
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json)
Hash identifier: xgaGUYQAJQ6Pha1+QRsnmJjUt2SUsqBm7O4JJ7LHqCo=
Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584D4F09E33D57A4453E19EE8A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Mar 2026 15:30:21 +0000
Certificate not after: Mon 17 Jan 2028 01:45:23 +0000
Subordinate resources: AS: 14399
AS: 20376
AS: 27425
AS: 397050
IP: 64.32.38.0/23
IP: 104.36.88.0/22
IP: 162.213.164.0/22
IP: 162.250.204.0/22
IP: 168.149.192.0/19
IP: 198.203.204.0/23
IP: 198.241.49.0/24
IP: 198.241.62.0/24
IP: 199.45.168.0/21
IP: 204.9.24.0/22
IP: 204.107.216.0/24
IP: 204.144.152.0/21
IP: 207.178.96.0/19
IP: 209.137.196.0 -- 209.137.201.255
IP: 209.137.203.0 -- 209.137.207.255
IP: 209.137.209.0 -- 209.137.219.255
IP: 209.137.222.0/23
IP: 213.170.146.0/24
IP: 2606:2600::/28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4f:09:e3:3d:57:a4:45:3e:19:ee:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Mar 27 15:30:21 2026 GMT
Not After : Jan 17 01:45:23 2028 GMT
Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95:
81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b:
39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc:
91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30:
58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b:
dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99:
54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7:
70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88:
4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f:
c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47:
03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41:
3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4:
34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77:
6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b:
70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1:
a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52:
8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.32.38.0/23
104.36.88.0/22
162.213.164.0/22
162.250.204.0/22
168.149.192.0/19
198.203.204.0/23
198.241.49.0/24
198.241.62.0/24
199.45.168.0/21
204.9.24.0/22
204.107.216.0/24
204.144.152.0/21
207.178.96.0/19
209.137.196.0-209.137.201.255
209.137.203.0-209.137.207.255
209.137.209.0-209.137.219.255
209.137.222.0/23
213.170.146.0/24
IPv6:
2606:2600::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14399
20376
27425
397050
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:ac:ee:a4:da:11:0d:6a:ab:40:7e:f0:14:9f:c8:dc:f8:ce:
54:d4:1d:8a:2a:b3:ff:00:80:bf:25:b9:fc:24:58:fc:7a:40:
80:6b:84:1a:21:21:7c:d3:32:22:bb:50:7a:8e:c7:2f:86:e8:
9f:9b:2f:c1:33:16:9e:a5:09:76:2d:17:4c:e8:5d:2e:05:e1:
b1:97:4b:5c:db:d5:20:0a:31:4e:20:ba:27:66:b0:25:c7:15:
06:b3:db:4e:6d:0c:26:eb:b4:4c:a3:7b:d5:84:5a:bf:57:b5:
4b:d3:59:fd:30:83:4f:b0:00:a3:44:29:7d:ac:7e:9a:0b:1e:
80:2d:9b:bb:bc:2a:fd:c6:9d:f4:b2:aa:b1:74:d2:59:4b:7d:
f7:c8:66:99:c5:a0:40:5d:8f:6e:dd:21:10:46:7e:a6:d9:6e:
35:a9:06:20:90:19:47:7f:7c:35:69:9c:08:93:99:56:bf:b6:
a8:a0:88:b2:46:5b:45:7a:fe:40:e2:b0:f8:82:48:6a:22:5d:
b1:ce:1a:57:0a:10:bd:a0:72:34:56:c1:18:69:9b:2e:03:32:
3f:65:be:91:87:d3:6e:2e:2a:7b:24:1d:f3:55:1e:53:d0:86:
6e:79:ce:27:af:2a:e8:b4:a2:d5:85:98:1c:f3:d3:ca:f1:bf:
bc:90:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:59:14 2026 by rpki-client