
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698.cer
File: 1786b8ab-4949-4959-b26b-aaad20b28698.cer (raw, json)
Hash identifier: Ts2a/E9mK9yhQ05CFwkpEJSYBvg5kOMCcDgg8tfOmL8=
Subject key identifier: E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CCE6A4EA5295281502A9C9E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Feb 2026 13:45:21 +0000
Certificate not after: Sun 14 May 2028 12:45:21 +0000
Subordinate resources: AS: 20356
IP: 2607:640::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ce:6a:4e:a5:29:52:81:50:2a:9c:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 9 13:45:21 2026 GMT
Not After : May 14 12:45:21 2028 GMT
Subject: CN=1786b8ab-4949-4959-b26b-aaad20b28698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:c2:55:46:10:c4:d5:2e:3d:5d:57:23:15:
2e:73:b4:ce:32:f2:49:89:f5:18:05:85:9b:10:f5:
34:19:78:fc:4b:ae:a3:c9:11:f2:d1:2d:cc:74:b6:
8f:25:e6:98:6f:41:dc:53:4c:87:66:69:21:96:8f:
fe:66:0c:44:ca:02:2b:de:a6:a2:04:35:c9:aa:97:
f5:b4:1a:c6:bf:e5:3b:15:ed:bd:4d:0e:de:a9:92:
9f:f2:89:f8:87:f0:5f:39:b8:0c:f1:5f:77:64:a8:
39:f5:d5:54:ca:af:bb:90:a3:de:4b:84:34:08:60:
4b:4b:f4:cf:a1:2c:92:ba:c1:8f:50:76:93:e2:8f:
03:7b:2a:0a:7c:c5:eb:f1:b6:43:25:44:03:81:6b:
4d:d0:cd:06:50:a2:0f:34:2d:17:7f:0a:b2:02:42:
d4:0c:82:1b:d7:23:c1:1e:4a:7c:80:c8:16:ce:61:
6f:74:3a:0d:c8:2c:11:56:ba:93:71:7f:11:b7:82:
7c:f5:05:5b:90:2d:65:27:42:d5:7d:2d:f2:8a:cb:
35:c7:54:ea:36:6e:b0:c2:0a:11:a7:04:19:07:b2:
52:cc:71:17:40:8b:0c:5f:3d:31:81:f8:5b:9f:30:
10:8e:ce:4b:b8:7a:22:95:6f:a7:00:1b:58:70:37:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:98:4B:BF:62:F3:EA:E8:A5:A5:5D:EE:E8:D8:5A:96:12:ED:47
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1786b8ab-4949-4959-b26b-aaad20b28698/1786b8ab-4949-4959-b26b-aaad20b28698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20356
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ad:94:e5:9e:66:f9:9b:3b:73:bc:e1:f3:6f:e9:7c:0d:d7:
f4:2d:ec:f4:2d:a6:93:75:f3:5e:ee:d7:80:f4:77:ca:eb:9f:
0a:7f:d8:8c:2a:7b:4b:6e:9e:cc:c4:34:59:71:d8:3b:f1:fa:
88:43:ef:f1:94:27:58:03:83:72:8f:8f:a5:df:a6:c7:93:38:
df:e5:02:ec:da:31:1f:5e:c3:77:4a:d2:19:e6:c8:d0:c5:e3:
55:d8:aa:de:e4:df:e9:49:f8:59:d3:e0:2e:e4:a5:37:30:11:
ab:cb:bd:2e:fd:be:c3:13:ab:bc:47:3a:e8:fe:5e:39:c8:f9:
8b:c0:14:8b:6e:4d:41:be:fe:e6:d3:13:6f:c8:8c:24:c2:27:
43:79:87:39:10:d9:c5:ef:34:88:8d:7c:0d:44:7c:c6:01:6a:
81:66:b0:a3:7c:f5:aa:1a:19:d8:7e:b0:74:3f:22:89:1d:06:
2f:e9:07:9f:44:77:f9:28:4e:ba:9a:91:59:13:66:ad:e7:9b:
4b:31:5d:17:a7:97:08:3d:b1:03:78:c0:01:6c:d8:74:f2:b5:
4a:2c:f9:59:93:dc:96:72:8e:eb:00:bb:5b:70:4f:05:8d:ad:
e5:4e:5e:a6:e2:54:e8:97:19:c0:aa:45:5e:54:60:90:53:91:
1d:9a:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:38 2026 by rpki-client