
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
File: d84d90bc-9144-4684-9270-edf2e53d3879.cer (raw, json)
Hash identifier: OEAtiNn8kLva8jbo5ibdcQtuFLzsDKF+OomOgm4hjmI=
Subject key identifier: 9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CAE4F73E100DF3A76E0B92A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 29 Jan 2026 01:45:23 +0000
Certificate not after: Wed 03 May 2028 00:45:23 +0000
Subordinate resources: AS: 399674
IP: 104.247.104.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:4f:73:e1:00:df:3a:76:e0:b9:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jan 29 01:45:23 2026 GMT
Not After : May 3 00:45:23 2028 GMT
Subject: CN=d84d90bc-9144-4684-9270-edf2e53d3879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:58:14:37:90:0e:92:ca:11:dc:34:4b:96:
38:f3:1e:09:26:b4:33:af:40:13:b9:6e:9c:b5:15:
4e:83:eb:d7:50:7e:da:66:ed:1c:69:0e:af:2d:12:
2d:b0:6e:75:ea:60:f0:c4:08:b8:8d:7e:3f:9d:b0:
ad:e0:47:4c:32:67:88:51:21:cd:1f:56:75:53:39:
97:e2:db:6f:61:5e:22:2a:7d:4a:4b:06:81:df:c9:
85:25:31:64:75:87:ba:67:6e:38:fb:d9:86:86:da:
05:7a:73:ab:ba:d6:93:b5:33:2f:be:cd:6a:61:54:
fd:4c:1d:50:c7:45:10:c2:d6:53:85:42:0c:bd:d8:
c7:02:3c:3d:31:c6:6a:e7:6e:f6:80:18:59:d6:f8:
91:f7:a3:3d:84:c2:20:af:10:90:de:96:9e:63:7f:
3d:ae:d2:f0:f8:58:47:6b:5d:42:b3:f6:4e:10:b5:
ba:e6:24:3b:8a:14:ad:ec:3d:e4:c5:ac:44:5b:c1:
6e:31:44:e1:da:89:a5:4d:76:f1:1a:45:29:d9:9f:
97:7d:67:00:41:2b:07:b8:6d:d1:fc:26:b3:ef:71:
95:e8:d6:1c:2a:ef:c3:c1:d4:af:a7:35:31:c0:6d:
13:aa:cb:23:7b:e2:40:20:23:a7:c8:6e:61:01:be:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.247.104.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399674
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:7b:58:ee:57:34:4c:67:14:f3:07:a1:c8:f5:c6:df:d8:bd:
41:da:c0:32:43:1a:3f:14:dc:94:97:a4:24:aa:4e:ea:1b:87:
06:cf:da:dd:61:56:e0:41:6e:3b:f6:9d:88:31:57:ff:89:d9:
8d:4e:db:fc:6a:d1:5e:b5:6d:9f:cd:b7:4e:48:7b:f3:3e:8b:
5b:7f:8a:d5:9c:88:77:6e:52:cd:e4:6f:05:bd:2a:86:fb:99:
99:c1:ac:ac:a9:f6:d9:9b:c0:3f:c0:da:f5:82:f0:5b:5c:be:
de:a9:e1:fb:e3:5c:7a:6e:fd:bc:10:df:d4:c6:4f:18:88:fe:
39:ed:cd:98:0e:78:01:8f:92:eb:69:4a:f6:8e:ff:67:79:b7:
8d:59:ad:e0:90:79:72:73:13:38:7b:ed:8c:7b:c7:61:60:90:
92:8f:52:bd:08:e5:6e:b3:19:3d:b7:d6:9a:37:9b:f8:79:40:
19:b9:4a:92:de:ba:f7:85:a1:8f:a7:8b:d6:15:1e:9e:23:db:
d9:a0:a9:d7:fb:5c:21:d5:43:c1:7c:01:b3:d7:c9:58:cf:43:
83:f3:65:d1:39:4e:14:46:81:cf:b8:42:4a:aa:76:0a:e0:a4:
e6:a3:35:dc:ab:a5:87:77:b2:ca:7f:f7:8c:d3:cf:4e:f0:79:
7a:16:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:51 2026 by rpki-client