24
IP: 192.104.136.0/24
IP: 204.115.20.0/23
IP: 2602:f590::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:67:47:3f:f5:42:08:92:9e:8f:67:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Oct 5 17:27:16 2026 GMT
Not After : Jun 9 00:45:20 2028 GMT
Subject: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:d8:15:80:21:c7:20:3b:d9:27:13:5a:15:
68:b2:40:c7:92:97:55:8d:ce:eb:e4:ed:9b:92:1f:
61:08:72:15:5c:6e:94:03:43:25:7d:27:99:aa:23:
52:a4:59:29:44:a7:30:94:7b:92:b6:81:6d:b3:2a:
61:83:ed:08:e2:6f:d4:ee:33:cc:85:8a:c5:79:f0:
14:bc:c2:b2:a5:86:18:af:9e:14:5a:19:dd:57:d3:
86:05:e7:cf:34:b8:7d:51:fd:65:aa:6c:12:c8:f3:
5e:84:47:65:5d:83:b7:52:7d:5a:ec:b5:8f:c8:f0:
07:1f:a2:9c:a5:25:ff:c6:e9:66:58:1f:6f:6a:21:
5f:d9:50:25:d0:9c:53:45:52:ef:59:1d:da:f9:5b:
63:11:3d:86:6e:9a:c8:47:e8:53:09:2f:59:89:2d:
a7:b4:ab:72:54:fc:8b:34:a7:cc:d5:d0:8c:c8:0d:
4f:a1:43:73:90:3e:e6:fd:2a:07:47:bd:5e:00:cf:
ff:cc:10:1e:71:7d:e1:22:57:3a:a0:40:01:5a:50:
94:96:60:43:36:75:39:4c:16:c8:b7:68:96:fc:f3:
62:de:6d:d6:69:1f:6e:33:49:cc:05:0f:a4:69:3f:
57:db:47:8c:b3:fa:1f:09:24:07:dd:65:dd:80:0b:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.104.0/24
192.104.136.0/24
204.115.20.0/23
IPv6:
2602:f590::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10779
18932
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ba:f0:b1:e6:9e:76:7b:c6:8e:71:fb:cd:48:a0:da:51:99:
24:b9:31:7a:25:1e:2e:c1:05:59:90:a8:b5:0f:42:b2:a5:59:
50:cf:1f:d7:9b:3e:63:a5:d2:78:4b:70:63:32:47:f7:e0:1b:
72:70:55:d5:bb:d5:b2:e3:01:9d:0c:9a:fc:01:da:a1:4d:3e:
92:21:e0:16:6d:d2:5d:65:10:8d:bf:b1:84:73:f8:e2:82:7d:
80:ef:82:ee:30:6e:c7:ee:7a:d0:b7:e9:56:ca:ec:8f:20:04:
c7:dc:00:40:f7:af:6c:37:85:77:27:f2:31:e8:e2:57:f7:85:
7d:4b:b1:ec:b6:5d:f6:94:3f:96:a3:51:c1:08:50:56:0b:2c:
ac:63:31:50:37:fe:45:30:4a:1f:7b:95:69:97:5a:89:2d:bf:
1b:a3:2e:5c:5e:e3:9b:41:a3:52:37:9c:bd:5e:50:c2:fe:da:
a5:cc:ce:be:7c:9e:a8:2a:56:d5:81:18:ce:6d:0c:fa:26:21:
9c:70:dd:38:76:9f:22:d5:2b:fc:24:23:76:f2:ff:2c:ad:60:
24:61:4f:d3:f3:66:10:cb:77:3f:10:fc:d0:6a:c6:36:d9:aa:
c8:18:a3:86:8b:d3:d1:87:85:69:b5:44:3b:10:dc:28:b9:a2:
94:52:57:53
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWE9nRz/1QgiSno9n2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MTAwNTE3MjcxNloXDTI4MDYwOTAwNDUyMFowLzEtMCsGA1UEAxMk
YWQyMGJhYjEtMTFlZi00ZjQyLWE3MTgtYzBiNzI3ZGZjMmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDfYFYAhxyA72ScTWhVoskDHkpdVjc7r5O2b
kh9hCHIVXG6UA0MlfSeZqiNSpFkpRKcwlHuStoFtsyphg+0I4m/U7jPMhYrFefAU
vMKypYYYr54UWhndV9OGBefPNLh9Uf1lqmwSyPNehEdlXYO3Un1a7LWPyPAHH6Kc
pSX/xulmWB9vaiFf2VAl0JxTRVLvWR3a+VtjET2GbprIR+hTCS9ZiS2ntKtyVPyL
NKfM1dCMyA1PoUNzkD7m/SoHR71eAM//zBAecX3hIlc6oEABWlCUlmBDNnU5TBbI
t2iW/PNi3m3WaR9uM0nMBQ+kaT9X20eMs/ofCSQH3WXdgAvsxQIDAQABo4IEOjCC
BDYwHQYDVR0OBBYEFLfya9ZyznxAANmmbp+hsfDAIgB8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h
ZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3MjdkZmMyZjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkMjBiYWIxLTExZWYtNGY0Mi1h
NzE4LWMwYjcyN2RmYzJmOC9hZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3Mjdk
ZmMyZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXoWgDBADAaIgDBAHMcxQwDgQCAAIwCAMGBCYC
9ZAAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAiobAgJJ9DBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2uvCx
5p52e8aOcfvNSKDaUZkkuTF6JR4uwQVZkKi1D0KypVlQzx/Xmz5jpdJ4S3BjMkf3
4BtycFXVu9Wy4wGdDJr8AdqhTT6SIeAWbdJdZRCNv7GEc/jign2A74LuMG7H7nrQ
t+lWyuyPIATH3ABA969sN4V3J/Ix6OJX94V9S7Hstl32lD+Wo1HBCFBWCyysYzFQ
N/5FMEofe5Vpl1qJLb8boy5cXuObQaNSN5y9XlDC/tqlzM6+fJ6oKlbVgRjObQz6
JiGccN04dp8i1Sv8JCN28v8srWAkYU/T82YQy3c/EPzQasY22arIGKOGi9PRh4Vp
tUQ7ENwouaKUUldT
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:25 2026 by rpki-client