
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587.cer
File: 7e2cde89-a04e-4423-9844-bcbd0aa96587.cer (raw, json)
Hash identifier: irStxZ+1LU1BSta0haCK+WEtA8L2k6fUg82hCWRCsuk=
Subject key identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584EF17A867DA8F7C7A5350E06D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 24 Aug 2026 12:45:12 +0000
Certificate not after: Sun 26 Nov 2028 13:45:12 +0000
Subordinate resources: AS: 20432
IP: 50.20.208.0/20
IP: 72.46.0.0/20
IP: 206.83.156.0/22
IP: 207.231.0.0/19
IP: 2605:ad40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:7a:86:7d:a8:f7:c7:a5:35:0e:06:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Aug 24 12:45:12 2026 GMT
Not After : Nov 26 13:45:12 2028 GMT
Subject: CN=7e2cde89-a04e-4423-9844-bcbd0aa96587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:a0:12:f2:15:de:fa:e7:f6:69:06:cc:34:
92:e2:c2:e7:0d:7d:b6:6b:2a:0b:55:94:26:77:d9:
55:78:48:59:20:d8:58:43:a8:5a:09:e8:96:4d:a0:
b7:3e:a0:3d:8f:94:16:76:7b:0e:c2:61:7f:08:10:
c9:77:10:d1:8c:c4:e1:1d:bc:83:d8:92:5b:8a:0c:
38:31:f4:ba:5b:21:b1:d9:96:af:66:cf:76:bd:d4:
61:af:7a:d1:bb:63:7a:1f:cd:4c:ce:df:2b:a7:3f:
f2:38:f7:08:7b:5f:66:60:e9:cb:05:57:8a:95:55:
db:9a:26:82:fe:9e:84:4d:f0:34:97:bc:0f:04:b1:
0d:9f:9f:33:37:66:66:2d:bb:20:2c:8c:98:fb:49:
8f:ba:d5:a5:51:d2:56:d5:28:81:d1:be:d9:1e:5a:
9d:eb:a9:00:d5:39:9d:81:0f:6c:21:23:78:4d:8a:
0c:f3:95:d8:d7:04:91:67:b6:e9:98:89:65:ac:e1:
e2:b9:31:1c:43:53:3c:3f:1d:01:b0:7b:c7:5c:c0:
b4:5a:7c:36:6a:8e:da:7c:d1:8a:18:69:8d:93:6a:
df:50:55:02:da:5d:8e:ea:17:28:e5:ec:d9:2b:45:
25:3a:64:4d:88:be:6f:44:46:05:b8:04:02:21:fb:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.208.0/20
72.46.0.0/20
206.83.156.0/22
207.231.0.0/19
IPv6:
2605:ad40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20432
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:38:f9:04:c3:60:44:3a:65:d1:77:ba:a7:cf:f4:0f:6a:17:
72:9b:91:79:ab:da:88:0d:42:aa:4b:98:0d:43:64:9a:e6:49:
c3:c6:97:eb:84:63:66:6c:a0:9c:7d:53:30:0a:32:f4:36:c4:
8f:73:9c:7d:a2:3d:4a:ef:6e:d7:59:c9:e3:15:36:b5:f3:44:
d8:1a:97:30:92:16:5b:2f:1a:da:15:66:21:fa:d7:0c:9c:00:
3e:56:26:1f:59:77:7e:9b:2c:c4:91:0c:f1:22:58:27:47:d6:
52:88:a9:3f:55:cd:da:e0:c8:ed:fb:3b:9b:05:3f:a9:7b:fa:
53:de:eb:41:e1:2c:9d:dc:4d:f7:b3:aa:32:ee:87:91:9c:55:
eb:1a:ea:3f:38:7e:a0:7e:13:b0:c4:95:28:49:fc:af:81:e2:
02:dc:e9:62:79:ca:8e:01:bf:17:62:c7:96:d6:91:26:89:6d:
7a:cb:a0:5b:b0:2f:54:ac:9e:31:8e:60:17:9c:89:f0:90:3a:
ec:38:0f:40:61:eb:45:d0:fe:3e:61:69:a3:92:b7:78:20:77:
c6:d2:ef:0b:0b:0c:c3:54:21:3b:8c:2d:b8:1f:09:5a:64:b9:
a8:ea:cc:b6:8a:4d:1f:48:8c:fb:99:f2:29:cf:73:7e:1a:e4:
77:73:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:59:37 2026 by rpki-client