
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer
File: 72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer (raw, json)
Hash identifier: KA3WvziMAoZanNLIF9kxSItLCRcyken69FTm6VC1xb4=
Subject key identifier: 24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CF6E53E8E54831B4A0BAF5940
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Feb 2026 01:45:23 +0000
Certificate not after: Mon 29 May 2028 00:45:23 +0000
Subordinate resources: IP: 163.6.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:e5:3e:8e:54:83:1b:4a:0b:af:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 24 01:45:23 2026 GMT
Not After : May 29 00:45:23 2028 GMT
Subject: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:02:03:6e:68:b1:2d:e9:2c:45:1e:c9:1c:
14:46:8e:7b:19:47:e2:6d:d6:50:05:3d:8b:f5:86:
93:4a:a6:56:26:f2:b5:a8:72:a8:48:b3:50:a7:01:
b5:2b:e9:3d:ab:92:47:bb:12:98:d3:2b:4f:97:4c:
48:1b:77:6a:38:40:96:90:96:ce:8e:a8:01:74:da:
cc:ca:c9:8a:22:81:d0:50:2b:a0:98:b7:ca:9b:29:
3f:a6:3d:af:43:20:90:f8:b8:34:7a:33:db:05:26:
cc:76:8b:82:ee:e5:b6:35:60:65:be:8a:91:87:45:
3a:5c:b3:17:48:47:d6:c3:31:26:16:a2:a8:8d:f6:
2f:2e:39:8e:e6:83:7e:c7:aa:22:79:b8:37:a4:92:
38:bb:0f:a1:a1:62:8d:c9:e7:77:07:df:c9:91:74:
94:8f:41:95:c1:71:80:0b:d3:c5:49:e6:13:1a:80:
e8:e5:9f:ad:5f:02:5b:bd:b1:6d:7f:79:f4:0d:7a:
6c:4d:9f:d1:39:23:b2:88:84:7a:0d:08:c5:59:89:
13:34:e2:08:b0:30:78:bd:92:03:4a:0f:ba:ee:04:
4e:7f:6f:ab:de:b8:55:67:5b:08:09:61:1d:1d:4e:
ec:a4:46:1b:61:4e:ee:28:d0:5b:15:b0:20:1c:34:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
163.6.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:5b:b3:cd:f1:5f:6f:d0:7d:6c:c4:bd:f6:c7:8a:67:a2:a4:
b7:93:e4:50:52:14:9d:aa:60:5f:4b:6f:6e:94:b2:72:a1:a8:
65:ad:a8:16:7b:26:74:1c:76:14:ea:0f:67:13:14:69:63:9f:
d3:46:0d:ba:9f:42:86:d8:65:fe:85:ea:a3:fc:1b:37:96:5a:
73:52:fc:88:36:e3:80:56:64:7b:4b:28:21:40:7a:3b:d2:0f:
f7:2d:85:b0:9a:5e:f6:7a:87:7b:15:8a:b8:61:78:2f:34:a0:
eb:cc:83:02:1a:ed:21:56:d8:a8:a9:5b:29:08:ef:e9:2e:c4:
d8:3d:84:4f:4a:61:49:c7:ee:45:6d:50:f4:e7:d9:5b:5d:4f:
46:84:a0:fa:64:a9:e6:a8:e9:55:8c:0a:03:70:7c:5b:f9:89:
5a:5b:73:b4:a9:14:00:e1:b2:0c:b4:6d:87:aa:11:b0:86:15:
cd:75:e1:0b:dd:2b:90:5c:5b:02:9e:83:50:1b:65:89:b9:36:
0c:b7:55:e5:86:25:12:4a:3a:18:13:d4:09:0c:5b:01:3e:f9:
80:9d:2f:89:0f:29:fa:97:23:50:45:54:1d:bb:73:8d:d0:b0:
e1:d7:1a:8e:b2:5e:9b:ce:fe:8c:2a:eb:b7:e0:0c:73:8f:c6:
d9:01:1c:04
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEz25T6OVIMbSguvWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MDIyNDAxNDUyM1oXDTI4MDUyOTAwNDUyM1owLzEtMCsGA1UEAxMk
NzJkNDkwZjAtNDRhMC00MGUzLWFmYzItZDlmNDM1MzRkN2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSUCA25osS3pLEUeyRwURo57GUfibdZQBT2L
9YaTSqZWJvK1qHKoSLNQpwG1K+k9q5JHuxKY0ytPl0xIG3dqOECWkJbOjqgBdNrM
ysmKIoHQUCugmLfKmyk/pj2vQyCQ+Lg0ejPbBSbMdouC7uW2NWBlvoqRh0U6XLMX
SEfWwzEmFqKojfYvLjmO5oN+x6oiebg3pJI4uw+hoWKNyed3B9/JkXSUj0GVwXGA
C9PFSeYTGoDo5Z+tXwJbvbFtf3n0DXpsTZ/ROSOyiIR6DQjFWYkTNOIIsDB4vZID
Sg+67gROf2+r3rhVZ1sICWEdHU7spEYbYU7uKNBbFbAgHDQtawIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFCTsh7sFwXpgXyYKrLeruNySiVGkMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83
MmQ0OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0MzUzNGQ3ZWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzcyZDQ5MGYwLTQ0YTAtNDBlMy1h
ZmMyLWQ5ZjQzNTM0ZDdlYS83MmQ0OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0MzUz
NGQ3ZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCjBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHW7PN8V9v0H1sxL32x4pn
oqS3k+RQUhSdqmBfS29ulLJyoahlragWeyZ0HHYU6g9nExRpY5/TRg26n0KG2GX+
heqj/Bs3llpzUvyINuOAVmR7SyghQHo70g/3LYWwml72eod7FYq4YXgvNKDrzIMC
Gu0hVtioqVspCO/pLsTYPYRPSmFJx+5FbVD059lbXU9GhKD6ZKnmqOlVjAoDcHxb
+YlaW3O0qRQA4bIMtG2HqhGwhhXNdeEL3SuQXFsCnoNQG2WJuTYMt1XlhiUSSjoY
E9QJDFsBPvmAnS+JDyn6lyNQRVQdu3ON0LDh1xqOsl6bzv6MKuu34Axzj8bZARwE
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:38 2026 by rpki-client