
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
File: 10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer (raw, json)
Hash identifier: HjtFgaPl3DGabXPLAH9Dw/SElv+mNRk0OaJG3YHuACw=
Subject key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D00AAA1E9770F742111A90C80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Feb 2026 13:45:22 +0000
Certificate not after: Thu 01 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 20119
IP: 23.151.96.0/24
IP: 142.202.12.0/22
IP: 144.208.88.0/24
IP: 172.83.127.0/24
IP: 2602:fe3a::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:aa:a1:e9:77:0f:74:21:11:a9:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 27 13:45:22 2026 GMT
Not After : Jun 1 12:45:22 2028 GMT
Subject: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:ce:85:4b:9a:d7:78:b5:49:1f:b9:72:68:
94:67:86:af:aa:2d:d1:44:0e:43:9a:93:d6:fd:df:
30:39:95:10:15:05:f7:82:f3:35:63:de:96:b7:a7:
c1:28:f2:a7:db:df:63:e4:13:a2:e4:40:f5:9c:4b:
6d:da:6e:04:71:51:64:a5:89:83:bb:a5:e4:0c:f7:
2b:61:07:ac:74:24:7c:47:67:40:2c:85:3e:98:0f:
5b:29:e9:97:4f:d8:6b:e5:2d:7c:1d:77:ca:09:1b:
69:5d:79:e8:d2:c1:ff:ab:30:dc:60:b8:70:4c:87:
64:06:67:66:7e:83:b7:cf:8a:b3:e6:a9:95:82:ae:
47:18:28:44:52:a2:1e:3c:64:0f:97:42:b4:6d:b1:
8e:c2:54:a3:29:9a:4a:9a:8b:64:bb:12:f3:58:76:
81:e0:d2:6f:d3:ad:16:32:4e:24:13:01:d4:b5:26:
7e:0f:9e:97:2d:da:92:2b:46:f4:3c:7b:b0:d1:55:
d5:31:d4:28:0f:4d:cc:a8:3d:ef:4b:05:63:15:a4:
dd:fa:30:e6:70:be:fa:bc:36:9c:e2:a7:18:47:f7:
1d:a2:75:8d:bf:4c:36:28:6c:6d:c9:88:59:df:3b:
0a:0d:3c:a2:da:91:3e:46:c2:7d:ee:04:e4:7b:a0:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.96.0/24
142.202.12.0/22
144.208.88.0/24
172.83.127.0/24
IPv6:
2602:fe3a::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20119
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:bb:65:9e:51:f1:6d:16:38:8c:26:9c:f0:65:52:a8:5b:42:
6d:e1:6e:8d:0d:f9:07:3c:da:07:a9:6d:19:cd:45:56:52:c7:
95:cb:df:dc:16:6d:7e:f6:56:14:d4:9e:ba:0f:41:b9:43:ed:
7b:60:eb:27:5e:78:5b:80:eb:2e:fe:f1:b2:3d:0b:c2:24:68:
ab:5d:0e:61:62:c6:ea:ca:b3:83:31:4f:b6:c6:a7:d9:54:cb:
0b:05:8e:db:32:2b:d4:e8:1f:8b:39:c3:7d:87:c3:d6:0f:db:
6b:ab:69:3e:c1:00:6f:b4:2b:c4:63:f5:27:0c:b5:a6:21:02:
25:c7:ac:cc:e4:06:ff:3b:e9:dc:f9:53:9e:f0:b0:da:18:2f:
dc:63:c3:93:b3:d8:91:fd:19:2d:8a:b3:9d:df:b0:9c:c6:e3:
fa:f6:60:ce:2f:de:2c:e5:9f:c9:9b:dc:89:2c:5c:57:e7:a1:
ff:d3:5e:82:2a:e0:15:ae:c8:a8:c9:df:de:27:8d:79:a4:f7:
41:51:d9:4d:7b:7c:e2:0c:ce:df:c0:21:cd:37:66:07:96:e2:
e4:b3:e4:73:a8:1f:9e:e4:0e:e7:50:ce:49:ab:67:34:ec:48:
d2:0d:d7:fe:47:8b:dd:1e:c5:84:cd:26:ea:7e:85:85:f1:08:
73:f3:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:38 2026 by rpki-client