
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.cer
File: f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.cer (raw, json)
Hash identifier: oy+t2j+BF6KBJHLCDoBjWChdAD6OhCpfe+Ws3THcVZw=
Subject key identifier: 2F:BB:EC:46:D2:B7:C6:69:60:3D:26:B0:E2:7D:4E:46:9F:6E:00:A8
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CA5EF634525935190A3226480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 26 Jan 2026 01:45:21 +0000
Certificate not after: Sun 30 Apr 2028 00:45:21 +0000
Subordinate resources: AS: 394999
IP: 2602:814:e000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:ef:63:45:25:93:51:90:a3:22:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jan 26 01:45:21 2026 GMT
Not After : Apr 30 00:45:21 2028 GMT
Subject: CN=f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:b4:fb:43:3d:c8:d2:c6:41:8d:85:4d:63:
b2:de:80:51:63:17:d7:96:52:53:2c:23:cf:75:b6:
c0:79:28:c8:7a:da:72:ba:04:6d:98:3f:b3:cf:ca:
71:13:2d:41:b2:f4:e6:0b:f5:fa:45:a9:4c:10:13:
54:48:bd:10:68:dd:75:b0:1f:2d:01:2a:b4:45:2d:
22:19:ab:3c:3e:ac:45:5c:76:bc:8d:de:dd:6e:ef:
9b:cc:55:a5:f8:da:3c:40:63:65:e2:80:e7:fb:41:
2b:50:25:2f:13:64:cc:23:17:51:d0:74:8e:9d:8c:
57:df:41:84:66:3b:74:02:48:34:a5:1a:1f:35:27:
53:25:ef:9e:0f:fb:b1:90:56:d0:9b:45:2c:c0:16:
d6:19:b4:f7:aa:c5:17:d2:83:64:bf:6f:79:b7:e9:
08:f2:7f:15:49:ca:01:7d:64:b4:a2:7e:c0:aa:94:
e5:2b:29:8b:11:32:93:57:20:77:5a:dc:54:d6:b8:
ed:c3:12:8e:8f:69:fe:23:c9:c7:42:11:85:30:2e:
42:53:8c:ac:b2:83:75:c0:c7:65:b7:82:17:d3:7b:
c2:bb:5a:80:13:cd:fc:fe:4d:f6:3b:93:1c:71:41:
a4:fe:55:b2:1b:c9:be:9d:12:0b:e2:bf:26:a1:b1:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:EC:46:D2:B7:C6:69:60:3D:26:B0:E2:7D:4E:46:9F:6E:00:A8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1/f5bd4fe6-acaa-4a93-9ffd-faccecfdd5f1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:814:e000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394999
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:f3:b8:d0:da:eb:03:16:95:6e:55:cc:7b:84:d8:61:ee:f1:
a3:ab:3f:bd:a8:4d:39:3f:a6:a0:b3:ef:60:ae:24:d0:3a:d5:
5f:0e:fb:ec:49:b0:6e:16:af:54:4d:9b:8c:67:2a:59:ae:41:
94:df:2b:40:36:45:81:e9:a0:df:5a:a6:4a:0f:67:77:e6:aa:
57:c9:d5:69:db:b1:30:bb:32:3d:76:c4:29:8f:63:e8:8f:e4:
1e:7e:4c:83:be:34:f4:66:b1:82:03:a7:7a:8b:2b:13:28:85:
c0:28:57:43:89:83:76:80:95:e5:38:64:1b:92:39:78:43:2e:
22:ef:86:ee:32:51:c4:df:02:81:0d:37:01:c7:0d:68:14:7c:
b1:e4:a5:90:7c:ce:f7:88:62:fb:e1:d2:ca:77:80:8e:3e:93:
e2:aa:94:93:52:06:80:2c:b6:6b:92:02:30:2b:28:df:09:7d:
27:16:df:ce:37:ba:66:19:1e:6c:9a:b8:20:f1:40:78:e2:cf:
ec:8a:18:b7:ab:3a:24:41:e0:45:71:cd:8d:05:15:b1:d0:56:
80:e3:e4:b5:a7:f8:c7:62:19:0b:95:9b:6e:3c:51:f9:dc:d1:
c8:b4:d9:4c:82:37:b4:0c:6a:3c:b4:e9:00:ce:06:60:5b:ef:
18:50:e4:a5
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEyl72NFJZNRkKMiZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDEyNjAxNDUyMVoXDTI4MDQzMDAwNDUyMVowLzEtMCsGA1UEAxMk
ZjViZDRmZTYtYWNhYS00YTkzLTlmZmQtZmFjY2VjZmRkNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvm0+0M9yNLGQY2FTWOy3oBRYxfXllJTLCPP
dbbAeSjIetpyugRtmD+zz8pxEy1BsvTmC/X6RalMEBNUSL0QaN11sB8tASq0RS0i
Gas8PqxFXHa8jd7dbu+bzFWl+No8QGNl4oDn+0ErUCUvE2TMIxdR0HSOnYxX30GE
Zjt0Akg0pRofNSdTJe+eD/uxkFbQm0UswBbWGbT3qsUX0oNkv295t+kI8n8VScoB
fWS0on7AqpTlKymLETKTVyB3WtxU1rjtwxKOj2n+I8nHQhGFMC5CU4yssoN1wMdl
t4IX03vCu1qAE838/k32O5MccUGk/lWyG8m+nRIL4r8mobEajQIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFC+77EbSt8ZpYD0msOJ9TkafbgCoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m
NWJkNGZlNi1hY2FhLTRhOTMtOWZmZC1mYWNjZWNmZGQ1ZjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y1YmQ0ZmU2LWFjYWEtNGE5My05
ZmZkLWZhY2NlY2ZkZDVmMS9mNWJkNGZlNi1hY2FhLTRhOTMtOWZmZC1mYWNjZWNm
ZGQ1ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmAggU4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDBgb3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBABDzuNDa6wMWlW5VzHuE2GHu8aOrP72oTTk/pqCz72Cu
JNA61V8O++xJsG4Wr1RNm4xnKlmuQZTfK0A2RYHpoN9apkoPZ3fmqlfJ1WnbsTC7
Mj12xCmPY+iP5B5+TIO+NPRmsYIDp3qLKxMohcAoV0OJg3aAleU4ZBuSOXhDLiLv
hu4yUcTfAoENNwHHDWgUfLHkpZB8zveIYvvh0sp3gI4+k+KqlJNSBoAstmuSAjAr
KN8JfScW3843umYZHmyauCDxQHjiz+yKGLerOiRB4EVxzY0FFbHQVoDj5LWn+Mdi
GQuVm248Ufnc0ci02UyCN7QMajy06QDOBmBb7xhQ5KU=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:28 2026 by rpki-client