
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
File: 7f1c958a-c540-4699-8a42-ad625fc751f3.cer (raw, json)
Hash identifier: ndcLK7hUmwDngYET5Npar1rVvpr7pYwhD07DRrslCtA=
Subject key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584F2C1AE3C86DE3AE79D266D540
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 14 Sep 2026 12:45:11 +0000
Certificate not after: Sun 17 Dec 2028 13:45:11 +0000
Subordinate resources: IP: 209.160.100.0/22
IP: 2605:6540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2c:1a:e3:c8:6d:e3:ae:79:d2:66:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Sep 14 12:45:11 2026 GMT
Not After : Dec 17 13:45:11 2028 GMT
Subject: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:0f:fa:9d:53:50:db:5a:75:2e:cb:35:43:
40:33:97:b3:3a:1c:ad:e5:51:64:e3:34:d1:df:70:
90:55:d7:aa:81:30:a2:98:20:b8:99:d4:00:3e:40:
0a:2b:bb:4f:06:47:66:7e:8d:e0:c2:2d:35:6b:78:
fa:5b:a5:14:4e:8f:26:3b:d9:6f:91:9a:8b:02:ec:
d6:45:7a:30:45:d9:19:4b:cf:6e:66:96:ad:95:ae:
ac:1f:db:04:20:f6:54:82:14:0d:f1:e6:e5:c4:f5:
88:84:84:06:4b:53:3d:e5:d6:7c:2c:f9:26:99:b0:
1a:41:2a:61:bb:e9:d4:33:08:f1:ce:05:95:3b:c6:
bf:3b:6b:4c:1e:13:9d:29:85:18:e9:f1:96:0e:93:
38:a2:92:3e:da:c1:8d:e5:2b:10:17:2e:6c:05:68:
9f:26:53:67:72:6a:15:de:cf:ef:f9:68:44:4f:6b:
5d:c6:f5:25:82:e3:4a:ec:44:10:7e:16:dc:77:94:
aa:b2:ed:26:80:be:b9:79:48:a2:b8:7d:64:68:be:
eb:c6:b9:d5:c4:48:3f:3a:62:39:1a:1c:29:8f:f0:
57:ba:31:e7:37:8b:2d:29:55:af:ef:29:0c:23:78:
c7:1b:09:99:55:62:ac:7b:70:25:7c:1f:b5:b8:96:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
209.160.100.0/22
IPv6:
2605:6540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:36:f3:43:ce:4d:05:a3:95:64:02:b4:ce:85:2e:07:89:6c:
33:6d:8b:8e:14:cb:bd:aa:93:be:7b:0c:37:8e:b0:df:86:d9:
f5:30:78:bb:d8:a6:4e:a0:98:48:78:ce:12:10:33:db:f2:e7:
ad:d2:2f:49:94:10:1a:9e:16:44:41:42:74:a4:8a:0f:7b:bb:
65:61:ae:e5:fc:6a:75:16:a6:fe:e1:f6:32:6f:c7:b7:0f:9f:
1b:61:f3:d6:59:4a:e3:67:7f:d5:59:e0:71:d1:12:05:34:21:
80:56:9f:3b:2a:b9:ac:12:29:df:7c:f8:d8:73:f2:ea:19:54:
68:af:22:03:b8:63:4c:ec:55:65:28:56:c0:fa:9e:8e:db:8b:
62:53:6d:10:0b:5c:32:33:0d:e0:4b:b2:e7:dc:dc:5e:c0:3d:
97:f7:0e:d8:41:d6:cb:30:cb:ee:b8:ae:e7:4f:1d:3f:44:52:
23:49:24:1b:13:a9:80:34:bc:48:12:6c:ef:12:24:33:4f:5d:
45:ff:61:6b:36:0e:74:47:8d:65:15:d2:e8:46:fe:e6:45:a9:
b9:14:c9:8b:ee:06:e1:ff:a6:70:cc:2e:08:ae:48:a2:48:59:
70:fb:0c:61:4c:16:95:89:e1:c6:c7:79:4b:4e:a5:be:4c:41:
a9:df:c0:35
-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE8sGuPIbeOuedJm1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI2MDkxNDEyNDUxMVoXDTI4MTIxNzEzNDUxMVowLzEtMCsGA1UEAxMk
N2YxYzk1OGEtYzU0MC00Njk5LThhNDItYWQ2MjVmYzc1MWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAP+p1TUNtadS7LNUNAM5ezOhyt5VFk4zTR
33CQVdeqgTCimCC4mdQAPkAKK7tPBkdmfo3gwi01a3j6W6UUTo8mO9lvkZqLAuzW
RXowRdkZS89uZpatla6sH9sEIPZUghQN8eblxPWIhIQGS1M95dZ8LPkmmbAaQSph
u+nUMwjxzgWVO8a/O2tMHhOdKYUY6fGWDpM4opI+2sGN5SsQFy5sBWifJlNncmoV
3s/v+WhET2tdxvUlguNK7EQQfhbcd5Sqsu0mgL65eUiiuH1kaL7rxrnVxEg/OmI5
Ghwpj/BXujHnN4stKVWv7ykMI3jHGwmZVWKse3AlfB+1uJaG8wIDAQABo4IEDjCC
BAowHQYDVR0OBBYEFMQcMl3dOA9X2EsE9AG4nGHaUlkpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83
ZjFjOTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYyNWZjNzUxZjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdmMWM5NThhLWM1NDAtNDY5OS04
YTQyLWFkNjI1ZmM3NTFmMy83ZjFjOTU4YS1jNTQwLTQ2OTktOGE0Mi1hZDYyNWZj
NzUxZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBALRoGQwDQQCAAIwBwMFACYFZUAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
HTbzQ85NBaOVZAK0zoUuB4lsM22LjhTLvaqTvnsMN46w34bZ9TB4u9imTqCYSHjO
EhAz2/LnrdIvSZQQGp4WREFCdKSKD3u7ZWGu5fxqdRam/uH2Mm/Htw+fG2Hz1llK
42d/1VngcdESBTQhgFafOyq5rBIp33z42HPy6hlUaK8iA7hjTOxVZShWwPqejtuL
YlNtEAtcMjMN4Euy59zcXsA9l/cO2EHWyzDL7riu508dP0RSI0kkGxOpgDS8SBJs
7xIkM09dRf9hazYOdEeNZRXS6Eb+5kWpuRTJi+4G4f+mcMwuCK5IokhZcPsMYUwW
lYnhxsd5S06lvkxBqd/ANQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:52:19 2026 by rpki-client