
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
File: 135a25e4-6a94-45c6-b694-2d6e8256166a.cer (raw, json)
Hash identifier: k9uAu0j5P0LUaj3PfRW8XA5LTO70vueUDYT/YRb6nC4=
Subject key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584E9D42E2D8F2DB1EFCA3F1E880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 25 Jul 2026 08:45:11 +0000
Certificate not after: Fri 27 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 7448
IP: 143.192.0.0 -- 143.192.95.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:42:e2:d8:f2:db:1e:fc:a3:f1:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jul 25 08:45:11 2026 GMT
Not After : Oct 27 08:45:11 2028 GMT
Subject: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a2:9e:39:b5:fa:f6:0f:49:74:ed:90:0c:88:
46:eb:2c:7a:0f:dd:6f:c2:cf:99:15:5e:d2:10:65:
85:ec:dd:69:ef:37:0c:22:1c:45:ad:6a:45:c1:f6:
74:4a:d4:7d:9d:1b:1a:01:31:69:1c:4e:eb:d6:c4:
b1:aa:54:bd:f6:b7:e5:1f:c2:c8:64:5c:97:db:e5:
b9:7c:27:e0:75:35:78:d3:fc:e5:9e:ce:a6:d6:92:
f6:ac:63:02:87:17:f6:3b:84:e3:1a:87:94:a2:e4:
2b:f0:ba:fa:ad:30:3b:de:d5:aa:a0:bf:ed:c3:0b:
e8:3b:bc:48:2b:97:48:d9:8b:d5:7c:de:ee:c2:8f:
9d:e5:2c:f9:61:e2:be:5c:a7:32:c7:f6:78:7c:6a:
f1:dc:31:d8:79:63:23:25:1d:65:95:e6:9d:00:97:
5a:e3:e6:e7:e6:19:92:94:27:d4:bb:35:f3:72:bb:
f1:83:25:88:f7:1b:ef:37:6a:21:34:9d:ea:9b:0f:
2e:9e:8d:be:e1:c0:ca:a6:9e:11:4a:e7:fc:7f:1f:
3f:25:d8:64:10:2a:b9:e9:43:6e:ff:45:ad:2c:18:
c7:be:f0:de:cc:72:a3:8c:1b:14:47:27:34:df:0e:
3a:97:59:17:b1:b7:61:7e:02:ed:ac:e6:ec:62:9d:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
143.192.0.0-143.192.95.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7448
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:68:0f:46:64:35:26:5f:96:4d:26:f9:7e:23:bb:ff:97:7d:
ae:fe:88:3e:17:86:b2:4c:30:9f:f1:45:2c:ed:1a:46:3a:27:
90:74:92:c8:c8:c9:03:d7:f6:91:22:88:88:91:50:34:48:e9:
20:7c:18:9a:ab:46:eb:5f:9d:8c:2f:44:fe:69:63:22:2f:7f:
e6:ef:fe:4d:83:4e:67:e0:4a:0e:d3:c6:ae:23:65:18:d7:47:
08:8c:cf:e7:8e:23:f3:5b:0e:16:09:88:8f:9e:3a:54:fe:e8:
fe:69:27:83:d0:85:3d:32:85:8e:f6:2f:1b:f0:45:73:d4:6f:
f3:41:58:c1:42:2a:1f:aa:81:b3:25:f1:01:99:57:45:4f:f1:
2c:44:7b:3e:a5:32:b6:19:6a:70:7c:bc:db:7c:de:88:6a:06:
26:1f:dc:8f:c1:3d:48:ba:b1:6c:91:00:e1:2b:0c:30:1b:63:
ea:ff:6b:ce:7a:92:13:7d:3a:e9:95:72:e2:d9:52:8f:2d:70:
53:c4:cc:a4:cb:76:81:c3:81:a8:7c:61:ca:db:fc:7d:c5:8a:
92:5c:e4:7b:d8:ff:1a:62:9a:3b:40:f4:89:24:20:1c:c1:22:
f2:14:50:8e:f8:7d:e5:9a:ef:d4:e2:df:44:0a:18:3b:81:ed:
71:e1:88:ff
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE6dQuLY8tse/KPx6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI2MDcyNTA4NDUxMVoXDTI4MTAyNzA4NDUxMVowLzEtMCsGA1UEAxMk
MTM1YTI1ZTQtNmE5NC00NWM2LWI2OTQtMmQ2ZTgyNTYxNjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6KeObX69g9JdO2QDIhG6yx6D91vws+ZFV7S
EGWF7N1p7zcMIhxFrWpFwfZ0StR9nRsaATFpHE7r1sSxqlS99rflH8LIZFyX2+W5
fCfgdTV40/zlns6m1pL2rGMChxf2O4TjGoeUouQr8Lr6rTA73tWqoL/twwvoO7xI
K5dI2YvVfN7uwo+d5Sz5YeK+XKcyx/Z4fGrx3DHYeWMjJR1lleadAJda4+bn5hmS
lCfUuzXzcrvxgyWI9xvvN2ohNJ3qmw8uno2+4cDKpp4RSuf8fx8/JdhkECq56UNu
/0WtLBjHvvDezHKjjBsURyc03w46l1kXsbdhfgLtrObsYp0xPwIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFN8+gKw9AM80FnjV2ULz4h29wPG9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x
MzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1NjE2NmEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzEzNWEyNWU0LTZhOTQtNDVjNi1i
Njk0LTJkNmU4MjU2MTY2YS8xMzVhMjVlNC02YTk0LTQ1YzYtYjY5NC0yZDZlODI1
NjE2NmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJgYIKwYBBQUH
AQcBAf8EFzAVMBMEAgABMA0wCwMDBo/AAwQFj8BAMBkGCCsGAQUFBwEIAQH/BAow
CKAGMAQCAh0YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABhoD0ZkNSZflk0m+X4ju/+Xfa7+iD4XhrJMMJ/x
RSztGkY6J5B0ksjIyQPX9pEiiIiRUDRI6SB8GJqrRutfnYwvRP5pYyIvf+bv/k2D
TmfgSg7Txq4jZRjXRwiMz+eOI/NbDhYJiI+eOlT+6P5pJ4PQhT0yhY72LxvwRXPU
b/NBWMFCKh+qgbMl8QGZV0VP8SxEez6lMrYZanB8vNt83ohqBiYf3I/BPUi6sWyR
AOErDDAbY+r/a856khN9OumVcuLZUo8tcFPEzKTLdoHDgah8Ycrb/H3FipJc5HvY
/xpimjtA9IkkIBzBIvIUUI74feWa79Ti30QKGDuB7XHhiP8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:29 2026 by rpki-client