
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689.cer
File: 539ee82c-bd0d-4432-a548-f342cc4d2689.cer (raw, json)
Hash identifier: 6i01ff3cuNNkzm92KGLnjHI2IDbYOl24EbmKXtvLgNE=
Subject key identifier: A2:9B:7B:50:6C:E1:A3:CD:1B:D3:13:BE:BA:E1:C4:BB:2B:19:A6:21
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CEDEB8742FF494E5018EF1FA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 20 Feb 2026 20:35:47 +0000
Certificate not after: Thu 25 May 2028 19:35:47 +0000
Subordinate resources: AS: 14418
AS: 27533
AS: 55290
IP: 167.188.0.0/16
IP: 198.148.131.0/24
IP: 198.190.224.0/24
IP: 198.203.170.0/23
IP: 198.245.244.0/24
IP: 204.27.166.0/24
IP: 207.45.32.0/20
IP: 2605:f380::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:eb:87:42:ff:49:4e:50:18:ef:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 20 20:35:47 2026 GMT
Not After : May 25 19:35:47 2028 GMT
Subject: CN=539ee82c-bd0d-4432-a548-f342cc4d2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:d6:32:6f:b2:c0:7f:fd:e3:e1:28:3e:6f:
80:52:17:b3:08:ff:08:de:e3:eb:f2:e8:41:6e:b7:
f5:36:54:d5:ef:69:ae:57:a3:1b:2e:f7:ea:89:3c:
99:a0:3d:26:29:eb:cf:9b:8b:49:87:4c:ed:a1:a1:
fe:f1:e2:87:9a:ce:7f:5d:cd:e2:96:43:d8:33:54:
4b:00:13:6b:ae:7b:4e:aa:a7:f2:1f:80:f8:c9:c4:
73:20:da:6a:19:44:64:b6:18:86:4b:e7:a9:21:32:
b7:47:fb:fe:35:1c:09:b7:5d:2f:f2:9b:85:e7:b0:
16:1a:96:88:ba:c5:f0:eb:45:89:45:da:ba:d1:ed:
69:34:18:33:16:bc:0f:67:34:81:13:b1:66:e9:5e:
e2:4a:c2:51:1d:68:bc:81:8b:93:8c:ae:b1:3a:6e:
e4:9e:e9:68:c8:ea:50:c6:fd:f8:39:f8:0d:05:de:
ed:d8:a2:b5:de:d5:81:a4:15:d9:85:da:13:84:07:
2a:4c:65:bf:2f:79:69:9a:d0:a0:1a:71:51:48:d0:
e3:14:0c:a9:01:d6:ac:c8:db:04:51:a1:9a:d4:a8:
eb:9a:1d:ab:1c:13:9c:8d:d9:0b:b4:af:c1:71:97:
c6:a7:bd:8e:72:db:db:94:69:52:c8:09:8c:18:13:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:7B:50:6C:E1:A3:CD:1B:D3:13:BE:BA:E1:C4:BB:2B:19:A6:21
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/539ee82c-bd0d-4432-a548-f342cc4d2689/539ee82c-bd0d-4432-a548-f342cc4d2689.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
167.188.0.0/16
198.148.131.0/24
198.190.224.0/24
198.203.170.0/23
198.245.244.0/24
204.27.166.0/24
207.45.32.0/20
IPv6:
2605:f380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14418
27533
55290
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:90:e7:b1:25:64:af:67:55:a0:2c:2d:a2:79:97:a4:27:f1:
f0:e8:d1:12:3e:93:f4:2b:3f:3d:04:52:51:6a:a6:a3:41:13:
9c:96:f9:ed:6b:aa:d4:cf:65:84:59:a6:3e:b3:9c:4d:27:9f:
6e:97:6c:67:d6:5c:c1:67:62:2b:1f:7d:e8:f3:60:c5:be:8b:
8d:86:48:80:09:d5:79:5c:22:db:16:5b:9d:88:77:e5:0d:d2:
4e:f9:54:7f:5c:b1:cb:c6:e6:e5:21:eb:ca:4b:49:4f:8a:0e:
9d:f6:0f:4f:cc:3d:20:04:23:45:89:97:db:2d:b1:21:cc:fc:
9a:a6:23:38:3c:ee:be:b0:45:a3:7c:54:fa:72:3c:41:41:11:
0c:32:c1:33:3d:9d:e3:d2:e4:5a:48:f8:48:e2:57:a1:b1:80:
32:eb:ed:53:66:cd:1b:4b:f2:09:c0:28:52:2f:15:da:aa:16:
01:43:b8:a2:75:02:90:ac:94:92:f5:d3:ed:c3:d6:e2:f8:d6:
a5:6c:45:52:30:82:e3:00:15:e3:93:59:a3:5f:24:a0:5c:a0:
d9:be:4d:93:4b:7e:50:40:1c:0c:00:07:2b:7d:26:aa:c1:4e:
00:c9:fb:b6:55:1f:76:49:33:74:ff:56:ae:12:7a:3e:c1:4c:
76:a3:3e:f2
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEzt64dC/0lOUBjvH6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDIyMDIwMzU0N1oXDTI4MDUyNTE5MzU0N1owLzEtMCsGA1UEAxMk
NTM5ZWU4MmMtYmQwZC00NDMyLWE1NDgtZjM0MmNjNGQyNjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWLWMm+ywH/94+EoPm+AUhezCP8I3uPr8uhB
brf1NlTV72muV6MbLvfqiTyZoD0mKevPm4tJh0ztoaH+8eKHms5/Xc3ilkPYM1RL
ABNrrntOqqfyH4D4ycRzINpqGURkthiGS+epITK3R/v+NRwJt10v8puF57AWGpaI
usXw60WJRdq60e1pNBgzFrwPZzSBE7Fm6V7iSsJRHWi8gYuTjK6xOm7knuloyOpQ
xv34OfgNBd7t2KK13tWBpBXZhdoThAcqTGW/L3lpmtCgGnFRSNDjFAypAdasyNsE
UaGa1Kjrmh2rHBOcjdkLtK/BcZfGp72OctvblGlSyAmMGBNn1wIDAQABo4IEVTCC
BFEwHQYDVR0OBBYEFKKbe1Bs4aPNG9MTvrrhxLsrGaYhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81
MzllZTgyYy1iZDBkLTQ0MzItYTU0OC1mMzQyY2M0ZDI2ODkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUzOWVlODJjLWJkMGQtNDQzMi1h
NTQ4LWYzNDJjYzRkMjY4OS81MzllZTgyYy1iZDBkLTQ0MzItYTU0OC1mMzQyY2M0
ZDI2ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwUQYIKwYBBQUH
AQcBAf8EQjBAMC8EAgABMCkDAwCnvAMEAMaUgwMEAMa+4AMEAcbLqgMEAMb19AME
AMwbpgMEBM8tIDANBAIAAjAHAwUAJgXzgDAiBggrBgEFBQcBCAEB/wQTMBGgDzAN
AgI4UgICa40CAwDX+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEkOexJWSvZ1WgLC2ieZekJ/Hw6NESPpP0
Kz89BFJRaqajQROclvnta6rUz2WEWaY+s5xNJ59ul2xn1lzBZ2IrH33o82DFvouN
hkiACdV5XCLbFludiHflDdJO+VR/XLHLxublIevKS0lPig6d9g9PzD0gBCNFiZfb
LbEhzPyapiM4PO6+sEWjfFT6cjxBQREMMsEzPZ3j0uRaSPhI4lehsYAy6+1TZs0b
S/IJwChSLxXaqhYBQ7iidQKQrJSS9dPtw9bi+NalbEVSMILjABXjk1mjXySgXKDZ
vk2TS35QQBwMAAcrfSaqwU4Ayfu2VR92STN0/1auEno+wUx2oz7y
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:51 2026 by rpki-client