
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
File: 007561fe-4b04-417a-b423-349b8b4b047d.cer (raw, json)
Hash identifier: exeNBXWxEJS7wGMWZ7n9XJ95IWyFQ1nljW/XgbA2RZY=
Subject key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DDE7E307FE543B400779CE280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 18 May 2026 00:45:17 +0000
Certificate not after: Sun 20 Aug 2028 00:45:17 +0000
Subordinate resources: AS: 19651
IP: 23.168.8.0/24
IP: 192.40.30.0/23
IP: 2602:f9ec::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:7e:30:7f:e5:43:b4:00:77:9c:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 18 00:45:17 2026 GMT
Not After : Aug 20 00:45:17 2028 GMT
Subject: CN=007561fe-4b04-417a-b423-349b8b4b047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:25:70:d5:66:d0:74:2e:81:3c:ce:a2:45:
93:cb:8c:a1:bf:93:aa:58:11:43:28:b2:0a:99:62:
11:3d:17:e4:98:80:0b:78:b7:36:24:e5:50:ac:eb:
0e:cd:01:05:44:cd:c3:2c:93:c9:78:1e:6f:d6:d3:
22:b7:34:fc:23:b9:98:94:c4:26:d1:ff:e6:2b:94:
78:d0:2f:2c:de:fb:c8:a3:55:66:96:f8:4d:25:e1:
e1:d0:27:04:6f:71:01:ad:61:c7:8d:4c:22:74:94:
0a:4e:ee:40:cd:e2:53:61:e4:22:05:0a:6d:18:f5:
29:f5:4b:bc:d4:c9:28:aa:76:d1:8c:e4:13:74:ee:
64:2e:35:4f:cc:f8:a2:53:01:64:12:a9:41:05:e0:
0e:b2:ea:ac:aa:a9:33:19:fc:7e:27:d9:ca:e2:59:
43:74:33:59:ec:2e:ed:70:e6:2b:d4:78:3e:24:e7:
0e:14:78:4e:77:5f:c7:f9:6c:7e:d4:1a:87:75:25:
c6:28:cc:7f:f0:4b:86:82:ce:70:c9:cd:7e:9a:b9:
09:ef:06:ae:c9:6b:df:16:2d:06:02:2c:a7:1f:28:
bb:ad:15:8f:21:71:5b:b8:d6:37:1e:1c:b7:11:70:
97:90:e8:d6:2a:a2:d4:af:a6:fd:ca:59:a9:58:6a:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.8.0/24
192.40.30.0/23
IPv6:
2602:f9ec::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19651
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:2d:ed:76:fd:a8:7a:61:8c:3c:d6:2d:62:5e:37:42:81:fb:
4c:d8:81:aa:d4:e6:4e:65:48:18:56:eb:7c:65:8e:07:c1:29:
4a:b3:29:5d:12:63:9a:b4:7f:a0:f0:1b:9d:28:dc:8f:f6:87:
f8:cb:6d:22:e2:79:20:73:4d:43:23:12:94:10:5e:02:0a:dc:
3b:15:ec:b2:6f:a5:44:7a:59:f5:08:35:57:a0:0e:4d:be:1a:
f2:02:47:06:47:1a:a8:92:d1:00:c1:bf:a3:05:fc:63:02:31:
68:05:03:61:33:9c:ca:6c:d2:10:09:53:34:f6:b7:d7:c4:ec:
7e:40:2d:68:1f:22:4b:22:ef:e8:82:13:40:2f:0d:18:8e:c3:
48:1d:87:a5:51:f8:fe:e0:c5:b8:c4:7c:e8:3f:00:d1:56:4c:
3f:46:c4:84:98:d9:2a:3b:9b:59:61:33:9d:02:c4:0b:d3:0c:
74:e8:9a:c3:ec:19:a3:ba:75:d5:bb:0c:0f:f8:94:c2:c7:d3:
ea:bd:67:b0:d0:02:ca:6c:5c:c1:f3:ec:b6:ad:70:7c:4a:c4:
d6:e3:d6:13:cc:2e:f1:2f:90:bc:16:b5:0f:98:aa:3d:e5:8b:
14:ae:c6:e8:6c:40:a7:8c:79:a2:cd:f0:1d:91:d2:32:91:06:
b2:bd:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:56 2026 by rpki-client