
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
File: cf35609e-0e1f-484a-af8f-815006d97f11.cer (raw, json)
Hash identifier: 8YovPTuOMTlTUwExFbuHOyc9Y4LuLWQ0IdcbcNpBlbI=
Subject key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584D7B62E9ABAE5B709098FF0000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 12 Apr 2026 12:45:18 +0000
Certificate not after: Sat 15 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 14694
AS: 393430
IP: 23.136.96.0/24
IP: 206.71.15.0/24
IP: 206.81.110.0/24
IP: 2001:504:93::/48
IP: 2602:fa5c::/40
IP: 2620:4e:2000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:62:e9:ab:ae:5b:70:90:98:ff:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Apr 12 12:45:18 2026 GMT
Not After : Jul 15 12:45:18 2028 GMT
Subject: CN=cf35609e-0e1f-484a-af8f-815006d97f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:be:f5:37:04:5f:d4:b6:d4:a4:71:8d:69:
97:55:69:28:9e:0f:3b:be:5d:2f:04:65:7d:69:29:
f2:18:be:2b:53:4a:43:c7:a6:16:ab:78:03:44:6e:
5d:d0:3a:dd:7a:59:c5:2c:77:d5:2c:3d:d7:4d:c3:
1d:41:cd:d1:5a:03:d4:9b:f8:d7:d9:9e:43:a3:ca:
d6:16:14:28:94:5a:74:fd:fb:21:6d:0e:96:1a:35:
95:6f:67:74:dd:bd:a2:84:5d:d4:af:60:82:79:da:
c1:48:db:34:80:a4:2a:4c:e9:ae:71:a8:33:29:fa:
43:3c:eb:5d:68:25:42:45:ae:07:af:84:dc:b6:e1:
5a:37:2d:29:51:76:b0:4e:5d:ba:c4:77:a8:cc:db:
ef:ef:c0:89:fe:8b:25:a4:93:2e:26:ba:52:6f:4a:
64:87:83:5a:1a:56:56:d4:2e:c2:3b:8c:fc:bd:1f:
74:a6:69:59:81:7d:f2:ec:62:74:c8:b3:75:eb:55:
c6:ce:6e:79:78:4e:2d:aa:bb:b0:c9:6f:b8:7d:38:
35:5a:30:29:89:95:d5:53:a7:09:90:2b:dd:0f:f2:
cb:b5:1d:ec:a8:7f:29:07:b6:a8:af:67:80:21:27:
8b:ff:1a:cd:ec:92:2b:41:ad:4f:38:44:b7:dd:03:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.96.0/24
206.71.15.0/24
206.81.110.0/24
IPv6:
2001:504:93::/48
2602:fa5c::/40
2620:4e:2000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14694
393430
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b2:38:43:cd:40:b2:45:ec:44:f1:d8:4e:98:b1:46:79:37:
c9:cf:b5:5b:30:48:08:82:a3:81:d1:cf:7f:99:b4:6f:e3:b9:
d0:90:91:a1:25:31:32:54:e1:f3:9d:88:b3:d9:51:74:2c:9b:
78:7d:e7:8f:34:ca:3c:c2:48:5a:a5:ca:6e:7a:37:a8:31:3c:
6c:51:7a:28:bc:ec:69:35:24:49:30:ef:15:a7:63:21:8e:e7:
ac:c4:7b:a3:02:17:3d:dd:05:67:54:49:aa:58:49:d2:9c:b4:
40:dd:61:4e:ad:9f:08:77:f6:da:86:75:c7:6e:ea:3b:6b:b7:
59:0f:08:68:25:b4:62:e8:fe:2c:10:d7:6f:56:a8:b9:40:36:
c8:f1:ce:45:42:3b:f2:f3:14:0d:37:7c:61:a2:c3:b7:0e:52:
3d:d5:f4:50:01:4e:e7:71:ab:ec:b7:9c:18:63:9f:d2:55:8a:
aa:85:12:03:7a:35:12:13:3d:ad:bc:41:46:bc:49:57:c2:be:
d5:b5:09:ca:9c:ec:27:1f:10:0d:e4:5b:24:2f:f3:86:a1:d9:
09:01:a1:76:21:b6:38:c5:11:b9:2e:5c:65:42:36:08:62:96:
9c:0f:10:c9:62:83:f7:cf:15:37:d0:6c:92:32:00:1d:1b:94:
6c:56:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:57:16 2026 by rpki-client