
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2.cer
File: 3dd67fc2-5423-4bf8-a727-d7838049cda2.cer (raw, json)
Hash identifier: P4V5FPyWnmoOX+c2FlE0noUmLuW7YfVaNfjFoL0ik7A=
Subject key identifier: 26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F2F7362FF1AEE3753BAFFEB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 15 Sep 2026 17:30:56 +0000
Certificate not after: Mon 18 Dec 2028 18:30:56 +0000
Subordinate resources: AS: 26121
IP: 169.143.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2f:73:62:ff:1a:ee:37:53:ba:ff:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Sep 15 17:30:56 2026 GMT
Not After : Dec 18 18:30:56 2028 GMT
Subject: CN=3dd67fc2-5423-4bf8-a727-d7838049cda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:8a:e6:ac:bb:84:8c:46:b4:db:bc:04:40:
e3:c0:de:d8:3d:f8:b0:bc:c6:a4:bb:78:62:44:86:
f5:33:c1:fa:52:c8:76:5b:12:53:69:0b:41:7a:35:
f8:0e:90:71:53:32:87:a1:72:2f:12:ed:f4:39:8d:
7b:8f:05:a2:eb:28:3d:cf:24:c6:20:55:61:23:0e:
e5:ef:40:76:a2:76:fb:a3:0b:e3:9d:1b:62:ce:4d:
0b:5d:16:a1:6c:23:69:7c:c9:6a:c4:40:25:75:23:
2a:cb:e6:ca:79:46:00:ca:cf:87:de:45:67:dd:10:
d7:16:4c:8f:0e:26:40:f3:4a:a9:57:a0:a1:73:7f:
5a:5b:7f:7f:48:f3:fa:e5:9b:5a:9b:d2:ca:58:97:
91:c7:47:8e:74:a5:52:e3:c1:40:8c:93:b9:63:37:
14:c7:a7:72:99:5b:63:da:e5:6a:9b:21:99:16:0f:
ef:be:5e:5f:4d:71:1b:bb:6f:17:56:e0:42:79:34:
08:7d:9c:90:fd:3f:e5:f4:a9:57:70:36:45:3f:08:
ae:1a:54:a0:90:64:9f:9d:6f:91:2d:3c:5a:82:33:
90:56:df:bb:91:77:f3:49:be:42:d3:54:40:05:e5:
7c:26:f2:b0:9b:16:82:f7:23:e0:a2:69:a9:e3:70:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:B8:75:A8:31:6E:CA:C6:CC:42:0B:9A:C7:BA:D0:B7:BE:A0:42
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3dd67fc2-5423-4bf8-a727-d7838049cda2/3dd67fc2-5423-4bf8-a727-d7838049cda2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
169.143.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26121
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:16:b3:53:50:09:16:10:f7:e0:4c:0e:f9:54:de:7f:7a:1f:
d0:40:a5:b4:c9:74:71:96:a2:be:75:9f:a4:93:8f:ba:64:25:
58:81:7c:00:9d:ce:c7:af:f5:c7:0a:21:37:e8:ee:20:2d:80:
67:dd:2f:17:75:5e:da:9b:89:66:5e:c9:a7:a2:7e:5e:d1:fd:
8f:db:9b:71:ac:a5:4e:d4:d5:f0:5a:e2:b6:c2:e8:e5:59:e5:
bd:f2:23:9a:f5:08:b9:0a:75:64:21:84:c1:5d:5e:ff:9e:67:
48:94:f2:b3:d4:bc:eb:25:3e:0f:a3:7d:6e:ae:31:4d:40:bd:
65:5e:d3:77:48:14:58:c6:db:5e:d8:fa:80:fc:76:d9:0e:dc:
2a:ae:25:aa:00:fd:f1:5c:1d:8c:35:8f:66:9b:5c:a4:74:fb:
05:de:2b:93:f8:6d:22:f0:8e:59:cc:26:91:cc:af:da:4a:8a:
eb:17:a9:59:66:49:3a:9a:96:46:be:20:45:11:e5:4a:46:2d:
b2:2d:5b:f2:79:2b:c9:5d:6e:17:f7:79:4e:8e:ea:27:b8:45:
b5:a9:d4:e8:e3:d8:e2:c3:c0:36:1b:8f:58:2c:c3:88:6b:af:
62:8c:49:a5:db:3f:57:e1:60:32:98:2c:ce:58:1f:5e:e7:30:
3d:1e:b7:62
-----BEGIN CERTIFICATE-----
MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE8vc2L/Gu43U7r/64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI2MDkxNTE3MzA1NloXDTI4MTIxODE4MzA1NlowLzEtMCsGA1UEAxMk
M2RkNjdmYzItNTQyMy00YmY4LWE3MjctZDc4MzgwNDljZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwqK5qy7hIxGtNu8BEDjwN7YPfiwvMaku3hi
RIb1M8H6Ush2WxJTaQtBejX4DpBxUzKHoXIvEu30OY17jwWi6yg9zyTGIFVhIw7l
70B2onb7owvjnRtizk0LXRahbCNpfMlqxEAldSMqy+bKeUYAys+H3kVn3RDXFkyP
DiZA80qpV6Chc39aW39/SPP65Ztam9LKWJeRx0eOdKVS48FAjJO5YzcUx6dymVtj
2uVqmyGZFg/vvl5fTXEbu28XVuBCeTQIfZyQ/T/l9KlXcDZFPwiuGlSgkGSfnW+R
LTxagjOQVt+7kXfzSb5C01RABeV8JvKwmxaC9yPgommp43AWCwIDAQABo4IEGTCC
BBUwHQYDVR0OBBYEFCamuHWoMW7KxsxCC5rHutC3vqBCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z
ZGQ2N2ZjMi01NDIzLTRiZjgtYTcyNy1kNzgzODA0OWNkYTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNkZDY3ZmMyLTU0MjMtNGJmOC1h
NzI3LWQ3ODM4MDQ5Y2RhMi8zZGQ2N2ZjMi01NDIzLTRiZjgtYTcyNy1kNzgzODA0
OWNkYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCpjzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJm
CTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAzFrNTUAkWEPfgTA75VN5/eh/QQKW0yXRxlqK+dZ+kk4+6ZCVY
gXwAnc7Hr/XHCiE36O4gLYBn3S8XdV7am4lmXsmnon5e0f2P25txrKVO1NXwWuK2
wujlWeW98iOa9Qi5CnVkIYTBXV7/nmdIlPKz1LzrJT4Po31urjFNQL1lXtN3SBRY
xtte2PqA/HbZDtwqriWqAP3xXB2MNY9mm1ykdPsF3iuT+G0i8I5ZzCaRzK/aSorr
F6lZZkk6mpZGviBFEeVKRi2yLVvyeSvJXW4X93lOjuonuEW1qdTo49jiw8A2G49Y
LMOIa69ijEml2z9X4WAymCzOWB9e5zA9Hrdi
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:40 2026 by rpki-client