
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae.cer
File: 13f57bc2-46f7-4081-86db-6187bbb84dae.cer (raw, json)
Hash identifier: Zdc9n3qE5pjipfonHbRB7S1X+r2MUV+lkTaxBtm7olc=
Subject key identifier: 96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D60DD6807AAE07B48BF9C1D20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 03 Apr 2026 00:45:17 +0000
Certificate not after: Thu 06 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 54008
AS: 54046
AS: 399936
AS: 399994
IP: 23.187.208.0/23
IP: 45.41.232.0/24
IP: 2602:fc38::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:dd:68:07:aa:e0:7b:48:bf:9c:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 3 00:45:17 2026 GMT
Not After : Jul 6 00:45:17 2028 GMT
Subject: CN=13f57bc2-46f7-4081-86db-6187bbb84dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:07:cb:fa:18:bd:66:41:73:27:48:2f:e5:
6c:e9:8f:0c:6d:f9:03:15:7b:eb:c5:30:7f:6c:1d:
63:70:b6:53:d6:50:92:a1:9b:78:96:77:ed:48:b5:
23:fe:d3:57:08:c5:3e:bd:24:4b:b0:dd:d3:62:57:
56:fb:05:ae:3e:8d:3e:43:41:04:43:1d:62:9b:e5:
b6:d0:c2:ac:41:bf:b9:35:58:5a:33:7b:ff:4f:68:
e0:44:2a:d3:b9:ec:36:1d:b4:91:9d:31:cf:8a:98:
bd:fe:00:26:8f:29:1d:ec:8d:4e:14:8c:2c:04:69:
83:2e:83:de:01:00:3c:b7:67:68:3b:56:ed:ca:a9:
9a:5b:61:a5:3e:b6:2c:44:2a:69:63:e4:38:1c:f0:
cc:ce:49:db:00:45:e3:8a:9f:20:a6:40:bb:b8:d7:
4e:52:db:78:e8:d6:31:fc:71:97:99:15:ba:9a:20:
0b:c8:b6:14:2e:aa:17:61:01:31:71:8f:eb:a1:f7:
03:91:7b:c5:99:c6:c1:e3:69:c7:a8:ae:6f:de:42:
85:f3:31:d9:0f:76:c6:1d:9d:ad:9c:61:12:fa:d6:
f8:79:dd:24:cb:3e:66:fe:87:bd:98:64:8d:1b:36:
66:35:7e:52:40:2f:b2:89:dd:5c:3c:48:4f:da:e1:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:31:84:41:1B:A0:C3:11:73:9D:2B:82:0C:4F:83:85:0D:DC:68
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/13f57bc2-46f7-4081-86db-6187bbb84dae/13f57bc2-46f7-4081-86db-6187bbb84dae.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.208.0/23
45.41.232.0/24
IPv6:
2602:fc38::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54008
54046
399936
399994
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:db:0e:56:9b:fd:18:b2:19:1c:bb:a2:75:5c:e6:8f:fd:ae:
fc:6e:f5:3d:0a:bd:91:d2:10:ee:19:30:49:01:29:fa:dc:70:
6a:fe:b3:b1:dd:7f:ce:19:8a:ea:f7:9d:48:27:ee:72:e3:dd:
d3:33:50:7b:94:13:17:33:bc:e5:c6:fd:5d:c9:93:19:79:e9:
20:dd:36:f5:50:dd:dc:35:e7:c4:56:ed:88:10:0b:81:b9:b0:
b8:40:56:77:eb:ab:1e:63:0c:08:5e:31:b3:1a:fa:19:39:df:
78:2e:ca:9a:bb:44:52:14:03:04:fc:c4:c0:1e:72:72:0a:72:
0c:d1:4b:0a:41:9b:ab:c3:ba:b3:5e:6b:af:65:a1:1a:2a:77:
91:d5:31:dc:6d:62:f8:ab:b3:6a:00:89:af:17:01:45:1c:6e:
f9:3c:28:6e:d5:f5:f6:4b:62:ca:8d:91:68:97:e8:ef:f9:62:
f0:b9:c8:31:9d:62:31:b0:16:ff:85:68:a1:64:2c:2e:d1:b7:
f6:18:28:0d:f1:8b:cd:be:18:1d:f2:77:8c:b8:66:0d:83:71:
03:0b:a8:7a:c5:ff:f0:a7:1e:e2:86:59:86:c3:ab:15:be:cf:
d0:82:a7:11:11:7f:79:d8:0b:d7:a0:5c:39:3e:86:27:8b:e9:
07:cc:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:33 2026 by rpki-client