
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer
File: 5fa520a3-7c82-4745-8817-8dd86a2e0796.cer (raw, json)
Hash identifier: 08bkTgTbjkc0oinfvWyTxm+002oVW5/OkLpBLBtYAFY=
Subject key identifier: 59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EF8753BD3C8829CEA5C580C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 27 Aug 2026 00:45:11 +0000
Certificate not after: Wed 29 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 1832
AS: 1875 -- 1876
IP: 129.119.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:75:3b:d3:c8:82:9c:ea:5c:58:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 27 00:45:11 2026 GMT
Not After : Nov 29 01:45:11 2028 GMT
Subject: CN=5fa520a3-7c82-4745-8817-8dd86a2e0796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:cf:aa:d0:6a:c1:f5:64:af:34:22:eb:2a:
5e:ac:98:69:9b:dd:f6:dd:14:2e:f5:fe:d5:23:dd:
80:9b:fb:c1:61:58:4c:7c:50:75:7c:79:f3:17:74:
7c:61:b4:a1:25:3e:9b:ec:45:7a:0b:93:4c:f5:4f:
70:3b:d0:88:c5:cd:eb:42:2b:6e:0c:00:26:d7:50:
38:aa:82:cf:e8:41:cc:57:4c:38:cc:11:89:e6:2b:
e4:c2:a7:c8:95:52:3c:bf:13:1e:1e:67:49:07:ae:
33:d0:4b:e6:20:27:4c:4c:b6:f7:da:2b:2b:30:04:
b8:7f:d4:95:36:42:bf:53:88:82:d7:36:56:00:af:
3d:f5:78:67:8c:95:60:07:0a:34:db:42:03:4b:1e:
5c:ae:39:22:74:58:d9:93:72:87:54:d4:a9:08:ec:
0c:7f:ab:56:ce:1c:b3:2e:86:a6:72:1f:31:ee:db:
74:b1:88:50:1d:9d:4d:42:95:76:d6:9a:c8:e2:c3:
9c:0c:6c:aa:f8:1b:e9:23:c2:fc:b9:ce:6a:90:88:
9d:bf:f2:6a:02:f0:93:a1:bb:02:54:35:39:3c:39:
7a:f1:e5:53:2b:65:e9:2a:71:f1:d7:99:ed:29:1a:
ab:37:29:54:d3:c5:05:8c:f4:49:4c:b0:fd:38:f4:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
129.119.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1832
1875-1876
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f0:6e:35:ff:7d:d9:b7:18:d6:74:73:b0:ce:c9:37:fa:06:
d9:58:44:a4:80:08:29:60:ba:13:8c:64:ec:bf:81:d4:f3:c6:
7f:2c:7f:2b:df:7a:c1:e4:29:f1:35:bf:24:75:43:53:5a:b0:
a8:12:76:28:5b:60:67:32:07:19:45:ef:85:59:0b:f0:61:cc:
d9:73:93:a2:c6:e9:c0:0c:af:b6:24:2e:6b:83:e6:6f:b8:6d:
1d:01:78:f3:db:a0:a7:cd:04:1b:07:95:91:c0:18:bd:e8:4b:
e7:06:66:c9:49:3b:2b:c0:85:7b:15:6a:51:65:cf:40:eb:01:
70:fc:d5:ea:e5:e1:50:18:24:13:46:63:45:f0:40:e7:ed:7e:
b9:33:68:6e:b4:69:ae:5f:1b:2f:2b:45:b3:88:e7:df:89:48:
2c:0a:21:10:99:8b:4c:0d:9d:58:90:9a:89:ad:89:b8:a8:eb:
34:37:58:eb:68:34:60:59:8d:54:56:86:ae:63:d3:99:e2:2f:
3f:a1:e2:45:f2:5f:46:97:4d:a9:59:43:30:43:3c:64:e7:df:
46:04:2e:94:78:bc:3c:cc:7b:38:37:d7:3d:00:88:ee:8d:93:
dd:76:82:99:99:e2:51:73:32:40:6f:bb:91:d2:e8:6e:40:d8:
2f:14:91:97
-----BEGIN CERTIFICATE-----
MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWE74dTvTyIKc6lxYDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDgyNzAwNDUxMVoXDTI4MTEyOTAxNDUxMVowLzEtMCsGA1UEAxMk
NWZhNTIwYTMtN2M4Mi00NzQ1LTg4MTctOGRkODZhMmUwNzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HHPqtBqwfVkrzQi6yperJhpm9323RQu9f7V
I92Am/vBYVhMfFB1fHnzF3R8YbShJT6b7EV6C5NM9U9wO9CIxc3rQituDAAm11A4
qoLP6EHMV0w4zBGJ5ivkwqfIlVI8vxMeHmdJB64z0EvmICdMTLb32isrMAS4f9SV
NkK/U4iC1zZWAK899XhnjJVgBwo020IDSx5crjkidFjZk3KHVNSpCOwMf6tWzhyz
Loamch8x7tt0sYhQHZ1NQpV21prI4sOcDGyq+BvpI8L8uc5qkIidv/JqAvCTobsC
VDU5PDl68eVTK2XpKnHx15ntKRqrNylU08UFjPRJTLD9OPQ/oQIDAQABo4IEIzCC
BB8wHQYDVR0OBBYEFFltqLActtrn+ew6WEjRVkAOQZQ2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81
ZmE1MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4NmEyZTA3OTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzVmYTUyMGEzLTdjODItNDc0NS04
ODE3LThkZDg2YTJlMDc5Ni81ZmE1MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4NmEy
ZTA3OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCBdzAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgIH
KDAIAgIHUwICB1QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAWPBuNf992bcY1nRzsM7JN/oG2VhEpIAIKWC6
E4xk7L+B1PPGfyx/K996weQp8TW/JHVDU1qwqBJ2KFtgZzIHGUXvhVkL8GHM2XOT
osbpwAyvtiQua4Pmb7htHQF489ugp80EGweVkcAYvehL5wZmyUk7K8CFexVqUWXP
QOsBcPzV6uXhUBgkE0ZjRfBA5+1+uTNobrRprl8bLytFs4jn34lILAohEJmLTA2d
WJCaia2JuKjrNDdY62g0YFmNVFaGrmPTmeIvP6HiRfJfRpdNqVlDMEM8ZOffRgQu
lHi8PMx7ODfXPQCI7o2T3XaCmZniUXMyQG+7kdLobkDYLxSRlw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:17:50 2026 by rpki-client