
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
File: 405ae070-e9e9-4d3c-b449-868426ff2303.cer (raw, json)
Hash identifier: 84feaZo1IDEx0QSrpx5MsqwEvb8ohe/d3kE58MYx1W0=
Subject key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584F23BAD5BE2FA79864F5978280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 11 Sep 2026 12:45:11 +0000
Certificate not after: Thu 14 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 15296
IP: 162.246.156.0/22
IP: 199.116.232.0/22
IP: 204.209.76.0 -- 204.209.80.255
IP: 2605:fd00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:ba:d5:be:2f:a7:98:64:f5:97:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Sep 11 12:45:11 2026 GMT
Not After : Dec 14 13:45:11 2028 GMT
Subject: CN=405ae070-e9e9-4d3c-b449-868426ff2303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:76:bb:41:0d:b8:d5:e9:36:94:01:dc:ce:
0e:63:cf:e8:eb:e7:0d:91:12:02:46:51:c9:34:2b:
6b:6c:71:b0:8d:d5:ce:84:69:2a:8b:bb:db:fd:ac:
28:f9:d3:7d:18:bf:79:5b:2c:cb:27:42:db:dd:ca:
6c:dc:e2:c3:a5:a3:40:61:03:b2:48:ca:ad:e6:53:
38:6c:4d:72:ed:3f:d7:c1:c0:ab:21:bf:fd:a6:3c:
85:f8:8c:a2:49:84:a9:c3:89:08:c2:b1:4d:25:18:
c7:93:cb:b3:f6:87:67:a2:cd:91:55:97:f7:02:a1:
ca:29:28:47:8d:b8:1e:62:5a:56:bb:01:f1:e8:9c:
f7:94:16:34:ad:2d:d6:bf:9a:dd:d0:45:6f:d1:fb:
76:12:dc:1e:64:72:f3:f7:77:37:11:8b:69:58:02:
38:cb:f1:e4:5b:53:8c:54:ee:e2:59:79:51:42:a1:
9b:4c:91:a3:55:72:e9:a2:88:1c:ab:80:41:63:1d:
a4:7c:76:f7:10:da:f8:a2:fe:94:80:71:f0:9d:a5:
40:be:b2:0f:75:5a:51:75:e0:17:87:fb:d6:74:09:
25:34:25:5e:6f:64:b9:fd:12:9d:e3:29:2a:e3:71:
83:92:69:bc:f9:1e:aa:48:2b:e9:9f:23:4d:8d:5e:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.246.156.0/22
199.116.232.0/22
204.209.76.0-204.209.80.255
IPv6:
2605:fd00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15296
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d8:fe:03:de:8e:a4:ba:56:4d:03:26:ce:3b:83:5c:64:64:
3f:e0:06:01:7d:35:c7:2e:04:15:c6:7e:bb:e9:f7:0c:a1:26:
82:3b:1e:fa:41:ed:f9:48:72:ff:38:bf:bb:b7:cc:49:e7:56:
3c:e0:4c:76:e4:58:d8:17:88:04:08:5f:17:4f:0e:59:1f:1d:
f5:fd:16:b8:a7:b0:38:d5:09:b1:70:a5:6f:51:2a:da:54:5e:
7a:9b:7b:45:06:55:1d:f0:33:2d:95:0f:a2:62:75:e6:8a:c7:
4b:5b:17:ff:3b:d1:23:3c:bc:10:33:d1:66:88:02:92:24:9a:
ee:57:62:42:63:ed:f1:2b:9f:30:14:46:17:5c:5d:4f:ee:8e:
d1:6c:01:c0:80:7c:8d:b5:93:e8:aa:ac:ed:1c:f0:0d:45:34:
6d:0c:5b:8e:b6:2e:5a:ab:0a:fa:00:9c:25:8d:b5:6e:e3:65:
f6:5c:ac:3e:f4:6e:2d:85:85:2d:2e:cf:06:f4:9d:d5:49:72:
1f:45:46:86:00:fa:a6:e7:0c:7e:52:6e:63:b5:6e:fe:95:ab:
d5:44:ed:78:2f:61:01:13:9c:45:77:46:3b:7e:b1:3b:9e:ad:
6c:95:4b:d9:73:ba:f5:5a:d8:8e:7d:64:65:b8:b9:c9:7b:e5:
9e:30:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:33:19 2026 by rpki-client