
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer
File: 23c8a875-2ccd-4122-812d-c7afe70035e6.cer (raw, json)
Hash identifier: k3ZsLqIU+7f8I8juF6Wg5BxOKsc1cizvZPzrHe9emUQ=
Subject key identifier: CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584EA00D91165B4DF6A349E66B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 26 Jul 2026 08:45:11 +0000
Certificate not after: Sat 28 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 27449
AS: 29958
IP: 216.75.96.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:0d:91:16:5b:4d:f6:a3:49:e6:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jul 26 08:45:11 2026 GMT
Not After : Oct 28 08:45:11 2028 GMT
Subject: CN=23c8a875-2ccd-4122-812d-c7afe70035e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:21:a5:07:8f:20:2e:be:64:3d:53:1d:0b:
71:ad:50:b6:a7:d0:f6:c7:52:95:14:a1:84:51:fb:
c1:24:49:6d:eb:91:b3:60:3e:ec:4c:3b:10:f5:5f:
f6:39:05:43:f6:a8:ad:fa:3b:46:28:dc:dd:a8:25:
46:bd:d1:59:63:09:ee:a9:54:2b:a1:db:96:50:0d:
13:15:fd:5b:92:ea:6f:b9:73:af:4a:da:34:22:ed:
1d:21:e0:fe:61:75:02:d9:df:a6:c4:3f:2c:90:1b:
5e:90:68:36:75:6e:29:86:16:7c:7f:45:44:aa:b9:
ee:70:87:63:ea:73:12:2e:55:39:0b:88:1a:f5:d0:
f7:3f:c7:19:18:f3:bf:9d:b8:f3:cf:13:4e:72:a2:
55:80:64:8f:d6:90:07:b9:f2:1f:de:38:5e:63:c4:
bc:36:e7:a1:8c:d6:51:40:35:31:84:82:e2:d9:87:
55:3e:d7:89:63:ca:70:a6:26:8b:3b:94:a9:5f:36:
88:a4:4a:4c:ab:85:e8:94:3e:41:40:ae:9a:e0:dd:
85:46:68:50:06:27:4f:68:50:01:ff:89:13:bc:f4:
d5:df:b1:29:7c:ff:67:70:1c:36:73:4d:9c:55:6b:
d3:ec:38:05:16:0d:eb:f2:dc:07:b1:74:88:f8:ec:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.75.96.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27449
29958
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:92:1f:04:fb:fc:8a:f5:ba:21:3e:e6:8b:39:b6:bb:f1:e6:
6c:5f:1d:c3:a1:c2:e4:3e:7e:2c:47:47:dd:0a:cb:67:66:e9:
d4:0c:b0:7d:21:26:4b:d0:54:62:3e:a0:2d:dc:1f:1b:4a:a6:
3d:14:e1:6d:43:9c:83:47:1f:ca:5f:40:bd:32:ad:f8:55:57:
7e:8f:d4:67:24:a6:7d:6a:9b:09:ea:71:ec:2d:21:07:80:ee:
00:11:50:e7:3d:c6:e8:35:8a:2c:13:1a:6c:eb:2f:2f:a2:ef:
64:68:e3:a8:af:3e:59:53:b3:57:f1:10:66:6e:e7:d4:b3:5e:
0a:ef:bb:c1:3b:4e:67:12:5d:48:9c:18:95:a1:31:e6:67:82:
d2:0c:83:b1:16:59:83:db:12:55:61:78:f3:51:91:ca:79:17:
a9:1c:99:e0:2b:e9:92:73:ad:bd:f1:a6:3e:9d:f7:97:fa:59:
21:2c:f3:ca:dd:58:a4:eb:1b:37:e9:a9:2f:6c:2f:8e:7b:61:
7e:a9:52:a6:b7:e1:08:14:6d:b8:56:6e:27:8a:39:9a:bd:b3:
49:5e:85:ec:af:57:2b:67:cc:1c:f6:25:72:bb:d2:ee:84:8e:
45:db:b9:72:30:c6:1b:24:de:b3:f4:63:2e:ec:65:99:01:fe:
4b:96:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:34 2026 by rpki-client