
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f186dfd3-2588-4a75-899a-8b2192968868.cer
File: f186dfd3-2588-4a75-899a-8b2192968868.cer (raw, json)
Hash identifier: WUxVdmSq0Mv/BoTsmWkCPhYnS9H639W8Ye869yL5//A=
Subject key identifier: 33:6E:E1:CD:03:B9:72:59:8A:F9:F0:2E:7C:58:C6:CB:C2:23:8F:FD
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CFC2A2439CF3DCBFAB7C5FE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f186dfd3-2588-4a75-899a-8b2192968868/f186dfd3-2588-4a75-899a-8b2192968868.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f186dfd3-2588-4a75-899a-8b2192968868/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 25 Feb 2026 23:03:15 +0000
Certificate not after: Tue 30 May 2028 22:03:15 +0000
Subordinate resources: IP: 164.90.0.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:2a:24:39:cf:3d:cb:fa:b7:c5:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 25 23:03:15 2026 GMT
Not After : May 30 22:03:15 2028 GMT
Subject: CN=f186dfd3-2588-4a75-899a-8b2192968868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:62:1a:ec:ec:ee:e5:fc:63:30:60:a9:19:
5e:19:c5:64:a6:f6:75:d9:8b:14:3a:4d:98:99:9f:
6c:6c:5c:21:c8:9d:ea:3d:aa:2d:dc:32:af:5d:d1:
0f:4d:7d:d2:3d:a7:ee:79:a9:74:c7:12:ff:95:47:
a6:eb:77:9b:f1:51:75:fb:a3:a2:eb:5a:36:f2:88:
f3:f9:5f:72:08:f2:5e:18:a1:ad:4a:02:89:6b:5f:
ec:2f:6e:f8:c0:c7:c6:26:95:d2:90:91:64:73:36:
d8:3e:43:e2:75:c5:be:24:a0:42:b3:55:7b:69:f2:
5c:03:a6:9d:a5:33:12:f3:42:b6:31:8b:19:88:e8:
c2:6c:4d:ae:7e:c5:e1:2d:1e:3b:37:ef:a7:c5:db:
b3:db:8a:1a:1c:d7:c8:85:f0:c2:f5:4a:eb:e6:68:
77:a0:39:3f:7a:ea:c9:59:97:76:66:48:a2:d1:d5:
04:41:19:f2:c8:31:55:b5:0b:0c:78:bb:15:8d:b8:
a8:31:1a:52:fb:e0:07:c1:b1:61:b5:b9:0e:af:51:
37:ab:f7:5b:06:9d:ca:0d:bd:eb:b8:9a:c1:a1:85:
30:a3:9f:f3:a6:5e:74:c0:20:a7:f4:60:43:e0:f8:
e0:36:3b:c4:c9:2a:8f:cd:db:7f:b9:d9:4e:97:3f:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:E1:CD:03:B9:72:59:8A:F9:F0:2E:7C:58:C6:CB:C2:23:8F:FD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f186dfd3-2588-4a75-899a-8b2192968868/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f186dfd3-2588-4a75-899a-8b2192968868/f186dfd3-2588-4a75-899a-8b2192968868.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
164.90.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f6:28:f6:bb:0a:01:9c:4a:d2:67:d4:ad:0a:f2:f5:69:84:
f6:ee:0c:65:cf:fa:51:23:31:b6:ae:3e:8c:5e:96:86:ba:77:
61:47:40:df:b8:98:d9:15:6f:5e:ba:f9:b2:9c:5f:17:f9:34:
5b:8a:f3:a0:70:bd:43:e4:5e:75:35:8b:59:0c:8e:d4:8c:b4:
1c:d0:c2:dc:5b:fb:b3:6d:98:de:37:d0:c0:bd:fe:16:b8:a4:
b9:68:5f:1e:4a:26:26:92:38:a4:25:ea:2d:26:c7:67:67:b0:
f1:95:9e:48:72:7b:a3:e1:14:2d:23:cd:f5:a7:28:aa:fb:05:
68:ed:9a:66:91:e7:a3:55:ed:cd:e3:41:23:39:18:ed:be:a6:
a1:02:90:a6:b8:b8:ff:6f:cd:52:e1:91:f1:d2:47:62:8c:48:
0d:9e:7e:c9:fe:fe:86:e1:23:6d:3f:3e:b8:2e:bf:cf:dc:f0:
75:ef:c0:a2:dd:c6:70:ac:68:1a:77:f5:b6:78:ae:68:94:52:
01:90:41:b8:f1:a2:d5:06:25:ee:06:10:4d:b9:3e:11:61:2e:
0e:cb:80:6e:7e:d2:4b:62:87:5c:44:a3:68:f0:61:b5:16:f8:
38:2d:da:7e:e7:b1:36:59:db:88:8b:3d:4e:10:5e:b0:39:49:
f8:2f:1f:6d
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEz8KiQ5zz3L+rfF/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDIyNTIzMDMxNVoXDTI4MDUzMDIyMDMxNVowLzEtMCsGA1UEAxMk
ZjE4NmRmZDMtMjU4OC00YTc1LTg5OWEtOGIyMTkyOTY4ODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+NiGuzs7uX8YzBgqRleGcVkpvZ12YsUOk2Y
mZ9sbFwhyJ3qPaot3DKvXdEPTX3SPafueal0xxL/lUem63eb8VF1+6Oi61o28ojz
+V9yCPJeGKGtSgKJa1/sL274wMfGJpXSkJFkczbYPkPidcW+JKBCs1V7afJcA6ad
pTMS80K2MYsZiOjCbE2ufsXhLR47N++nxduz24oaHNfIhfDC9Urr5mh3oDk/eurJ
WZd2Zkii0dUEQRnyyDFVtQsMeLsVjbioMRpS++AHwbFhtbkOr1E3q/dbBp3KDb3r
uJrBoYUwo5/zpl50wCCn9GBD4PjgNjvEySqPzdt/udlOlz88qwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFDNu4c0DuXJZivnwLnxYxsvCI4/9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m
MTg2ZGZkMy0yNTg4LTRhNzUtODk5YS04YjIxOTI5Njg4NjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YxODZkZmQzLTI1ODgtNGE3NS04
OTlhLThiMjE5Mjk2ODg2OC9mMTg2ZGZkMy0yNTg4LTRhNzUtODk5YS04YjIxOTI5
Njg4NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWkWgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb/Yo9rsKAZxK0mfUrQry
9WmE9u4MZc/6USMxtq4+jF6Whrp3YUdA37iY2RVvXrr5spxfF/k0W4rzoHC9Q+Re
dTWLWQyO1Iy0HNDC3Fv7s22Y3jfQwL3+FrikuWhfHkomJpI4pCXqLSbHZ2ew8ZWe
SHJ7o+EULSPN9acoqvsFaO2aZpHno1XtzeNBIzkY7b6moQKQpri4/2/NUuGR8dJH
YoxIDZ5+yf7+huEjbT8+uC6/z9zwde/Aot3GcKxoGnf1tniuaJRSAZBBuPGi1QYl
7gYQTbk+EWEuDsuAbn7SS2KHXESjaPBhtRb4OC3afuexNlnbiIs9ThBesDlJ+C8f
bQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:20 2026 by rpki-client