
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419.cer
File: 2c83340a-e4d6-409b-acce-f660b0f8b419.cer (raw, json)
Hash identifier: BbHEFBTF6HiO4vKUsxUj/owaPwiHECeWmVur+j8V42k=
Subject key identifier: 38:E0:FC:FC:97:9C:98:39:01:7B:A0:E4:4A:44:31:2A:B0:7C:02:11
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E07E74A6C221D850C4B688D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/2c83340a-e4d6-409b-acce-f660b0f8b419.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 01 Jun 2026 20:45:11 +0000
Certificate not after: Sun 03 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 402309
IP: 23.135.4.0/24
IP: 2602:f6df::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:e7:4a:6c:22:1d:85:0c:4b:68:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 1 20:45:11 2026 GMT
Not After : Sep 3 20:45:11 2028 GMT
Subject: CN=2c83340a-e4d6-409b-acce-f660b0f8b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:67:84:5e:96:da:43:8c:ec:3c:bb:9e:c9:
53:78:47:7a:41:93:0f:2a:17:4d:26:bf:f2:fc:bf:
e4:14:43:da:85:0b:96:c6:04:bc:d2:1d:01:92:0e:
6a:63:06:c1:70:20:dc:ba:33:be:c5:b4:fa:a3:b6:
73:60:f6:fc:b0:35:16:2c:c5:97:a4:8c:ac:51:06:
f6:d6:a2:81:48:de:1f:14:ca:cf:81:48:21:3a:d0:
ba:79:b7:96:27:8c:32:e2:53:96:91:f1:00:8b:5d:
6d:b8:68:bf:ee:5e:2a:5e:07:d5:25:60:3e:9b:2a:
54:66:a8:2c:0b:f8:c3:21:4e:cb:bf:4f:a4:24:1e:
c5:62:31:43:aa:fa:58:87:bd:bc:e6:ed:80:b9:2f:
62:93:29:97:44:17:ff:ba:2a:16:2c:12:b9:9f:1e:
2d:d2:42:85:15:9e:db:82:56:eb:9a:f0:fd:c4:68:
c1:2b:b9:33:25:67:5f:d9:e3:50:df:b9:86:d6:69:
c5:67:c3:3f:e1:ad:bd:dc:cf:29:62:8e:c8:9c:61:
3a:e6:86:76:1b:a8:63:f1:57:e5:33:68:f7:b0:55:
26:b5:03:2f:79:07:5e:dc:cd:a6:3e:0b:41:3e:cd:
71:24:a4:04:83:63:4a:3b:5e:d6:64:75:0d:cd:40:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:FC:FC:97:9C:98:39:01:7B:A0:E4:4A:44:31:2A:B0:7C:02:11
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/2c83340a-e4d6-409b-acce-f660b0f8b419.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.4.0/24
IPv6:
2602:f6df::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402309
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:df:e2:30:63:73:3b:83:b8:b5:87:2e:8c:d1:63:75:50:75:
ce:37:a2:a0:92:f6:16:47:2c:a1:76:e8:c6:2e:d7:75:34:43:
18:00:5a:36:1a:92:b6:be:16:13:a1:d2:32:c0:80:3b:17:8d:
c9:e8:8f:0f:9e:54:99:78:6e:71:1d:e6:1f:23:33:bb:d5:a0:
d0:e0:21:8e:58:10:de:db:19:2f:5e:80:b2:9c:74:6b:29:b1:
bd:b8:99:e5:07:7b:a9:2d:21:4d:ae:50:fa:37:e3:2c:5f:fd:
50:4f:06:7b:df:a3:36:82:71:76:19:05:1d:af:6a:00:7c:4f:
49:c0:f0:c0:a3:74:cc:32:50:ac:5a:6c:dd:66:01:a5:79:de:
0d:c7:22:ae:a1:0e:59:6b:2c:70:79:26:2d:a5:5c:44:5e:0e:
59:a5:69:54:90:25:c7:e0:b5:7b:73:4a:a1:fe:52:de:33:14:
25:e0:89:17:82:51:aa:fa:3b:8c:a7:2c:fd:7d:c0:73:e9:6b:
70:c8:5e:8d:d4:05:d0:2a:f2:10:f8:2c:41:a7:b8:ae:27:aa:
d0:3c:33:64:48:77:b4:43:27:df:e5:9e:bf:c3:fe:f8:bc:5f:
32:bd:f0:77:b2:fe:b5:e7:ee:59:5f:9b:45:d7:98:ae:98:aa:
10:16:0a:04
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4H50psIh2FDEtojYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDYwMTIwNDUxMVoXDTI4MDkwMzIwNDUxMVowLzEtMCsGA1UEAxMk
MmM4MzM0MGEtZTRkNi00MDliLWFjY2UtZjY2MGIwZjhiNDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwVnhF6W2kOM7Dy7nslTeEd6QZMPKhdNJr/y
/L/kFEPahQuWxgS80h0Bkg5qYwbBcCDcujO+xbT6o7ZzYPb8sDUWLMWXpIysUQb2
1qKBSN4fFMrPgUghOtC6ebeWJ4wy4lOWkfEAi11tuGi/7l4qXgfVJWA+mypUZqgs
C/jDIU7Lv0+kJB7FYjFDqvpYh7285u2AuS9ikymXRBf/uioWLBK5nx4t0kKFFZ7b
glbrmvD9xGjBK7kzJWdf2eNQ37mG1mnFZ8M/4a293M8pYo7InGE65oZ2G6hj8Vfl
M2j3sFUmtQMveQde3M2mPgtBPs1xJKQEg2NKO17WZHUNzUBbfwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFDjg/PyXnJg5AXug5EpEMSqwfAIRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y
YzgzMzQwYS1lNGQ2LTQwOWItYWNjZS1mNjYwYjBmOGI0MTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJjODMzNDBhLWU0ZDYtNDA5Yi1h
Y2NlLWY2NjBiMGY4YjQxOS8yYzgzMzQwYS1lNGQ2LTQwOWItYWNjZS1mNjYwYjBm
OGI0MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXhwQwDgQCAAIwCAMGACYC9t8AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYjhTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh3+IwY3M7g7i1hy6M0WN1UHXO
N6KgkvYWRyyhdujGLtd1NEMYAFo2GpK2vhYTodIywIA7F43J6I8PnlSZeG5xHeYf
IzO71aDQ4CGOWBDe2xkvXoCynHRrKbG9uJnlB3upLSFNrlD6N+MsX/1QTwZ736M2
gnF2GQUdr2oAfE9JwPDAo3TMMlCsWmzdZgGled4NxyKuoQ5ZayxweSYtpVxEXg5Z
pWlUkCXH4LV7c0qh/lLeMxQl4IkXglGq+juMpyz9fcBz6WtwyF6N1AXQKvIQ+CxB
p7iuJ6rQPDNkSHe0Qyff5Z6/w/74vF8yvfB3sv615+5ZX5tF15iumKoQFgoE
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:55 2026 by rpki-client