
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer
File: caec0bfa-1434-4606-b19a-4a911d16534d.cer (raw, json)
Hash identifier: WqqKG8hOBVU9qLxyqPV3l4GGu5wR5zKTb/VaWbPlKeE=
Subject key identifier: 91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D719D82A6B7014A383BD1E3E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 09 Apr 2026 00:45:17 +0000
Certificate not after: Wed 12 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 401566
IP: 23.131.236.0/24
IP: 2602:f745::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:9d:82:a6:b7:01:4a:38:3b:d1:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Apr 9 00:45:17 2026 GMT
Not After : Jul 12 00:45:17 2028 GMT
Subject: CN=caec0bfa-1434-4606-b19a-4a911d16534d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:af:39:0b:59:c6:ea:2b:97:1b:25:9a:c6:
6f:75:f2:c6:dd:c8:6a:2e:9e:a6:1f:91:4a:4b:ea:
82:de:ce:cf:39:76:e9:ed:60:b2:98:fc:f9:39:03:
22:5d:0b:d9:ac:5a:a4:b0:bd:1b:af:16:28:95:dc:
b8:c3:eb:d5:9b:2a:24:ef:cd:ef:91:d8:4a:ee:3b:
b0:70:e8:a5:5f:5f:1d:9f:31:0c:d2:e9:4e:48:a3:
69:02:e1:33:4b:e9:40:3a:9c:95:05:86:2b:c5:4f:
3a:d7:11:a5:19:c0:a7:df:c1:b5:2d:ac:00:e3:f5:
80:50:69:84:9d:50:a6:a8:23:03:63:a8:5c:f7:3f:
3e:9c:7a:03:5d:d4:38:c7:d3:9f:5e:ef:bd:5f:e2:
79:aa:5e:7c:9d:75:9e:61:27:dc:71:e5:11:aa:aa:
28:40:aa:82:ee:bf:55:7f:2a:e7:5b:03:59:7c:17:
93:56:e2:c3:e8:c0:9f:c2:0b:36:af:ae:78:63:7d:
2b:87:97:8a:8a:6a:70:5c:d4:5e:d7:f1:95:61:ed:
04:2d:b9:d5:8d:4d:ff:1e:be:75:a0:7d:67:75:a0:
46:07:7f:ef:3a:3a:f9:c8:c5:de:98:29:8b:8a:00:
72:47:c6:74:ec:01:81:bd:6f:c0:76:cf:10:f7:95:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.236.0/24
IPv6:
2602:f745::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401566
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:c4:0e:df:29:e8:fb:56:ba:97:fa:05:db:06:4a:06:98:d2:
97:34:3e:50:fa:c4:56:1f:9c:0e:41:a8:69:02:ae:d3:b1:cd:
99:48:03:b8:f9:e4:0b:e3:5f:ab:74:38:31:b7:1a:e1:df:22:
c6:cd:68:f7:bd:e5:40:be:1a:9a:bf:11:7d:57:6b:46:fc:a9:
64:1a:de:7e:9a:75:7f:4e:2b:1f:8c:37:35:49:d7:53:a5:54:
d0:27:ec:f2:20:f0:5f:8f:3c:8c:37:f4:07:53:72:fb:76:4d:
69:0c:d1:05:0c:8c:4c:fc:bf:38:ad:af:ff:74:e1:ec:00:c7:
bc:21:0f:90:b4:cb:a8:f9:31:17:d9:3b:71:cc:c2:de:0a:dd:
91:d3:f9:31:6b:4d:80:d4:66:d2:a0:ab:62:ec:44:44:56:7d:
6a:96:e8:ad:37:a5:6d:f1:40:89:19:0e:b7:ad:76:55:75:6d:
a2:b4:91:06:e3:05:91:c5:fc:1e:88:be:a5:c5:77:1e:58:7a:
d7:06:fd:e4:77:f1:8a:9f:8c:bc:0b:78:92:c2:23:aa:11:d3:
60:52:37:28:69:da:ab:6e:60:9f:54:04:25:38:77:d1:39:a4:
ab:71:50:0a:9a:5e:ef:fc:ee:df:ea:ab:da:31:fc:6b:f3:13:
8a:35:e0:8b
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1xnYKmtwFKODvR4+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDQwOTAwNDUxN1oXDTI4MDcxMjAwNDUxN1owLzEtMCsGA1UEAxMk
Y2FlYzBiZmEtMTQzNC00NjA2LWIxOWEtNGE5MTFkMTY1MzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeqvOQtZxuorlxslmsZvdfLG3chqLp6mH5FK
S+qC3s7POXbp7WCymPz5OQMiXQvZrFqksL0brxYoldy4w+vVmyok783vkdhK7juw
cOilX18dnzEM0ulOSKNpAuEzS+lAOpyVBYYrxU861xGlGcCn38G1LawA4/WAUGmE
nVCmqCMDY6hc9z8+nHoDXdQ4x9OfXu+9X+J5ql58nXWeYSfcceURqqooQKqC7r9V
fyrnWwNZfBeTVuLD6MCfwgs2r654Y30rh5eKimpwXNRe1/GVYe0ELbnVjU3/Hr51
oH1ndaBGB3/vOjr5yMXemCmLigByR8Z07AGBvW/Ads8Q95XAbwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFJGJ76cKnehBa1FyOdAzga9ARJe+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j
YWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQxNjUzNGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NhZWMwYmZhLTE0MzQtNDYwNi1i
MTlhLTRhOTExZDE2NTM0ZC9jYWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQx
NjUzNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXg+wwDgQCAAIwCAMGBCYC90UAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgnjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaxA7fKej7VrqX+gXbBkoGmNKX
ND5Q+sRWH5wOQahpAq7Tsc2ZSAO4+eQL41+rdDgxtxrh3yLGzWj3veVAvhqavxF9
V2tG/KlkGt5+mnV/TisfjDc1SddTpVTQJ+zyIPBfjzyMN/QHU3L7dk1pDNEFDIxM
/L84ra//dOHsAMe8IQ+QtMuo+TEX2TtxzMLeCt2R0/kxa02A1GbSoKti7EREVn1q
luitN6Vt8UCJGQ63rXZVdW2itJEG4wWRxfweiL6lxXceWHrXBv3kd/GKn4y8C3iS
wiOqEdNgUjcoadqrbmCfVAQlOHfROaSrcVAKml7v/O7f6qvaMfxr8xOKNeCL
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:55:45 2026 by rpki-client