
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
File: 237e8029-86f4-41b0-ab75-535531b02fb3.cer (raw, json)
Hash identifier: k3umKTlx3Aa7RqnudrZI9sBDgUVCoDsgmK4FANT+3Rs=
Subject key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CDDC5141E2B4AC2C4731ECB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 15 Feb 2026 01:45:22 +0000
Certificate not after: Sat 20 May 2028 00:45:22 +0000
Subordinate resources: AS: 30713
IP: 209.221.64.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dd:c5:14:1e:2b:4a:c2:c4:73:1e:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 15 01:45:22 2026 GMT
Not After : May 20 00:45:22 2028 GMT
Subject: CN=237e8029-86f4-41b0-ab75-535531b02fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:69:f6:03:56:72:6c:d7:48:be:52:48:40:
c7:43:73:c8:c6:bd:ac:89:44:59:7f:77:36:64:0f:
8a:de:23:7b:41:de:cc:a0:42:57:d5:49:fa:d5:15:
7e:35:8c:a3:2e:a5:ba:4f:74:9e:bc:9e:21:b2:87:
e0:92:46:9b:e5:c8:dd:11:44:ac:c7:1f:63:a7:90:
a9:f6:c4:8f:b2:c5:1e:9e:3c:d3:7e:0a:ce:99:1d:
85:cc:9f:6d:16:c6:8b:95:e2:fc:e6:8f:84:ad:58:
1e:30:3c:27:f3:e3:4d:f8:cb:5e:b5:a6:e6:fd:8c:
ed:1d:60:f2:2f:ea:56:19:8c:cc:61:ae:62:c3:1e:
d9:e3:eb:08:0a:ed:72:a7:1d:0a:7a:41:73:55:7b:
7d:7c:fe:7d:2e:fa:25:6c:34:c5:2a:d2:5a:0e:f0:
d6:0a:b1:b6:e6:fd:5f:e1:10:bd:5a:e9:7c:d8:bb:
15:a1:88:a0:e8:e3:e3:8d:71:dd:ed:8c:1c:cf:5a:
13:00:88:2b:21:61:a5:2b:22:2d:45:8c:82:16:8e:
47:70:e0:3f:96:d8:4a:4f:c4:de:17:b7:0d:48:e7:
4d:cf:98:28:87:a8:17:9d:94:83:df:01:5b:8a:35:
1b:86:35:1a:48:69:b2:53:f0:83:55:f3:b1:d7:52:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30713
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:84:c6:86:cc:0f:f3:a1:90:d8:f2:0d:55:f3:4b:25:de:9a:
bd:89:36:8e:e6:d9:22:f6:88:40:0c:0d:91:29:2c:fd:70:31:
d5:5d:87:40:a5:43:02:26:8e:b4:c5:bc:2a:fa:34:87:5e:78:
0c:3f:f7:8f:fe:fa:f1:74:43:7f:bc:26:69:15:b8:76:4c:11:
d4:62:64:04:dd:5c:6c:c3:42:31:43:e3:ab:7e:81:ff:2f:ab:
45:55:84:51:d9:b4:51:70:d0:de:46:ad:78:32:ec:da:46:2c:
20:04:d6:9f:1f:8b:b8:ce:b7:9e:58:94:83:9e:92:25:91:fe:
28:43:2a:3a:65:67:67:12:cf:87:9a:da:5b:a1:63:2f:cf:d8:
df:a3:e1:13:30:e3:b9:56:c5:a0:ba:4b:0c:17:f7:18:25:02:
15:d5:25:e0:d8:47:58:9c:6a:54:f0:68:12:24:f5:28:09:e5:
b2:eb:3e:e0:f1:d2:e2:61:cf:25:b5:d0:da:a3:40:e3:c5:be:
9e:85:03:3f:88:44:a3:b8:72:a9:a8:ec:0e:5d:43:0d:9a:3b:
f4:95:ea:f4:65:9e:e7:b1:b3:7c:17:f2:de:68:11:10:2c:b6:
89:10:1a:0f:f7:a1:ae:e7:34:d0:c8:bf:6c:e8:a2:9b:4c:4e:
10:39:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:36 2026 by rpki-client