
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
File: d489668a-f993-4f95-90e5-c584eabef64b.cer (raw, json)
Hash identifier: cvNEgKbEDMOYoizyorHNPgSFplBGHjDwnzHZNocF+Ys=
Subject key identifier: 34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584D716ADECDB65121001F385B40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 08 Apr 2026 23:03:15 +0000
Certificate not after: Fri 31 Dec 2027 01:05:37 +0000
Subordinate resources: AS: 402026
IP: 23.146.60.0/24
IP: 23.156.20.0/24
IP: 2602:f549::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:6a:de:cd:b6:51:21:00:1f:38:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Apr 8 23:03:15 2026 GMT
Not After : Dec 31 01:05:37 2027 GMT
Subject: CN=d489668a-f993-4f95-90e5-c584eabef64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:fa:23:ff:6a:8c:d7:7b:ee:ef:08:da:68:
6b:11:ae:de:06:fd:62:79:38:5f:f6:69:ab:2f:15:
e2:ae:93:f6:3c:fa:1a:4a:0f:43:47:44:93:fb:66:
ee:80:43:2b:a6:be:86:7b:f5:08:a5:b2:5b:7a:f5:
58:b1:f3:53:a2:4c:56:e2:01:68:58:73:5b:2e:a9:
d1:27:9c:e5:7a:aa:75:5c:6e:13:f9:2c:4e:52:08:
32:de:34:2a:a8:ba:3e:85:d8:21:4b:5d:c1:89:e7:
49:d6:d9:98:8b:30:73:a2:04:e6:88:33:50:5a:37:
3c:a0:2e:68:a3:d5:42:52:9e:ad:e8:cd:be:60:b7:
a2:c7:37:0f:26:6d:84:cf:89:0f:db:c6:6a:92:87:
14:1d:4c:78:74:b5:10:68:03:02:c1:1d:fc:82:47:
79:e2:de:e8:98:18:70:bd:b1:08:4a:a5:8c:1f:55:
e3:53:35:f4:15:08:bd:9c:66:96:a9:bc:9b:64:2f:
10:a0:13:a1:4a:a4:33:4a:76:de:7b:c3:78:88:fe:
04:35:48:63:80:f2:63:48:d8:bd:1d:5c:31:e9:61:
6e:23:2f:d0:cf:d5:da:2f:87:72:86:27:4c:15:d7:
e0:38:22:09:fb:08:34:94:d9:8e:c1:dd:56:f4:38:
29:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.60.0/24
23.156.20.0/24
IPv6:
2602:f549::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402026
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:98:5c:ab:d3:35:39:ac:4d:61:1d:97:fa:fb:2e:78:ab:60:
b9:70:b3:a1:cd:d8:c7:45:3f:48:9d:4a:f7:fe:1a:b4:21:73:
ec:a6:5e:7f:13:54:a3:4c:05:18:5f:a6:a3:6d:d2:51:13:ef:
7a:63:97:c3:17:04:2a:af:81:ac:07:66:3a:77:87:4c:bc:c8:
1a:0a:b2:2f:dc:3e:ea:6f:f0:39:99:28:c2:05:f2:7d:fc:21:
ac:73:bb:c5:9a:27:80:25:10:b9:53:a6:e2:29:44:4b:3a:8e:
1e:cc:66:ed:e1:2b:3d:05:9e:86:59:b5:f9:6b:b2:75:86:27:
17:ad:b7:55:8b:e2:c0:29:05:02:ba:84:84:01:b0:f8:ae:d6:
72:ab:1b:c8:f7:dc:5c:2a:12:0d:ff:ca:44:2e:d9:e1:15:b8:
3f:09:d3:c4:26:25:58:9b:6c:68:0c:d6:83:a8:fc:a5:78:ff:
52:8b:a6:64:0e:e8:92:97:94:6b:b2:19:8e:d4:b8:66:75:18:
d1:ee:48:c8:bf:f7:d7:79:42:e1:67:67:32:82:0e:32:83:ad:
9b:dc:13:f9:08:0e:d1:8f:72:2d:e3:11:06:63:58:c6:44:ce:
54:98:5b:17:5c:59:d5:01:24:e3:fb:c6:7b:10:7c:09:a2:3b:
ac:9b:9b:90
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1xat7NtlEhAB84W0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI2MDQwODIzMDMxNVoXDTI3MTIzMTAxMDUzN1owLzEtMCsGA1UEAxMk
ZDQ4OTY2OGEtZjk5My00Zjk1LTkwZTUtYzU4NGVhYmVmNjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl76I/9qjNd77u8I2mhrEa7eBv1ieThf9mmr
LxXirpP2PPoaSg9DR0ST+2bugEMrpr6Ge/UIpbJbevVYsfNTokxW4gFoWHNbLqnR
J5zleqp1XG4T+SxOUggy3jQqqLo+hdghS13BiedJ1tmYizBzogTmiDNQWjc8oC5o
o9VCUp6t6M2+YLeixzcPJm2Ez4kP28ZqkocUHUx4dLUQaAMCwR38gkd54t7omBhw
vbEISqWMH1XjUzX0FQi9nGaWqbybZC8QoBOhSqQzSnbee8N4iP4ENUhjgPJjSNi9
HVwx6WFuIy/Qz9XaL4dyhidMFdfgOCIJ+wg0lNmOwd1W9DgpZQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFDSq93Flu1LKBUk+ZnFfGGKHcqAbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k
NDg5NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0ZWFiZWY2NGIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Q0ODk2NjhhLWY5OTMtNGY5NS05
MGU1LWM1ODRlYWJlZjY0Yi9kNDg5NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0ZWFi
ZWY2NGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXkjwDBAAXnBQwDgQCAAIwCAMGBCYC9UkAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYiajBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAymFyr0zU5rE1hHZf6
+y54q2C5cLOhzdjHRT9InUr3/hq0IXPspl5/E1SjTAUYX6ajbdJRE+96Y5fDFwQq
r4GsB2Y6d4dMvMgaCrIv3D7qb/A5mSjCBfJ9/CGsc7vFmieAJRC5U6biKURLOo4e
zGbt4Ss9BZ6GWbX5a7J1hicXrbdVi+LAKQUCuoSEAbD4rtZyqxvI99xcKhIN/8pE
LtnhFbg/CdPEJiVYm2xoDNaDqPyleP9Si6ZkDuiSl5RrshmO1LhmdRjR7kjIv/fX
eULhZ2cygg4yg62b3BP5CA7Rj3It4xEGY1jGRM5UmFsXXFnVASTj+8Z7EHwJojus
m5uQ
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:35 2026 by rpki-client