
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
File: 95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer (raw, json)
Hash identifier: 5VY5d5LQotmf6IjejjuSAnGptSSyrfmpSRMaQFU/iGw=
Subject key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F4328584EA5A2F03B2AC60C0915A88A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 28 Jul 2026 08:45:11 +0000
Certificate not after: Mon 30 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 22018
IP: 69.64.96.0/20
IP: 209.25.208.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:a2:f0:3b:2a:c6:0c:09:15:a8:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Jul 28 08:45:11 2026 GMT
Not After : Oct 30 08:45:11 2028 GMT
Subject: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:1b:2b:95:46:73:d9:f1:38:45:d7:c4:7d:
5b:7b:a5:19:34:c0:7c:8e:53:65:86:d9:89:c5:4b:
72:8e:d7:33:61:a0:c3:fc:87:b5:15:e5:ea:e6:73:
31:20:bd:d6:e2:48:12:f8:96:91:79:0c:80:2f:3b:
5a:28:3c:27:18:ca:d6:2d:26:6e:9a:c8:79:7d:74:
bd:e9:28:c5:d7:78:13:d0:ca:8d:10:20:a2:5d:b4:
0c:33:df:b1:f8:64:18:55:70:3c:c1:3a:1d:30:07:
a5:2b:14:24:ac:ba:b0:e9:27:93:c2:d7:c8:3e:d2:
ab:3b:ce:67:04:cc:13:95:55:07:5e:40:17:2b:b2:
fb:37:a0:da:f9:d2:0d:75:4f:5d:23:a8:95:90:24:
7b:c8:e8:14:4f:8b:2f:86:5e:a9:8a:da:23:db:f0:
2b:de:33:a0:cd:b4:d6:c3:0d:4d:36:ff:99:0a:4c:
02:e5:52:51:06:fd:58:42:3e:4e:f9:23:17:2e:dc:
33:63:7e:a6:c1:29:d1:04:0a:9a:27:5d:1a:af:8b:
b9:94:bb:c6:bb:86:86:63:c5:2d:d4:b0:6e:ab:7e:
a7:da:c4:37:5b:b9:74:25:b5:f6:c7:dc:cb:1d:03:
44:fa:2d:88:de:24:a7:2c:63:67:31:24:9d:b9:9f:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.96.0/20
209.25.208.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22018
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:0c:6f:ba:cd:c3:d5:f0:dd:cf:45:35:c9:0b:48:39:a2:56:
41:ed:76:3b:98:ea:ed:cf:d5:94:05:3a:f6:76:13:a6:2d:07:
9a:a5:84:5b:af:06:b2:62:dc:bb:f2:31:90:9c:85:a5:b1:e3:
fc:d4:c7:c8:c8:b7:4d:95:0c:ab:5c:e3:9c:57:15:16:0d:65:
83:23:e1:06:0b:12:b1:4a:45:60:1a:1d:56:59:2b:34:32:20:
a6:d1:eb:5f:a5:be:16:79:04:b2:74:d2:1c:d8:1c:27:ef:9e:
50:99:b7:e9:66:0b:a6:97:40:79:50:fd:7e:2d:ae:da:e0:d2:
53:af:3d:f9:6e:f3:3e:f7:bb:fc:4b:e0:fb:b6:54:f3:13:a9:
14:af:9e:d8:f2:80:ae:89:a1:0f:d1:16:84:e9:be:a2:e1:08:
5e:46:2e:23:49:a3:3c:f4:ad:a4:a7:e8:f0:9e:93:af:d8:5d:
5e:2b:4c:2b:e2:b9:66:fc:6f:44:3b:68:13:81:6e:93:c6:96:
77:8a:57:6b:70:85:b7:55:df:87:93:de:f7:61:8e:7e:f1:b2:
a3:50:db:4b:00:a6:13:88:5e:9f:d7:4c:bd:2a:95:f8:7e:00:
20:8f:76:37:d7:b8:54:5f:c6:9d:b3:13:cb:36:24:02:03:d2:
f6:28:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:22 2026 by rpki-client