
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
File: 1a4b6836-4e28-439c-9ea2-50482aa15b68.cer (raw, json)
Hash identifier: RRk7B2hVeZedJonIpDr2MDKaQFUQEoARrSJXhiXulgk=
Subject key identifier: 8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D5718038D3B3EBB81DFE49CE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 30 Mar 2026 12:45:17 +0000
Certificate not after: Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 40850
AS: 399535
IP: 138.118.116.0/22
IP: 177.128.128.0/22
IP: 191.5.56.0/22
IP: 2607:2ec0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:18:03:8d:3b:3e:bb:81:df:e4:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 30 12:45:17 2026 GMT
Not After : Jul 2 12:45:17 2028 GMT
Subject: CN=1a4b6836-4e28-439c-9ea2-50482aa15b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:0d:c0:94:90:d3:e6:fa:d1:85:39:2e:e5:
19:05:c2:68:f4:b0:6c:26:05:fc:79:4d:2c:e9:62:
6a:15:a1:50:74:5c:58:a4:86:1d:ce:8f:40:9b:26:
aa:ec:83:7b:65:c3:b0:37:9b:2e:06:c4:29:bc:3a:
4e:0a:a4:d4:02:fd:96:b1:fa:0b:09:ec:82:db:d6:
ab:a7:b1:99:81:73:58:de:11:eb:92:a7:4a:61:b2:
39:71:15:59:d3:6b:25:70:e5:1f:42:5d:3f:a5:0a:
28:56:91:cc:e4:81:b8:f5:21:88:d0:a5:47:15:4c:
f0:e5:16:70:90:60:3f:75:9a:df:37:5e:d5:b6:ec:
96:39:02:42:f0:66:66:fe:c0:32:16:49:3c:d3:93:
23:84:7b:9a:61:75:74:ed:00:70:bc:3b:b8:6c:31:
df:01:eb:c0:76:cd:66:c6:72:52:37:98:12:0c:1f:
aa:ba:f2:4d:b6:08:d7:0e:93:4b:75:c7:4c:05:3a:
8d:42:d0:6b:28:a1:75:63:51:6c:74:89:b1:8c:40:
ef:20:4f:8f:da:5f:e5:7e:d9:2e:ae:77:54:f5:63:
c1:f0:de:df:a2:ab:ab:07:8c:42:d7:d7:a0:28:6b:
32:2d:37:c8:d2:c0:b1:a3:4f:ea:c1:4e:15:ea:1e:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
138.118.116.0/22
177.128.128.0/22
191.5.56.0/22
IPv6:
2607:2ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40850
399535
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:01:ec:45:cf:da:46:23:cd:98:05:9c:55:d0:45:fb:20:d6:
8b:ea:ce:da:27:f5:9f:e4:2a:b7:7f:84:1b:38:05:db:b8:39:
ab:ef:12:14:30:b5:0d:46:a3:2d:62:8e:e3:1a:0d:11:ca:a6:
6a:e0:87:a2:f1:73:0b:a3:e6:12:67:4d:a3:79:07:4f:7a:4f:
d5:b9:87:47:87:09:8e:4a:15:ac:98:a0:a6:07:6a:97:21:4a:
6c:33:25:d4:d2:7f:b8:cf:28:69:a6:48:2f:1f:7b:07:b4:4a:
45:ce:7b:03:a5:01:26:72:57:2a:fd:8f:c5:1c:31:03:f3:11:
1b:7a:95:e1:3a:ee:92:54:f3:69:3c:f6:09:4d:4c:68:b7:66:
82:89:29:c6:f8:0b:5c:f8:d7:fb:66:5e:6a:93:e4:ec:db:a9:
2c:78:f3:d5:a2:56:ff:dd:66:41:f5:8a:46:33:d0:4d:78:4c:
db:4b:f5:e5:c5:96:c4:ae:86:60:a4:ee:6b:d7:27:a7:e6:9b:
bf:31:4f:8b:35:23:02:2a:cd:77:94:cc:01:c2:33:0b:6c:1d:
e5:e1:71:e4:ad:dc:2d:2e:03:ff:85:9a:4e:ee:46:2b:d5:f6:
3c:34:4f:08:ee:14:70:16:48:80:82:ea:1c:cd:3b:18:a5:68:
38:a7:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:22:21 2026 by rpki-client