
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
File: 4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json)
Hash identifier: cJrDoxeZIpEQ27xyeh7tJ32xOozikcRaxL6jIZStHNw=
Subject key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584E25836C4A5675523292FEAD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 12 Jun 2026 11:18:13 +0000
Certificate not after: Mon 17 Jan 2028 01:45:23 +0000
Subordinate resources: AS: 14399
AS: 20376
AS: 27425
AS: 397050
IP: 64.32.38.0/23
IP: 66.242.50.0/23
IP: 104.36.88.0/22
IP: 162.213.164.0/22
IP: 162.250.204.0/22
IP: 168.149.192.0/19
IP: 198.203.204.0/23
IP: 198.241.49.0/24
IP: 198.241.62.0/24
IP: 199.45.168.0/21
IP: 204.9.24.0/22
IP: 204.107.216.0/24
IP: 204.144.152.0/21
IP: 207.178.96.0/19
IP: 209.137.196.0 -- 209.137.201.255
IP: 209.137.203.0 -- 209.137.207.255
IP: 209.137.209.0 -- 209.137.219.255
IP: 209.137.222.0/23
IP: 213.170.146.0/24
IP: 2606:2600::/28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:83:6c:4a:56:75:52:32:92:fe:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jun 12 11:18:13 2026 GMT
Not After : Jan 17 01:45:23 2028 GMT
Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95:
81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b:
39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc:
91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30:
58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b:
dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99:
54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7:
70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88:
4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f:
c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47:
03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41:
3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4:
34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77:
6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b:
70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1:
a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52:
8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.32.38.0/23
66.242.50.0/23
104.36.88.0/22
162.213.164.0/22
162.250.204.0/22
168.149.192.0/19
198.203.204.0/23
198.241.49.0/24
198.241.62.0/24
199.45.168.0/21
204.9.24.0/22
204.107.216.0/24
204.144.152.0/21
207.178.96.0/19
209.137.196.0-209.137.201.255
209.137.203.0-209.137.207.255
209.137.209.0-209.137.219.255
209.137.222.0/23
213.170.146.0/24
IPv6:
2606:2600::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14399
20376
27425
397050
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:0a:be:06:44:dc:df:14:51:55:d0:e8:c9:c9:2e:c2:79:55:
fc:e2:72:e6:27:35:dd:b9:73:cb:4a:57:78:9e:04:ee:de:a7:
89:0c:e0:24:9f:8b:0c:46:15:c3:5b:36:b0:20:3e:03:28:84:
2a:e0:db:c2:b0:51:64:b2:8b:0b:bb:a9:d3:93:d0:68:2d:c9:
f2:c1:0d:81:f4:22:e5:e8:04:f5:17:7e:d4:cc:13:0c:76:93:
de:d2:3e:92:fb:35:ee:f7:f3:9c:82:ed:ad:98:72:15:1c:4c:
f0:fc:e1:19:25:d3:bb:b7:f1:5c:37:f1:e5:20:5e:23:af:94:
be:76:59:5a:90:98:12:ee:ef:73:3b:ff:c2:a0:55:ef:39:c9:
ee:be:a6:a6:ad:28:73:fe:fc:40:ee:28:11:e1:5e:82:c5:2e:
de:5c:17:d0:30:ea:bd:5f:b1:be:e9:ff:c9:e7:32:3e:ad:a2:
32:92:d9:91:6a:69:51:e2:1f:e8:77:f1:0e:a1:ff:64:cf:60:
30:74:1b:c9:63:b6:ac:8d:a2:f6:f3:ae:e9:60:41:07:fb:97:
89:1e:e5:35:0e:44:83:3e:f3:ec:69:e5:17:20:4f:14:ba:e1:
de:65:7f:35:f3:72:e4:b5:95:4e:1d:39:02:45:8a:3d:12:cb:
07:af:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:01:41 2026 by rpki-client