
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/795496e8-5f2a-4b5c-9638-a00c7acb5044.cer
File: 795496e8-5f2a-4b5c-9638-a00c7acb5044.cer (raw, json)
Hash identifier: 6gwZGbQiwrxFg4vW9DzmwPJQpWEyKDuBJwNWQX8JqHA=
Subject key identifier: 6B:CA:BB:B6:5A:F8:59:E0:A7:C5:56:A4:EE:69:95:07:74:9F:C5:5B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D63A81733A391E8E86AFF5200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/795496e8-5f2a-4b5c-9638-a00c7acb5044/795496e8-5f2a-4b5c-9638-a00c7acb5044.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/795496e8-5f2a-4b5c-9638-a00c7acb5044/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 04 Apr 2026 00:45:17 +0000
Certificate not after: Fri 07 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 396984
IP: 23.148.96.0/24
IP: 161.199.119.0/24
IP: 216.120.162.0/24
IP: 2602:fe46::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:63:a8:17:33:a3:91:e8:e8:6a:ff:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 4 00:45:17 2026 GMT
Not After : Jul 7 00:45:17 2028 GMT
Subject: CN=795496e8-5f2a-4b5c-9638-a00c7acb5044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:92:8e:13:1e:23:2f:1b:fc:4c:30:7d:80:
5e:a5:5a:c4:f4:ba:bb:cf:d4:ba:9a:ab:ff:20:44:
a9:93:b6:8a:fa:ae:16:4f:02:39:4e:e9:a5:6e:8a:
67:34:09:c4:55:bb:36:de:85:aa:fa:c0:5f:d6:f9:
c7:64:1c:0c:af:4d:91:8e:d6:19:76:2a:38:77:ed:
af:ab:40:3e:42:14:4d:18:10:cf:25:ec:c5:80:23:
61:5c:ff:2c:a9:7b:f9:3f:8c:56:8b:2f:9c:1f:a2:
30:7a:0d:87:0e:23:7d:fe:a4:41:89:22:fb:94:9d:
69:14:c3:31:b2:fc:6a:e9:44:ce:7a:9c:4f:22:4a:
5f:7f:ee:4d:de:6a:a4:e4:d6:e8:a8:43:0d:ff:8d:
19:76:27:00:4a:5f:ec:19:15:13:56:af:91:4c:75:
a7:0c:02:40:b3:8b:80:2a:15:c7:66:5c:41:86:5f:
cd:55:ef:0e:18:e8:e4:de:3a:49:f3:ae:96:68:bf:
ab:b4:ce:b7:f7:7c:ff:22:3c:2e:a1:c1:b1:ce:f8:
25:50:6e:ef:46:da:4b:a7:bc:98:db:43:6d:8e:2d:
a3:ef:1a:ad:31:3f:c4:cf:60:3b:51:3d:f5:8e:4f:
78:43:05:2f:f4:87:63:24:61:ec:62:b2:1c:f7:8c:
69:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:BB:B6:5A:F8:59:E0:A7:C5:56:A4:EE:69:95:07:74:9F:C5:5B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/795496e8-5f2a-4b5c-9638-a00c7acb5044/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/795496e8-5f2a-4b5c-9638-a00c7acb5044/795496e8-5f2a-4b5c-9638-a00c7acb5044.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.96.0/24
161.199.119.0/24
216.120.162.0/24
IPv6:
2602:fe46::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396984
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d4:01:bb:d4:27:2c:6e:68:51:47:05:98:5e:9b:44:71:ec:
25:e5:58:7e:5b:67:e4:47:7a:fe:76:5e:fa:db:32:1b:e2:a3:
ff:bf:78:62:ae:95:0b:09:15:1a:b1:40:c7:64:7f:13:0c:ff:
d3:14:e9:bc:0b:fe:1d:73:a2:5c:05:97:dd:22:f2:f2:f9:3d:
26:cc:bb:d6:de:d2:ee:9e:07:49:bc:6c:a1:b0:f1:f0:5e:5d:
e9:ee:7a:e9:43:82:34:d4:7e:3e:64:7a:4c:75:3b:ef:ce:ca:
18:e5:2f:cd:20:8e:03:af:82:6c:f1:42:79:58:bc:05:1f:28:
ec:32:16:9a:81:6a:55:94:96:99:f5:8c:ce:c1:cb:f1:6e:82:
ac:10:06:9e:bd:35:94:ee:67:f0:03:ea:72:c0:af:62:47:91:
9e:29:fa:19:ea:b2:f4:76:dc:65:b2:3c:0e:2d:4c:cc:42:60:
e0:4f:85:77:11:8a:10:7c:bc:ae:ec:a2:8b:65:47:42:f9:1f:
8b:7a:96:92:36:44:92:9f:6c:e2:79:b3:a9:8d:98:e5:2e:04:
8f:1a:bf:30:39:83:22:fa:ac:89:41:b5:b2:30:50:60:75:bf:
82:32:90:d6:ee:c1:27:65:5a:d9:6f:de:f8:be:00:cf:42:e5:
34:d3:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:55 2026 by rpki-client