
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
File: 0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer (raw, json)
Hash identifier: j6UlyLECzxWbnfTGdt/Vz9oiOcfq8G+d9meNtjwuwy4=
Subject key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584CE1F51AE609A9318F1E3AA458
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 13:45:22 +0000
Certificate not after: Sun 21 May 2028 12:45:22 +0000
Subordinate resources: AS: 394434
IP: 64.65.26.0/24
IP: 67.213.136.0/22
IP: 168.86.128.0/18
IP: 208.78.112.0/22
IP: 2606:86c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e1:f5:1a:e6:09:a9:31:8f:1e:3a:a4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 16 13:45:22 2026 GMT
Not After : May 21 12:45:22 2028 GMT
Subject: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:4f:56:55:6a:24:50:e6:f8:fc:75:61:42:
27:d4:89:83:85:0d:81:2c:46:fe:3f:01:dc:54:e6:
e1:49:a8:24:bc:40:d9:92:7f:cf:55:5c:ac:10:d0:
c0:ba:29:0b:56:f6:7e:90:46:bb:69:91:f1:31:aa:
ff:41:cd:3e:10:d0:f7:94:32:21:6c:ad:ec:a9:e5:
ff:be:a1:b4:df:f9:ba:f4:27:72:13:31:31:0e:88:
9e:21:07:e2:4c:74:3c:31:05:de:77:9f:3c:3e:de:
02:2f:97:d8:47:78:83:6a:0c:4f:7d:3c:17:06:6a:
ad:c8:ae:10:4c:fe:c9:22:64:7e:66:15:23:62:e0:
0f:ba:f4:02:51:33:b2:e2:39:69:92:9b:40:d0:72:
a6:63:48:bd:af:7d:32:94:ef:8b:a7:0b:75:f3:dc:
6a:fb:13:1e:b2:8c:38:9a:5e:02:6c:68:28:7b:e5:
82:3e:42:75:88:d3:30:24:2c:d5:cf:dd:48:8c:ea:
63:a7:a4:28:fe:29:48:e4:43:36:b7:4c:5a:4c:60:
cc:3b:06:71:1f:07:cd:bd:d4:d3:f8:d7:0d:31:b2:
0f:63:f8:e6:d3:3e:5c:94:e7:d0:be:5d:7d:e0:b0:
d8:87:50:dc:f0:2c:c8:3a:0f:09:33:72:5a:c0:ed:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.65.26.0/24
67.213.136.0/22
168.86.128.0/18
208.78.112.0/22
IPv6:
2606:86c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394434
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ca:d8:a4:f6:b4:08:2e:77:41:e0:97:61:23:7e:1b:fe:13:
db:ac:76:a1:38:f2:2b:75:35:75:56:c1:fc:e2:ec:bc:4c:8a:
0d:4f:78:95:00:0e:da:67:58:a4:54:38:8d:1c:cd:41:d2:1b:
62:ec:44:72:68:a4:a4:fa:eb:9f:97:f3:3d:d3:96:d7:01:ac:
e2:39:2d:21:5b:81:c1:27:90:0c:ed:b3:2b:01:61:52:eb:88:
fd:cd:39:14:53:70:5f:8e:f4:8a:b0:e2:1f:85:9a:8f:35:74:
4a:0f:50:65:f9:81:a7:32:06:a9:92:12:71:3f:c0:5f:82:f9:
5a:56:56:8c:1b:30:36:96:22:4a:1e:1f:2b:9d:96:d5:95:1a:
1d:11:6e:69:42:19:58:69:35:96:9e:53:47:15:70:8c:cd:cb:
68:1c:3f:68:9e:6d:f3:37:70:1d:13:97:11:74:ab:d7:ef:b9:
41:dd:34:6b:bf:e4:5c:95:a1:c4:8e:fc:60:28:ce:47:0f:7a:
82:75:c3:1d:4c:0c:b5:f2:fd:55:8d:66:72:e5:a4:b9:40:95:
d7:c3:08:d7:49:e8:de:e9:d7:0b:cb:dd:63:2b:24:59:5b:b0:
a1:19:9a:6e:23:22:0c:e8:df:97:91:ae:d5:73:81:2b:3e:ac:
b8:f3:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:17 2026 by rpki-client