
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer
File: 7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer (raw, json)
Hash identifier: hR9b9UYiLDh0jNmk/9deDF1Ib1ZPje+zrXb0atJgaJY=
Subject key identifier: 8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584F37459F78E728773B4D7D6700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 18 Sep 2026 12:45:11 +0000
Certificate not after: Thu 21 Dec 2028 13:45:11 +0000
Subordinate resources: IP: 198.162.96.0 -- 198.162.119.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:45:9f:78:e7:28:77:3b:4d:7d:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Sep 18 12:45:11 2026 GMT
Not After : Dec 21 13:45:11 2028 GMT
Subject: CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:d3:0c:5d:d2:c6:e0:c3:d7:9d:4e:34:f3:
e3:53:a8:ef:c3:2e:23:e9:23:eb:5b:e4:c7:d2:3a:
52:d8:d4:be:fe:11:39:7e:19:57:fd:26:7e:d6:53:
47:1e:2f:09:c9:e2:67:1e:f6:1d:e1:be:ed:c8:38:
e7:d4:36:0b:05:1f:4c:4d:18:2b:75:76:31:12:f2:
f3:a4:a6:0a:0c:8a:a8:82:d5:ef:78:44:ad:94:14:
49:b5:8a:22:ec:14:27:d6:cf:bb:f3:26:34:98:6a:
1d:86:6b:b9:00:cb:07:e7:64:e3:67:f9:8a:83:39:
b1:ba:b0:be:b9:33:27:82:57:d3:78:7c:e0:79:35:
8e:62:18:c9:d6:26:40:a7:13:27:82:89:8a:a4:e8:
3a:e5:18:6b:32:15:fd:91:c8:e6:7e:5f:e1:a2:44:
d5:f5:83:68:c2:12:ca:47:89:e6:9e:a9:de:d8:80:
56:83:ef:68:e9:71:1c:55:c9:e1:ca:bc:7a:f2:69:
5d:a3:d6:74:4b:16:80:59:44:db:b3:d3:98:90:af:
07:c4:59:10:d2:64:0d:42:66:75:3a:7c:09:fa:fb:
74:4a:d0:c0:85:56:61:2f:4d:0d:9a:38:fc:f4:50:
ce:89:83:4b:d8:e6:2e:51:20:e6:33:6a:7e:28:07:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.162.96.0-198.162.119.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:6b:42:32:01:06:56:6d:57:fe:f1:20:24:45:47:76:39:a6:
2e:2d:e8:6c:58:2e:40:a7:f5:b5:41:ce:7b:d7:ec:38:5b:9c:
8b:21:7c:71:25:6b:29:07:cf:b3:f9:1d:3f:2c:fd:97:50:53:
6a:72:e6:a3:f1:6c:dc:bb:35:77:8f:a4:69:20:c4:69:88:54:
46:02:47:43:a6:6c:58:65:c4:69:58:7d:6c:f4:37:47:c1:2c:
c3:a5:ea:c0:51:b2:af:37:19:1c:a8:27:0f:19:3c:e2:25:1a:
09:dc:5d:9e:49:ce:92:60:cb:76:c7:93:af:6f:2f:27:df:d0:
fd:f0:99:2c:a3:98:d4:9e:9d:3a:45:64:38:95:8a:96:a2:c7:
0a:c2:e5:30:0e:16:8f:c9:5a:61:37:3e:d1:40:17:dd:d3:48:
c9:17:70:67:54:56:23:71:35:2e:12:77:bb:a5:52:c5:40:c6:
33:f1:ad:b5:8d:e8:0d:67:e3:ce:90:84:51:ae:d4:0c:35:cb:
34:30:aa:8c:11:99:ea:bb:6e:97:92:90:b1:5b:2c:f3:f6:03:
43:c8:0f:0b:ae:f9:ae:d6:43:2f:cd:5f:1d:51:31:ba:92:e7:
9e:30:61:55:bf:37:7a:e3:5e:15:f0:18:34:44:0d:aa:e8:ab:
29:0a:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:36 2026 by rpki-client