
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25.cer
File: 778133a3-9e4e-4ceb-afd8-e657de2d7a25.cer (raw, json)
Hash identifier: pfSoXxCkvXxvzQL1To5xWsJNk04kM0EhaOlhj4Drm+g=
Subject key identifier: 60:DC:84:CA:59:A4:21:9F:98:29:46:52:3A:9F:3E:95:93:46:47:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584EFF6FF14EB21115DB9B26A100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/778133a3-9e4e-4ceb-afd8-e657de2d7a25.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 29 Aug 2026 12:45:11 +0000
Certificate not after: Fri 01 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 62845
IP: 162.248.32.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:6f:f1:4e:b2:11:15:db:9b:26:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Aug 29 12:45:11 2026 GMT
Not After : Dec 1 13:45:11 2028 GMT
Subject: CN=778133a3-9e4e-4ceb-afd8-e657de2d7a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:56:7d:86:73:e8:9f:8b:ad:ad:32:bd:34:
b3:30:eb:79:61:8c:09:99:fd:79:f7:45:67:a0:bc:
c4:8c:9c:ad:23:12:68:c9:e9:fd:52:70:3e:ae:5f:
13:88:7f:3c:f0:54:32:9f:38:4e:3d:e4:98:d6:ad:
a1:92:7d:71:6c:63:9d:18:84:3c:ba:56:c6:bc:40:
5f:01:25:13:10:ff:8f:b9:30:49:a6:d7:bd:57:b0:
28:31:57:e6:22:c6:21:8a:a2:c0:25:47:bc:2c:7f:
15:f3:52:3c:d0:50:ad:95:52:84:52:0c:78:cc:2f:
14:d9:4b:6f:99:70:59:35:c0:1e:88:56:64:83:75:
a7:7a:bd:70:a0:d0:d7:ca:90:20:76:fc:af:30:99:
29:32:04:60:28:13:aa:0b:80:00:89:82:34:5f:77:
b3:46:0d:c0:5d:a0:3c:c3:bb:b5:ee:91:8b:2a:c1:
44:e4:af:27:68:41:8e:66:52:c4:5e:6d:d8:7d:23:
18:da:05:4c:5f:04:8f:5d:99:95:ed:0d:15:da:bd:
a1:38:05:16:30:bb:62:bd:fa:2c:85:02:7c:18:c4:
cc:7c:a7:98:c8:b8:59:1b:1b:00:81:ff:c2:5c:88:
93:2a:a2:68:33:d5:4f:a3:a6:31:22:18:98:47:d5:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:84:CA:59:A4:21:9F:98:29:46:52:3A:9F:3E:95:93:46:47:87
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/778133a3-9e4e-4ceb-afd8-e657de2d7a25/778133a3-9e4e-4ceb-afd8-e657de2d7a25.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.248.32.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62845
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:8a:9f:6b:81:17:26:45:c3:59:a3:10:91:ff:3f:91:01:ed:
b9:b8:f7:79:e3:0b:48:97:c2:30:36:e7:74:db:3c:69:5d:e1:
f4:d7:cc:77:4d:c0:a3:23:6c:c3:3b:59:80:c2:e8:26:d4:f1:
e2:f6:d8:0f:1d:33:0e:9b:e2:17:e0:27:68:f2:a1:be:39:f0:
92:bb:b6:07:9f:ef:b9:dc:93:78:ef:a1:69:3e:60:98:a4:e7:
86:10:f1:dd:46:61:0d:cd:4e:1e:21:d0:8c:72:44:97:e8:fe:
35:8c:51:0c:36:54:68:4a:67:87:81:03:a1:55:b4:85:2f:09:
55:a9:23:77:f8:f1:f2:26:ce:3c:34:ef:45:39:4d:cf:73:c4:
f3:e6:45:37:7e:6a:ff:a2:85:9f:ef:60:a7:56:fb:2b:96:4e:
bb:97:dd:e6:5d:fa:3d:bf:fc:20:8a:43:28:50:c3:0a:59:0e:
36:e9:cd:0e:41:cf:74:c6:c7:0b:1a:49:39:63:54:71:e5:dd:
33:a7:f8:6b:58:dc:bf:d0:01:88:25:1e:57:4a:2c:48:a6:20:
ea:ef:36:a3:ee:5f:c7:33:9c:28:37:14:b8:23:e1:65:49:0f:
f4:c7:9b:46:8d:cc:31:22:fc:56:47:e1:7d:e6:4e:71:fa:c0:
3d:a7:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:59:59 2026 by rpki-client