
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc0ef2cf-e2c0-4ba8-bb73-02790a134064.cer
File: bc0ef2cf-e2c0-4ba8-bb73-02790a134064.cer (raw, json)
Hash identifier: JW4PMfwgZVyMTaPaxk6mjsGJnscn4PoxTHU8fvFn+LM=
Subject key identifier: 38:3C:75:D5:69:1D:CA:61:21:86:2E:A0:B5:CF:55:24:C7:CA:81:A4
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584F353E02798DB36D5C033F4F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc0ef2cf-e2c0-4ba8-bb73-02790a134064/bc0ef2cf-e2c0-4ba8-bb73-02790a134064.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc0ef2cf-e2c0-4ba8-bb73-02790a134064/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 17 Sep 2026 19:18:14 +0000
Certificate not after: Tue 19 Dec 2028 00:25:53 +0000
Subordinate resources: AS: 394203
IP: 23.164.52.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:35:3e:02:79:8d:b3:6d:5c:03:3f:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Sep 17 19:18:14 2026 GMT
Not After : Dec 19 00:25:53 2028 GMT
Subject: CN=bc0ef2cf-e2c0-4ba8-bb73-02790a134064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:c2:80:f1:82:d4:17:e1:63:2e:13:50:93:
96:51:dc:32:83:4c:18:a6:74:2a:ad:02:73:99:03:
bc:89:af:af:af:3c:40:64:08:a1:d1:48:5e:67:b6:
ee:63:3c:7c:c0:b8:f3:c7:d0:9b:04:9f:19:ba:48:
43:d5:0b:b4:cf:76:14:8a:39:44:46:e7:6b:69:ec:
fa:98:1f:48:ec:64:37:f0:ef:01:1a:e4:7a:e4:0d:
46:4a:35:ad:1c:0a:48:8b:da:53:82:04:69:14:c5:
5a:6e:98:47:45:fe:19:a9:0f:41:92:b8:9c:d1:d9:
aa:de:fa:30:24:f0:d4:7d:38:0d:92:c1:6f:cd:f8:
d0:74:ab:c3:1b:dd:99:fe:d5:e4:c3:26:9b:ed:db:
bc:47:28:07:b2:98:4b:d5:d6:65:7d:68:b7:76:8a:
c7:f2:73:28:04:c4:d9:02:f6:32:94:2a:0b:3c:30:
10:bc:fe:cc:a5:c2:89:e1:eb:6a:8d:2b:29:77:99:
94:c6:1e:90:c4:06:bd:0b:07:ad:06:ac:54:a5:57:
c0:b4:1b:8a:cc:dd:55:48:00:27:93:1b:8e:38:f7:
25:a8:75:87:15:ff:ef:a4:9c:fb:02:df:c3:f3:f3:
92:19:13:6a:ad:f5:41:cd:5b:0e:14:f8:16:55:dc:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:75:D5:69:1D:CA:61:21:86:2E:A0:B5:CF:55:24:C7:CA:81:A4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc0ef2cf-e2c0-4ba8-bb73-02790a134064/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc0ef2cf-e2c0-4ba8-bb73-02790a134064/bc0ef2cf-e2c0-4ba8-bb73-02790a134064.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.52.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394203
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:6c:67:05:16:c7:40:56:4f:4b:ff:2c:90:40:19:7d:3e:fd:
2a:b2:31:55:a8:87:41:23:f6:6b:38:4c:ce:ce:b1:19:ba:ff:
19:67:fb:93:4f:c2:53:15:bd:31:da:30:d0:a7:e3:ff:92:cd:
6f:c8:67:64:51:a3:71:7e:b5:ad:51:4d:b2:c6:07:15:12:41:
87:14:d2:6d:9b:bd:6a:cd:f4:3e:f9:f5:6d:25:f0:15:c5:3e:
cf:37:dd:d0:3b:3c:27:ee:ec:96:e6:f3:f2:d6:b3:c3:d7:d5:
0e:00:c4:1e:72:d6:5f:bc:df:02:3c:8a:52:a3:d5:09:31:cf:
1f:4a:cb:72:40:64:e9:b7:bc:50:f1:58:e9:dd:b2:a3:9e:92:
1e:b6:5f:28:de:b7:47:ca:a4:be:a3:c9:08:42:59:15:a3:e0:
6a:a4:2e:c8:36:68:50:b9:de:c4:6d:6e:8e:b9:dd:57:92:96:
79:15:d3:de:64:11:7d:c8:74:6a:e9:a7:0e:df:0a:a0:f7:8e:
d4:60:be:74:ed:ed:50:3e:01:89:52:14:c6:58:1f:9a:17:ff:
29:f9:0b:83:27:99:d4:07:72:f4:89:b2:f5:4a:5b:2a:08:21:
1e:9b:0a:95:27:76:a9:5b:53:74:08:18:f7:bd:e6:24:15:7f:
bf:f9:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:55 2026 by rpki-client