
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer (raw, json)
Hash identifier: wMPpGJHxyhLQV8mQJZfFPFEE3CO2zBw53bmNr/WXI6s=
Subject key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584D00AAA25F12C0FC8E65C8DB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Feb 2026 13:45:22 +0000
Certificate not after: Thu 01 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 63093
IP: 137.22.224.0/19
IP: 223.165.112.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:aa:a2:5f:12:c0:fc:8e:65:c8:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Feb 27 13:45:22 2026 GMT
Not After : Jun 1 12:45:22 2028 GMT
Subject: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:86:0c:cc:c4:0d:d3:d9:e3:f0:0f:35:e9:
dd:2e:b4:d5:17:c8:ff:36:4b:8f:e3:75:c1:7d:86:
e8:4f:ee:a5:61:08:02:56:e4:dd:71:df:a8:39:14:
0b:e1:c1:af:e3:43:e1:11:99:75:04:d1:d1:2c:54:
90:94:03:f0:15:8a:ed:7a:51:9a:b6:0d:26:8a:76:
5c:23:ca:c5:f9:f8:d5:0d:8c:bc:71:13:ea:af:44:
41:7f:0a:7f:08:61:93:c4:b5:34:39:e3:f9:6b:d0:
2a:1b:e0:a7:20:3f:ef:07:2e:44:8c:8f:25:a1:8d:
09:b1:21:6f:c9:bf:db:9c:b3:f4:4a:b5:c1:eb:c8:
a1:ba:c5:24:a4:ad:7c:22:ea:f7:39:80:b1:56:e3:
e4:e2:79:fd:f8:23:4a:1b:b3:bf:ca:e8:a3:87:16:
f6:2f:12:2d:30:70:f5:77:22:dd:2e:4b:d9:16:0a:
36:e8:f2:76:49:43:83:a8:bc:ff:9e:0c:04:5d:3f:
0d:9a:f4:57:14:ae:f0:81:74:8d:05:78:d7:cd:07:
ed:42:ce:e0:ca:57:53:2e:bc:91:28:8b:0a:02:ff:
18:5a:3d:99:56:44:79:52:c2:48:94:ee:16:04:46:
7f:ee:5b:70:f3:b0:db:8f:73:dc:78:70:ad:9c:c1:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
137.22.224.0/19
223.165.112.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63093
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:d3:d7:d8:2a:6e:7a:34:bb:63:eb:fe:58:9a:a8:29:f7:c3:
5f:63:27:32:92:e5:22:fe:7d:e3:a9:ce:e1:e7:27:ef:73:3d:
28:cb:0a:97:86:d8:c7:c0:c3:6d:6c:17:22:ee:75:61:f8:82:
68:98:6a:47:87:94:28:bf:a4:05:ec:1c:d4:d6:ba:5d:c6:b0:
5b:5c:d0:b8:a4:fd:a7:3f:7c:45:95:ff:fa:d4:4f:5c:de:32:
38:9a:dc:c9:5d:54:f2:77:5c:48:f6:ff:76:f5:82:1e:13:19:
40:50:26:2f:c6:ff:f2:20:98:c2:9d:b6:2e:13:40:7f:cd:32:
de:1a:18:71:98:29:67:68:f7:99:13:92:fe:7e:5d:c8:9c:86:
6e:1b:d1:39:f3:58:f9:73:cc:d0:79:43:c2:9e:5d:5d:13:36:
a5:ee:43:e4:9a:16:ae:d6:03:f3:a7:eb:fa:2a:23:ee:ae:4f:
3d:49:a4:76:2d:fc:af:2b:47:d8:62:9d:81:05:c9:6b:43:17:
c3:6b:9b:3d:ec:9b:da:ff:20:75:f7:92:d5:02:48:6b:cc:6f:
42:9a:b3:35:4d:27:d6:39:cf:a7:2d:67:11:08:64:51:28:da:
5c:0b:fe:98:53:53:f1:30:90:39:6f:5b:09:f7:1e:6f:d9:a4:
cd:10:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:32 2026 by rpki-client