
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee.cer
File: 8924c74c-a53f-4076-b41d-b99a1028e4ee.cer (raw, json)
Hash identifier: T/4xCpPVw5lRBis7BIfAqoLp2ViYtUI1IgYs1vgPK2M=
Subject key identifier: 1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584FAF510D239DCABB6E6225AA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 31 Oct 2026 12:45:13 +0000
Certificate not after: Fri 02 Feb 2029 13:45:13 +0000
Subordinate resources: AS: 394822
IP: 23.176.136.0/24
IP: 2602:f928::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:af:51:0d:23:9d:ca:bb:6e:62:25:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Oct 31 12:45:13 2026 GMT
Not After : Feb 2 13:45:13 2029 GMT
Subject: CN=8924c74c-a53f-4076-b41d-b99a1028e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:63:24:3d:6b:d0:27:02:26:bc:22:b4:44:
e2:8d:0d:d8:6a:85:ce:88:e5:fc:75:53:b5:87:42:
c6:e4:08:cb:59:ec:e4:f1:05:11:54:51:26:67:38:
a5:84:01:31:f6:3e:b4:dc:6d:c7:8b:12:76:9f:7b:
d1:6a:65:19:04:bb:f5:e6:82:f8:5b:81:fb:82:a3:
c2:30:be:cc:72:ee:8f:85:5d:9f:be:d9:ea:38:a0:
02:be:5e:23:50:b8:d1:e8:f1:6c:95:b0:04:d0:96:
d8:b6:f6:9d:77:dd:13:13:68:81:2d:c0:ee:a3:88:
10:dd:43:2d:c5:1a:6a:49:89:ee:41:59:d1:9a:26:
2e:02:b4:2c:ec:60:98:6a:c3:78:7c:26:80:22:3c:
01:8c:7e:af:96:05:65:ca:79:2b:03:3c:c3:bf:7c:
5d:e6:05:db:e0:60:4f:81:4e:29:5d:5f:a7:fb:b3:
91:7f:96:bc:22:1e:38:fc:9e:4d:3c:fb:09:d2:ca:
31:da:a9:10:b9:fe:41:66:16:93:84:5e:06:31:83:
de:72:bb:1f:dc:8a:5e:8e:e4:14:13:f8:45:34:60:
3e:cb:58:63:68:ae:e9:d7:7f:a8:7a:b0:a1:d5:17:
6a:a7:52:5e:5f:47:df:94:6c:7c:0b:ae:de:20:f8:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.136.0/24
IPv6:
2602:f928::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394822
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:40:e0:5e:42:ac:b8:37:91:4e:4b:eb:b9:6f:e3:88:e0:45:
37:95:8e:10:95:20:b7:93:06:a4:93:ee:77:7b:bd:04:c5:eb:
ed:66:dc:59:b2:e8:2c:ed:65:50:6d:0d:93:64:f7:5a:b8:1f:
f5:88:f4:3f:43:41:06:9f:9f:ae:ec:45:52:97:7e:a1:d7:85:
6d:a9:2d:04:c8:59:89:cb:7e:a2:8f:3e:c5:c2:02:a1:27:98:
f5:e6:b2:75:5f:6e:80:d5:a3:ef:c6:ee:cf:f8:01:c1:d3:c2:
bb:ec:19:66:60:28:c3:b3:ad:eb:24:6f:be:94:13:aa:1f:16:
41:8d:d9:7b:74:b6:b6:3f:d8:cc:eb:8e:81:9a:0c:e8:1e:aa:
2d:d0:95:3a:47:17:ba:33:17:62:7e:8d:68:d3:03:9f:0d:17:
fc:0f:ee:17:91:50:fd:df:e1:f3:50:5b:a4:66:d5:42:42:44:
b8:99:e1:ac:23:7e:c0:ea:7b:fb:eb:e2:0f:2b:c1:d1:8b:3a:
b9:6e:7d:d8:be:3d:4c:86:6f:52:47:7f:b4:a6:ee:8b:75:c6:
89:fd:44:23:34:1a:09:86:c1:f0:62:dc:c4:dd:fe:c2:48:15:
1a:48:84:ff:6c:81:f0:e6:9a:da:bd:57:7d:d8:31:4a:e1:0e:
fb:65:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:13:19 2026 by rpki-client