
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer
File: 6457bd98-4cd5-4766-a190-844b93a354f2.cer (raw, json)
Hash identifier: Mk/leEFyTbRKXWH6zSUw2MfR4wIWgECqesB5yR+yn9s=
Subject key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E23D2209CB9FBEDE39A919980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 11 Jun 2026 20:45:11 +0000
Certificate not after: Wed 13 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 46088
IP: 23.166.232.0/24
IP: 67.209.160.0/20
IP: 2602:f9da::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:23:d2:20:9c:b9:fb:ed:e3:9a:91:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 11 20:45:11 2026 GMT
Not After : Sep 13 20:45:11 2028 GMT
Subject: CN=6457bd98-4cd5-4766-a190-844b93a354f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:ad:5c:d8:85:87:4a:45:4f:2b:f2:90:0f:
56:f6:3a:75:86:f4:6f:f5:11:8b:2d:b8:ac:4a:5a:
21:3f:9b:1c:c5:98:29:82:35:07:7f:3c:cd:24:23:
72:81:13:d1:4a:a2:56:b8:d9:4e:79:8f:36:fd:92:
1b:e4:d6:86:e2:e3:24:32:9b:f2:98:22:d5:27:d2:
61:4a:09:7e:b0:91:ae:50:86:6c:b0:82:e1:69:af:
a4:2e:67:37:61:b1:f2:23:97:3b:c4:36:7e:ac:fe:
26:f9:b5:42:37:38:34:a9:13:fc:a0:62:2a:d4:3b:
3c:aa:b1:f2:a7:14:73:03:52:96:a1:2a:8b:20:0a:
ce:9d:c6:a9:4b:0b:a6:23:1d:d5:a0:95:ac:9b:df:
c9:06:c5:6f:ed:b7:d6:ba:9e:04:69:63:97:fa:f1:
18:4b:ff:6c:fc:0b:20:ec:85:e3:a6:25:5c:e4:cd:
a0:e4:88:f3:b8:fb:5a:87:b0:12:bb:7e:11:c8:40:
0c:6c:f9:a4:0c:c4:4e:2b:1f:c6:42:c6:84:9f:48:
82:09:18:08:e5:dd:5b:3c:11:66:4b:9c:eb:41:d2:
9e:be:44:f8:18:61:55:12:ac:3c:ab:34:2c:56:d4:
a5:4e:6d:8b:62:30:cb:c0:4a:1d:cc:41:0f:7b:59:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.232.0/24
67.209.160.0/20
IPv6:
2602:f9da::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46088
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:31:1b:3b:0b:09:32:1d:e8:bb:c8:c8:b9:f1:9d:49:b8:70:
bf:b7:46:3e:81:a4:09:f2:a5:b1:64:df:4c:4b:97:8e:e8:0a:
fe:c3:5c:1f:5a:7e:01:1f:73:11:56:c0:28:1a:b6:e4:5c:7a:
4c:7d:91:6f:bc:b6:b2:33:91:07:c9:ad:9d:51:42:4d:f9:bb:
62:1f:81:7c:d6:f2:8a:52:f9:be:ee:0c:e3:25:2d:33:b2:03:
d3:22:e9:1c:b4:7d:90:68:95:4d:28:68:ef:39:98:94:08:89:
9b:f2:fd:5e:0f:ea:01:3c:70:3c:b7:63:d1:94:95:de:15:4d:
b3:cd:98:4a:4f:a7:10:35:78:96:a1:e3:6d:ef:89:0d:e2:e7:
9a:a1:eb:50:d5:f3:e1:8b:83:3d:30:7c:24:cd:42:df:a2:be:
71:56:80:94:1d:e9:0d:7a:bf:34:ed:e4:02:65:3a:b9:69:10:
86:ec:8f:c0:00:62:89:7e:f5:27:89:36:ee:5d:5f:b9:b8:b6:
6c:6a:c6:4d:4e:47:f3:e7:c3:f8:6b:16:b7:a4:21:d7:c0:97:
9c:b3:3e:65:80:ea:5d:0d:e0:d5:fc:74:b8:f3:7f:de:a8:8e:
bd:84:e5:b2:ae:9a:01:38:6b:2b:3b:94:f2:4e:ef:18:aa:1e:
26:39:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:06 2026 by rpki-client