
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
File: 743065a1-7855-4be2-941a-23bce4898410.cer (raw, json)
Hash identifier: N9fxSpfttObwAwB6GwazxNShv1rrYNVIHF7LZIufWlg=
Subject key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E18A7643E3D136A6C04B087C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 07 Jun 2026 20:45:11 +0000
Certificate not after: Sat 09 Sep 2028 20:45:11 +0000
Subordinate resources: IP: 23.145.152.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:a7:64:3e:3d:13:6a:6c:04:b0:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 7 20:45:11 2026 GMT
Not After : Sep 9 20:45:11 2028 GMT
Subject: CN=743065a1-7855-4be2-941a-23bce4898410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:c7:c6:0b:3d:30:05:47:60:24:05:a7:e9:
61:11:b7:fa:c6:ad:60:d2:33:4f:62:47:99:f0:ef:
cf:9d:47:15:83:6e:ba:62:9e:3a:8a:bf:ee:ac:68:
19:a0:23:e3:09:3d:6b:c4:0e:e1:85:37:2d:8f:b6:
c6:ae:4d:95:6e:c4:a1:74:ca:59:58:9b:8d:4c:b8:
1c:a3:83:27:1a:c1:e1:81:20:a4:cd:dc:8c:f1:94:
82:4b:95:42:ad:fd:74:f6:95:dc:23:20:5e:b4:b0:
37:a5:85:81:2f:bd:95:53:f5:0d:55:d9:5e:03:07:
a5:6a:dd:4d:a7:36:26:b2:7c:fe:49:1b:98:d0:d6:
af:84:86:45:23:28:9a:e6:e8:ad:8a:b2:5b:ca:3c:
22:ec:06:11:03:9f:53:52:9c:5a:b4:8e:dc:1e:21:
d7:7d:a7:52:74:48:bb:44:0e:3a:4d:5f:87:1d:cc:
a4:64:2f:5b:92:6a:0f:3f:12:64:ba:0f:4f:92:6a:
f7:e8:72:71:20:c4:16:87:82:0d:04:6d:21:7c:44:
82:6e:f5:84:25:57:33:64:d2:ad:bd:4d:c2:70:0b:
af:9a:aa:ef:b8:27:05:c7:e7:1f:db:55:1a:bd:b8:
ca:e1:48:d3:1e:bf:52:34:b3:ad:e2:52:8c:6a:97:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ab:b8:29:58:f9:9b:9f:5e:b2:b4:2b:cd:37:5d:5c:0a:9f:
4b:46:bf:1a:2f:49:4c:cc:b8:6f:c8:da:5a:66:db:71:63:db:
9d:6f:60:f8:11:17:4c:28:cb:86:f9:6d:23:40:6e:63:9d:42:
88:43:1b:26:0b:ce:a2:39:00:26:e2:a7:08:78:ec:bf:23:49:
60:56:49:21:57:c2:58:6c:53:08:67:ed:35:88:71:b9:7a:89:
70:11:a3:c6:10:11:90:63:46:00:2d:fa:03:cb:59:d5:c7:36:
00:b7:3d:68:3a:5f:9a:98:a9:b5:e8:1d:e7:e0:27:27:c6:01:
41:2a:a2:5f:dc:30:34:22:6c:39:27:51:2b:9f:9c:a7:2f:be:
31:9d:a8:6c:6c:37:22:37:25:ec:ca:12:36:99:e4:d0:d4:dd:
07:fe:76:7f:01:d9:c9:d9:b0:9a:5e:69:70:0b:2c:3d:0a:da:
73:63:a2:94:26:84:bb:8f:42:6d:dc:35:80:8b:53:e6:f8:23:
ca:cc:01:e2:1a:cc:b0:5a:c8:31:a2:01:c3:60:a3:a8:ed:05:
26:88:9b:a5:4e:0f:c8:db:cb:44:c1:b0:6b:f9:af:66:5a:a5:
ec:71:a5:19:84:8c:73:29:bc:ef:e3:b6:79:c1:fb:38:a1:28:
0c:00:23:99
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4Yp2Q+PRNqbASwh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYwNzIwNDUxMVoXDTI4MDkwOTIwNDUxMVowLzEtMCsGA1UEAxMk
NzQzMDY1YTEtNzg1NS00YmUyLTk0MWEtMjNiY2U0ODk4NDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1bHxgs9MAVHYCQFp+lhEbf6xq1g0jNPYkeZ
8O/PnUcVg266Yp46ir/urGgZoCPjCT1rxA7hhTctj7bGrk2VbsShdMpZWJuNTLgc
o4MnGsHhgSCkzdyM8ZSCS5VCrf109pXcIyBetLA3pYWBL72VU/UNVdleAwelat1N
pzYmsnz+SRuY0NavhIZFIyia5uitirJbyjwi7AYRA59TUpxatI7cHiHXfadSdEi7
RA46TV+HHcykZC9bkmoPPxJkug9Pkmr36HJxIMQWh4INBG0hfESCbvWEJVczZNKt
vU3CcAuvmqrvuCcFx+cf21UavbjK4UjTHr9SNLOt4lKMapdSNwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFB3gre6Nd4eo4QRfgTvJ2XxYWxEcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83
NDMwNjVhMS03ODU1LTRiZTItOTQxYS0yM2JjZTQ4OTg0MTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3Lzc0MzA2NWExLTc4NTUtNGJlMi05
NDFhLTIzYmNlNDg5ODQxMC83NDMwNjVhMS03ODU1LTRiZTItOTQxYS0yM2JjZTQ4
OTg0MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAXkZgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdau4KVj5m59esrQrzTdd
XAqfS0a/Gi9JTMy4b8jaWmbbcWPbnW9g+BEXTCjLhvltI0BuY51CiEMbJgvOojkA
JuKnCHjsvyNJYFZJIVfCWGxTCGftNYhxuXqJcBGjxhARkGNGAC36A8tZ1cc2ALc9
aDpfmpiptegd5+AnJ8YBQSqiX9wwNCJsOSdRK5+cpy++MZ2obGw3Ijcl7MoSNpnk
0NTdB/52fwHZydmwml5pcAssPQrac2OilCaEu49Cbdw1gItT5vgjyswB4hrMsFrI
MaIBw2CjqO0FJoibpU4PyNvLRMGwa/mvZlql7HGlGYSMcym87+O2ecH7OKEoDAAj
mQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:26 2026 by rpki-client