
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
File: 0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer (raw, json)
Hash identifier: tt4W7nRmPZ8q4agwNkfsoCZ64cpVbWSOUdmvP+K61wI=
Subject key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584F3A104EB38078E8E65FAA3F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 19 Sep 2026 12:45:11 +0000
Certificate not after: Fri 22 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 968
AS: 982
AS: 34553
IP: 45.59.140.0/22
IP: 2602:809:3000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3a:10:4e:b3:80:78:e8:e6:5f:aa:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Sep 19 12:45:11 2026 GMT
Not After : Dec 22 13:45:11 2028 GMT
Subject: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:33:15:16:1e:27:60:43:08:26:3a:b5:80:
21:da:bb:80:4f:11:f7:1c:77:b8:ee:c0:6e:8f:10:
51:d7:a3:3a:7d:3b:7c:77:b1:91:64:4c:6a:6e:98:
84:c8:7c:bb:d3:b8:c2:e9:33:9b:cb:98:b7:dd:a6:
be:c4:b6:fd:03:7e:34:ee:e7:9a:ad:89:93:1a:41:
9f:67:b8:90:6a:c5:59:b1:80:b1:50:be:0a:d3:09:
1b:68:2f:1f:01:44:55:f7:5d:de:4c:44:7a:ef:40:
3f:7e:22:0c:41:35:2d:da:f1:5b:7b:0a:89:b8:13:
0e:33:c3:8a:25:5b:1d:e1:d9:c8:30:b0:08:4f:a6:
c9:9d:41:29:f4:f2:5a:4e:0f:17:e9:88:55:88:74:
8f:30:2d:59:1e:aa:98:b4:9a:56:28:41:f4:b6:8f:
cc:12:e0:95:1e:53:30:c5:63:26:03:29:0f:c6:44:
be:69:4e:0c:3e:50:79:13:a0:a5:03:f0:da:5c:48:
5a:a4:d3:9c:8c:bc:32:ab:98:ec:40:c5:34:e6:79:
d8:18:c7:64:38:4d:06:74:34:44:49:4d:2d:c6:ea:
4d:f1:61:20:fe:cd:00:b1:8c:c9:79:73:55:ee:d4:
b2:c0:78:63:0f:07:f2:aa:85:85:3e:5e:b9:c7:5e:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.140.0/22
IPv6:
2602:809:3000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
968
982
34553
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:53:e8:c8:7a:fe:b1:c2:b7:27:e3:9a:eb:b8:4a:c3:a9:6b:
fb:df:5f:e3:57:c2:d8:24:d4:bb:f1:e3:fb:04:41:e1:bb:d7:
ac:03:40:2f:8a:c0:28:d0:aa:c9:81:ce:34:26:4b:a0:4b:38:
ef:c8:eb:b2:7e:84:96:bb:10:64:81:06:9c:19:de:08:6a:99:
3f:6f:dd:55:8f:6b:0d:da:04:cd:3f:8f:2f:b7:3d:c1:55:ae:
75:6e:b0:03:86:1c:5b:0a:91:ac:35:03:5e:e5:51:09:2d:ef:
31:f9:8e:ae:8f:f9:c7:5f:9d:11:08:ab:1a:bf:1a:29:bb:46:
2e:02:b7:89:4a:77:8b:04:ab:2e:89:da:1c:ba:08:aa:51:77:
58:e0:d3:de:49:87:64:46:60:58:fa:6d:53:03:6b:aa:44:59:
50:2d:7a:29:3a:19:4c:ac:24:8d:e2:ea:2d:48:33:ce:7b:91:
7b:c6:38:8e:42:66:4d:93:b3:e7:22:22:7e:56:e1:f2:f9:77:
62:6d:39:32:06:81:03:71:b5:7d:02:34:ca:17:23:fb:ce:47:
2a:e5:ee:5c:2e:e5:1d:b8:3d:07:c1:95:ea:2b:89:8d:bd:d4:
ce:8e:3a:b2:56:93:28:1d:5e:53:9b:a7:b6:9f:e9:d9:ac:48:
ef:a2:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:05:43 2026 by rpki-client