
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94ca13b9-053d-4a8a-b7ab-2343e9e0c091.cer
File: 94ca13b9-053d-4a8a-b7ab-2343e9e0c091.cer (raw, json)
Hash identifier: KGZ0qvh6NOB55128RoSoOZ9kKlE1f61gPJhofncVcmI=
Subject key identifier: 4A:0E:57:5C:08:B0:E2:42:48:FA:41:60:26:85:7E:4F:39:CC:42:19
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584DFEE32FCBCED77996E674C5C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94ca13b9-053d-4a8a-b7ab-2343e9e0c091/94ca13b9-053d-4a8a-b7ab-2343e9e0c091.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94ca13b9-053d-4a8a-b7ab-2343e9e0c091/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 29 May 2026 15:14:39 +0000
Certificate not after: Thu 31 Aug 2028 15:14:39 +0000
Subordinate resources: AS: 402564
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fe:e3:2f:cb:ce:d7:79:96:e6:74:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: May 29 15:14:39 2026 GMT
Not After : Aug 31 15:14:39 2028 GMT
Subject: CN=94ca13b9-053d-4a8a-b7ab-2343e9e0c091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:b2:8d:40:82:bc:60:9a:37:05:35:3a:86:
e0:71:a2:de:1c:6f:ca:16:81:f1:dc:c0:05:ab:d3:
ab:e0:b1:ec:77:8e:39:ee:f7:62:2f:39:4b:85:61:
69:60:29:ef:82:60:ab:1f:cb:7e:6c:5b:71:e3:3e:
77:91:8c:71:4c:6e:bc:44:ac:39:2f:e7:12:af:54:
3d:b2:c5:e1:e4:33:71:eb:93:90:0d:f4:8b:62:c4:
cc:34:e4:ad:f0:4e:89:55:8d:dc:29:1e:2a:78:2a:
af:76:8f:a1:e4:84:87:19:32:ea:ec:4a:ba:86:47:
f2:07:e9:79:41:52:08:cf:c5:3d:03:43:68:2f:7c:
b2:b0:66:f5:01:85:c7:31:52:5e:5c:6d:69:f7:d5:
9e:fe:34:eb:3a:c4:18:f1:66:1f:52:75:a5:32:99:
50:99:6c:39:7c:93:96:50:28:a0:94:6a:98:14:f8:
0f:0a:6c:a8:a3:d8:2b:7b:8b:c9:09:e9:2b:5d:6a:
71:56:22:1a:7a:11:c6:70:10:02:63:59:0f:77:d1:
fe:df:28:79:1a:75:47:15:bc:25:ae:d1:f4:f3:6a:
41:0d:b2:93:f9:43:61:d7:c1:a5:1b:c0:d7:fb:11:
2f:e5:70:b5:a2:b1:88:e1:59:e0:b5:c4:38:4a:35:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:57:5C:08:B0:E2:42:48:FA:41:60:26:85:7E:4F:39:CC:42:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94ca13b9-053d-4a8a-b7ab-2343e9e0c091/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94ca13b9-053d-4a8a-b7ab-2343e9e0c091/94ca13b9-053d-4a8a-b7ab-2343e9e0c091.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402564
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:87:3b:9f:45:f7:37:63:d8:9d:94:de:06:e5:0c:36:f7:6e:
36:50:5b:91:51:b2:03:06:0b:dd:84:0b:d7:33:36:63:92:61:
de:34:67:9c:4c:ed:ef:75:d1:ce:f2:5f:f0:cd:2f:24:d6:ae:
6b:3b:3e:45:3c:fa:c9:3c:8d:c8:9b:b0:41:22:30:b0:98:ab:
e7:d6:51:e4:0b:f7:61:3e:19:a0:92:65:44:9c:3a:a7:21:e5:
05:47:b7:ff:8a:e5:19:a7:a9:b6:78:bc:7a:9b:6a:71:74:79:
b8:59:2a:cf:27:eb:07:d4:eb:38:ec:c5:3c:9a:2e:78:de:38:
66:84:13:39:c6:ee:7c:f2:1b:50:e9:6f:f2:e5:f8:ee:49:2a:
f7:fc:aa:35:29:04:97:87:85:92:eb:ea:60:89:83:ec:53:df:
d2:85:36:50:8d:f8:bd:a5:4c:be:66:08:ac:48:7c:f6:ed:e8:
04:d2:7b:06:f5:c7:6d:cf:6d:17:ea:f4:8d:90:82:8b:62:8c:
e8:3d:8e:7b:ed:0f:73:00:4a:9f:ca:12:33:76:ca:d2:b4:f7:
7f:26:93:a2:97:e3:4c:ae:59:46:4a:18:13:c5:6b:b2:99:09:
ec:b0:53:ea:09:2d:71:e7:f5:9f:f3:14:f7:6d:a5:00:76:5f:
95:aa:44:8d
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3+4y/Lztd5luZ0xcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI2MDUyOTE1MTQzOVoXDTI4MDgzMTE1MTQzOVowLzEtMCsGA1UEAxMk
OTRjYTEzYjktMDUzZC00YThhLWI3YWItMjM0M2U5ZTBjMDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGCyjUCCvGCaNwU1OobgcaLeHG/KFoHx3MAF
q9Or4LHsd4457vdiLzlLhWFpYCnvgmCrH8t+bFtx4z53kYxxTG68RKw5L+cSr1Q9
ssXh5DNx65OQDfSLYsTMNOSt8E6JVY3cKR4qeCqvdo+h5ISHGTLq7Eq6hkfyB+l5
QVIIz8U9A0NoL3yysGb1AYXHMVJeXG1p99We/jTrOsQY8WYfUnWlMplQmWw5fJOW
UCiglGqYFPgPCmyoo9gre4vJCekrXWpxViIaehHGcBACY1kPd9H+3yh5GnVHFbwl
rtH082pBDbKT+UNh18GlG8DX+xEv5XC1orGI4VngtcQ4SjV41wIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFEoOV1wIsOJCSPpBYCaFfk85zEIZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85
NGNhMTNiOS0wNTNkLTRhOGEtYjdhYi0yMzQzZTllMGMwOTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk0Y2ExM2I5LTA1M2QtNGE4YS1i
N2FiLTIzNDNlOWUwYzA5MS85NGNhMTNiOS0wNTNkLTRhOGEtYjdhYi0yMzQzZTll
MGMwOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBiSEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH2HO59F9zdj2J2U3gblDDb3bjZQ
W5FRsgMGC92EC9czNmOSYd40Z5xM7e910c7yX/DNLyTWrms7PkU8+sk8jcibsEEi
MLCYq+fWUeQL92E+GaCSZUScOqch5QVHt/+K5RmnqbZ4vHqbanF0ebhZKs8n6wfU
6zjsxTyaLnjeOGaEEznG7nzyG1Dpb/Ll+O5JKvf8qjUpBJeHhZLr6mCJg+xT39KF
NlCN+L2lTL5mCKxIfPbt6ATSewb1x23PbRfq9I2QgotijOg9jnvtD3MASp/KEjN2
ytK0938mk6KX40yuWUZKGBPFa7KZCeywU+oJLXHn9Z/zFPdtpQB2X5WqRI0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:38 2026 by rpki-client