
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer
File: 7e4fb68f-edad-45a2-98d4-e937526bfa31.cer (raw, json)
Hash identifier: pV8w5r68cULqso2Q2GGyVS7tBFqhH5Msrp+xJqgtj4U=
Subject key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584F7CEE83156E028CC04E9F2BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Oct 2026 11:36:15 +0000
Certificate not after: Sun 30 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 956 -- 957
AS: 981
IP: 23.153.48.0/24
IP: 2605:ac40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7c:ee:83:15:6e:02:8c:c0:4e:9f:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Oct 13 11:36:15 2026 GMT
Not After : Jul 30 12:45:18 2028 GMT
Subject: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:aa:41:bb:f7:7b:5b:6d:70:59:bf:71:72:
49:f4:67:86:b7:25:88:85:57:7c:2d:f2:b3:13:ed:
d0:2f:23:4c:1e:43:37:a0:7f:22:8c:7f:06:9b:03:
c3:d0:a2:d9:17:84:2b:25:63:31:35:20:23:3e:87:
43:db:d8:93:17:c0:69:1c:b4:0f:9a:4b:15:56:71:
7a:78:5a:11:4a:d3:0c:6a:dd:fe:e4:57:3c:c0:27:
19:81:2f:30:a0:86:8f:d3:82:a4:f8:93:7a:33:44:
d5:67:0a:f2:b9:53:d2:64:0a:df:81:aa:86:82:43:
e4:ef:46:b5:d0:58:fc:ed:d2:18:15:94:91:da:e9:
b6:ec:c0:74:70:e4:e0:55:7c:10:88:e2:1e:c0:5c:
1c:43:a6:3a:4f:cc:b0:5a:54:a6:e5:8e:02:15:3b:
b3:75:9f:cb:ca:ab:19:c3:0d:7f:8f:23:20:c9:9d:
52:95:d4:fe:74:f8:7e:11:f9:57:de:88:99:4b:83:
eb:0a:83:08:75:df:15:e5:7c:39:63:32:09:5f:c3:
9d:99:81:79:17:06:33:98:8f:fd:0c:15:2c:0c:4c:
7f:3d:7c:0b:de:db:36:66:3e:e1:57:8f:94:b0:93:
fd:15:62:fb:4a:18:9d:3b:09:0a:1a:14:65:30:fa:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.48.0/24
IPv6:
2605:ac40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
956-957
981
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:9c:4b:6e:c2:22:71:b5:0b:6b:ff:3f:f8:5f:6c:3b:7e:5a:
92:0e:65:09:96:51:88:b3:bc:69:68:75:c3:6a:1a:b7:b8:2a:
10:7e:72:10:c5:3c:92:86:59:52:62:1b:2b:9b:3e:5e:59:1e:
d8:3e:d8:7c:ae:71:5e:90:38:99:85:37:73:d9:c9:cf:29:52:
58:67:53:f5:b8:6b:99:6c:af:32:a6:6e:86:96:50:cd:45:b6:
bf:fc:be:2c:82:7c:56:7d:31:7d:ce:5c:47:9b:68:72:9b:34:
10:72:8e:94:55:d2:83:ca:cd:fa:b2:16:64:85:c9:4c:5c:0d:
3a:57:46:a4:c8:d8:9d:98:49:f2:df:37:39:36:4e:ab:d2:bb:
24:0b:c5:45:0a:9f:23:93:51:04:15:73:0c:12:ab:7a:53:f4:
da:66:c1:57:b3:7b:91:0c:fa:d3:ff:42:4e:a5:c9:89:27:27:
c7:d5:34:75:35:f1:9a:68:08:3b:04:89:73:2f:64:14:c7:c1:
a7:39:91:fb:4e:82:a1:53:13:28:4e:ff:83:33:b4:cc:f7:bc:
2f:6d:d8:0d:f0:c0:2a:2f:e1:43:c3:6a:62:ab:1c:12:76:88:
88:dd:7a:fb:c1:e4:a9:e9:f9:1d:18:31:54:cb:d7:f8:8a:68:
58:f8:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:51:09 2026 by rpki-client