
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
File: ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer (raw, json)
Hash identifier: V4UmhVqaMt+SCYp3XXj47HHO8NM5ks+nY8eJg/2UQMk=
Subject key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CF14FDFAA9900BF13FD6DCF80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 22 Feb 2026 01:45:23 +0000
Certificate not after: Sat 27 May 2028 00:45:23 +0000
Subordinate resources: IP: 45.45.212.0/24
IP: 107.191.76.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:4f:df:aa:99:00:bf:13:fd:6d:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 22 01:45:23 2026 GMT
Not After : May 27 00:45:23 2028 GMT
Subject: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:8f:02:ac:8d:da:ea:ab:e7:15:cf:a2:a3:
22:ff:05:15:ed:c9:05:ef:6b:8b:db:49:e8:5d:cb:
f4:9a:f0:e3:83:c8:20:02:8c:a1:51:79:a4:83:5d:
2f:83:e6:f1:00:96:02:e5:98:e7:5b:c5:db:9c:8d:
6a:5f:1b:f6:51:d4:b2:f2:b5:a7:08:ce:73:cd:8e:
94:1a:e2:1a:3a:b3:ab:61:4a:04:96:66:ea:be:92:
3d:8f:83:31:39:a2:e9:36:c6:34:f0:c4:be:65:01:
29:56:c6:c4:3d:e4:99:dc:1f:a8:3f:90:da:94:a5:
fe:d8:8a:c7:61:b3:55:7f:15:2f:66:ea:09:9c:14:
c2:2e:09:54:9f:42:ed:26:05:71:94:87:40:f8:ed:
d2:10:58:90:07:d7:09:c3:27:70:7c:a4:9e:7e:e4:
fe:8f:29:9a:7a:82:a9:79:ba:e7:7d:0e:f5:c3:f4:
1d:54:23:9d:20:81:19:7f:af:94:1f:37:aa:4b:de:
43:0f:f4:f0:b8:a7:34:53:78:c6:1d:44:2a:72:be:
f3:8d:44:59:c2:bb:11:76:db:be:d6:07:f3:d8:c4:
60:a1:10:2b:e9:ea:53:0b:bb:e4:02:12:8f:25:1e:
f9:73:ee:4e:8b:94:b7:6e:15:f0:0b:13:98:fe:ae:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.212.0/24
107.191.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:88:39:10:69:54:8f:43:c7:f9:4c:2f:58:30:60:ad:8e:d0:
37:c8:11:1c:a1:4e:e6:bf:ef:4f:e2:ba:5a:b1:c0:92:f3:3e:
d9:71:90:39:45:4f:86:c8:74:51:6e:5f:2a:fc:fd:2d:f8:e7:
0e:46:07:71:52:1e:f8:ff:e7:37:06:82:ed:d8:7a:ed:a7:bf:
4d:05:9e:4b:ed:84:ce:08:5d:c5:d8:64:c4:f0:bd:46:53:82:
3a:db:3b:c6:de:8a:e0:dc:c5:19:d2:ed:ca:26:65:b2:41:82:
d3:fd:8a:7b:4c:87:c6:57:55:05:ea:b6:b7:d4:8b:a7:89:77:
72:e1:76:7b:55:2a:72:fb:fb:00:f1:53:8c:2c:c8:e9:0e:3b:
7c:b8:e7:11:62:1a:83:68:e0:bc:47:2f:8e:3a:4d:76:76:72:
11:8c:03:8c:f2:cc:ea:b7:0e:e2:2e:ce:d2:ba:81:e3:8a:12:
39:de:12:11:da:70:db:5f:ef:26:87:b5:72:d8:8f:26:9a:11:
b4:ad:76:fb:76:e0:42:47:a7:56:7d:07:33:6b:5a:b0:76:93:
b7:a7:a8:1a:39:e8:5f:43:99:ef:fe:43:bb:76:5a:78:08:39:
a6:fe:6d:9f:23:9d:01:ed:02:82:30:43:50:5c:35:cf:f7:ab:
3a:01:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:03 2026 by rpki-client