
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f865f553-a4c8-4455-8e20-e011b0b1656a.cer
File: f865f553-a4c8-4455-8e20-e011b0b1656a.cer (raw, json)
Hash identifier: evRJlDCE9gAPEzYwVF2BZhwUCpAVJfADiT+HaKEUGns=
Subject key identifier: E0:8B:6A:4B:AA:21:22:FB:B7:EE:22:24:8C:6C:A1:5E:C9:87:87:AE
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D5718034A07C58532113E6780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f865f553-a4c8-4455-8e20-e011b0b1656a/f865f553-a4c8-4455-8e20-e011b0b1656a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f865f553-a4c8-4455-8e20-e011b0b1656a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 30 Mar 2026 12:45:17 +0000
Certificate not after: Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 23225
AS: 394979
IP: 71.19.192.0/20
IP: 74.114.120.0/22
IP: 141.193.5.0/24
IP: 160.238.102.0/23
IP: 162.219.172.0/22
IP: 192.81.176.0/22
IP: 199.15.89.0/24
IP: 208.78.184.0/22
IP: 2602:ff69::/36
IP: 2605:6900::/32
IP: 2607:3480::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:18:03:4a:07:c5:85:32:11:3e:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 30 12:45:17 2026 GMT
Not After : Jul 2 12:45:17 2028 GMT
Subject: CN=f865f553-a4c8-4455-8e20-e011b0b1656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:f1:56:73:62:55:1e:c5:7d:bb:da:5b:f2:
3d:ba:b8:8a:87:1f:45:ec:31:03:e6:a5:66:13:84:
ec:fc:d6:e3:50:0d:8b:7c:50:d6:0a:c4:04:13:52:
2f:41:d7:e5:b7:63:57:e0:1d:5b:b8:b9:ed:22:d5:
6b:39:a1:43:f5:09:7c:8f:86:99:9b:14:cb:ee:2a:
4a:2d:63:47:75:4d:54:a7:07:94:f8:2f:d4:2f:4d:
0e:e0:b3:50:88:32:c3:63:21:49:a5:3d:ad:b6:49:
10:e9:7e:41:d0:bf:3e:ed:35:42:00:bb:b1:15:67:
07:e6:b5:c4:4b:71:75:a3:32:7f:68:3e:a9:ac:37:
d2:92:35:1c:19:34:f4:63:7a:e5:bf:6f:53:60:f4:
8d:36:80:a4:04:67:59:f2:71:c7:bf:e2:53:79:5f:
9c:4d:25:f3:a8:c6:81:03:08:d7:f8:48:7a:a2:fb:
9c:f6:c9:93:e1:0d:81:bf:d9:20:e5:15:1e:7f:c0:
32:be:9d:75:11:e9:d9:86:df:32:1d:ce:1c:d3:fe:
da:2c:db:86:c0:9f:6d:e2:a2:96:1f:d4:2a:c1:ee:
39:6f:29:72:81:4f:fb:e7:aa:b5:3a:76:b5:1b:be:
99:0d:39:33:8a:d8:a8:ad:4e:21:79:f6:f3:06:e7:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:6A:4B:AA:21:22:FB:B7:EE:22:24:8C:6C:A1:5E:C9:87:87:AE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f865f553-a4c8-4455-8e20-e011b0b1656a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f865f553-a4c8-4455-8e20-e011b0b1656a/f865f553-a4c8-4455-8e20-e011b0b1656a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
71.19.192.0/20
74.114.120.0/22
141.193.5.0/24
160.238.102.0/23
162.219.172.0/22
192.81.176.0/22
199.15.89.0/24
208.78.184.0/22
IPv6:
2602:ff69::/36
2605:6900::/32
2607:3480::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23225
394979
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:5d:cf:de:0e:40:29:a5:ae:9c:31:5e:1d:29:62:62:ec:19:
6b:e7:ea:15:2b:76:fb:a6:e2:7d:83:4f:4e:c2:a6:a4:a8:39:
50:11:a1:cb:7f:6f:43:fd:ef:f3:43:b3:59:66:51:93:86:74:
69:32:f0:de:08:9b:01:6a:dc:e4:01:34:bc:f8:1e:ce:3f:e0:
02:3a:32:ba:f0:ec:d2:dd:d0:3d:cb:94:79:a3:b6:c0:bf:df:
fd:ec:25:c6:5c:f5:8e:4c:64:25:ce:db:cf:45:69:07:73:df:
1f:a6:ff:7a:7b:9f:d7:b5:27:48:23:20:3f:6f:da:e5:6d:87:
a5:68:26:ad:8f:93:51:0b:a6:eb:c9:eb:50:ef:23:aa:4d:28:
1b:21:de:cb:8d:68:1d:0a:71:d3:38:31:4d:e3:fc:2f:ff:d8:
03:b3:1f:8f:93:71:d0:a2:a5:e8:d5:38:b4:a9:e3:76:a5:d2:
03:67:4e:82:37:34:32:07:a3:dc:8d:5f:6e:f6:e6:6c:eb:a5:
96:e2:6d:95:af:9e:7d:29:e1:c7:7f:54:64:c8:0e:0f:72:da:
a7:f9:21:20:ed:ae:7d:50:b8:52:c0:58:cb:44:ee:29:84:bc:
71:2f:55:73:f4:6a:42:24:d4:f5:1e:05:e2:43:a5:d9:85:05:
ab:0e:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:01 2026 by rpki-client