
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9.cer
File: cac7de8c-1961-4d0f-865e-4790965b85b9.cer (raw, json)
Hash identifier: 8GuSDqsAV/7TFnEkMmq19D4r2dWvhmtnclIfBnPD22Y=
Subject key identifier: 42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CCD04FA9E76B1FE313D4F7300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Feb 2026 01:45:22 +0000
Certificate not after: Sun 14 May 2028 00:45:22 +0000
Subordinate resources: AS: 13741
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:04:fa:9e:76:b1:fe:31:3d:4f:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 9 01:45:22 2026 GMT
Not After : May 14 00:45:22 2028 GMT
Subject: CN=cac7de8c-1961-4d0f-865e-4790965b85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:42:55:09:43:8d:a6:76:85:d0:94:f6:e4:
fc:b7:6d:5d:9b:3b:72:fd:45:59:83:ab:f1:0b:8d:
c0:c7:e9:58:7e:49:ac:41:7a:d8:c3:96:39:b6:96:
19:e8:fb:a0:c3:42:f7:2f:cd:4e:57:bc:cf:ec:9a:
f0:51:6d:ca:9a:78:e3:fa:ea:54:87:2e:7f:0d:dc:
3b:3e:07:68:0f:63:51:04:41:65:18:32:8d:6e:32:
9f:f6:48:96:0e:61:7c:3f:40:ef:96:5f:da:97:62:
fa:2f:2d:26:9f:28:a5:0f:2a:76:3e:59:19:06:2a:
76:df:56:42:df:d0:76:15:67:02:6f:50:b5:c9:1c:
99:9f:1d:fd:43:31:ee:47:94:f8:f4:3a:b8:89:eb:
ed:ce:33:b6:a0:aa:3e:45:0b:23:7a:31:09:c8:b2:
87:04:f4:d9:b2:9e:82:51:e1:82:8b:7e:3e:80:7d:
27:1c:1a:26:42:f4:2d:70:e3:b6:ce:d4:03:06:86:
a5:cb:30:52:6f:61:a8:79:28:93:d0:e6:bb:1c:51:
fc:81:72:bf:bc:f3:83:fe:02:2c:1a:3c:c1:6e:7f:
51:95:5f:a0:eb:19:ef:aa:cc:73:70:56:ea:5b:9e:
cb:5a:74:af:db:62:ac:e2:a9:9f:4f:ac:df:8b:3b:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:5B:AA:F1:14:9E:4A:E1:F1:44:0A:F3:38:7B:DA:CF:03:67:86
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cac7de8c-1961-4d0f-865e-4790965b85b9/cac7de8c-1961-4d0f-865e-4790965b85b9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13741
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:77:05:d6:6e:9d:72:f2:3d:76:a6:46:f3:d8:2b:48:83:3b:
2f:40:2d:bc:6c:d5:9b:f5:4f:f1:66:d3:dc:a3:9a:a9:8e:9c:
65:81:cb:74:34:3f:84:8e:80:69:5f:ea:65:f1:3b:be:f3:e7:
fd:94:9c:b7:a3:51:e8:8b:66:40:19:c4:2e:a6:55:43:d8:78:
56:f6:22:63:ea:37:d1:96:87:2b:e6:53:2f:4c:3d:fb:29:03:
ba:d9:cf:e5:0d:a0:55:25:56:6c:6d:5e:a0:5f:5b:fe:6c:a8:
15:29:b6:c3:67:90:79:0f:91:af:7d:aa:08:0f:da:51:7c:9a:
06:ab:a6:c3:9b:bc:00:3c:b7:70:cf:c5:c8:8e:de:18:f4:bd:
e7:82:1e:b4:72:2a:15:61:04:4b:4c:f0:04:38:70:aa:31:87:
60:b1:08:65:01:ee:c7:ed:1f:fe:8a:78:f5:e6:83:43:80:10:
bb:bb:9c:45:84:44:73:c0:09:42:0c:79:3d:7a:24:3e:08:7c:
5d:ad:fd:87:5f:14:41:f1:fc:f7:15:8b:88:d0:74:34:c6:4b:
84:2c:49:17:06:1a:69:62:3a:03:73:ec:52:26:b6:a1:9d:8b:
49:df:4a:cf:0d:5a:c6:da:05:10:1f:47:a5:2d:d1:c9:3e:a6:
3f:f1:a8:3a
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEzNBPqedrH+MT1PcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDIwOTAxNDUyMloXDTI4MDUxNDAwNDUyMlowLzEtMCsGA1UEAxMk
Y2FjN2RlOGMtMTk2MS00ZDBmLTg2NWUtNDc5MDk2NWI4NWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9CVQlDjaZ2hdCU9uT8t21dmzty/UVZg6vx
C43Ax+lYfkmsQXrYw5Y5tpYZ6Pugw0L3L81OV7zP7JrwUW3Kmnjj+upUhy5/Ddw7
PgdoD2NRBEFlGDKNbjKf9kiWDmF8P0Dvll/al2L6Ly0mnyilDyp2PlkZBip231ZC
39B2FWcCb1C1yRyZnx39QzHuR5T49Dq4ievtzjO2oKo+RQsjejEJyLKHBPTZsp6C
UeGCi34+gH0nHBomQvQtcOO2ztQDBoalyzBSb2GoeSiT0Oa7HFH8gXK/vPOD/gIs
GjzBbn9RlV+g6xnvqsxzcFbqW57LWnSv22Ks4qmfT6zfizthLwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFELAW6rxFJ5K4fFECvM4e9rPA2eGMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
YWM3ZGU4Yy0xOTYxLTRkMGYtODY1ZS00NzkwOTY1Yjg1YjkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NhYzdkZThjLTE5NjEtNGQwZi04
NjVlLTQ3OTA5NjViODViOS9jYWM3ZGU4Yy0xOTYxLTRkMGYtODY1ZS00NzkwOTY1
Yjg1YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICNa0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP3cF1m6dcvI9dqZG89grSIM7L0At
vGzVm/VP8WbT3KOaqY6cZYHLdDQ/hI6AaV/qZfE7vvPn/ZSct6NR6ItmQBnELqZV
Q9h4VvYiY+o30ZaHK+ZTL0w9+ykDutnP5Q2gVSVWbG1eoF9b/myoFSm2w2eQeQ+R
r32qCA/aUXyaBqumw5u8ADy3cM/FyI7eGPS954IetHIqFWEES0zwBDhwqjGHYLEI
ZQHux+0f/op49eaDQ4AQu7ucRYREc8AJQgx5PXokPgh8Xa39h18UQfH89xWLiNB0
NMZLhCxJFwYaaWI6A3PsUia2oZ2LSd9Kzw1axtoFEB9HpS3RyT6mP/GoOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:37 2026 by rpki-client