
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
File: 8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer (raw, json)
Hash identifier: eAzmMqNWFAffK6pfMegjH88lafNLlYmCk7ihqwVouvM=
Subject key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D75CD8A9A6053B688A16E83E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Apr 2026 12:45:17 +0000
Certificate not after: Thu 13 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 40321
IP: 206.53.4.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:cd:8a:9a:60:53:b6:88:a1:6e:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 10 12:45:17 2026 GMT
Not After : Jul 13 12:45:17 2028 GMT
Subject: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:21:3d:4e:d5:f3:ec:52:12:10:d3:73:95:
de:c2:b2:2f:c8:b6:21:16:43:4a:f9:51:56:06:3a:
de:f5:7d:33:57:a0:f1:f7:9c:e2:5b:a7:c9:70:f2:
89:c5:63:02:c2:19:14:57:c7:b7:8e:0b:41:90:8f:
71:0b:a8:dd:65:d6:cf:38:ff:15:f6:a9:02:46:34:
b0:52:6e:bb:9d:0a:88:ab:ac:e5:95:6a:97:a2:d6:
c9:de:82:da:67:13:f9:14:16:43:aa:3f:ab:35:e8:
5f:00:4b:b8:ac:0d:45:01:8e:9d:4e:56:04:26:a2:
b3:e1:3f:39:d0:73:06:9c:9b:5f:eb:d9:0c:a1:b6:
3b:1c:33:40:f5:35:d1:3e:54:82:3b:0a:4a:c8:fa:
ce:ef:10:54:72:74:15:10:7a:f9:1d:6f:c8:09:f9:
bb:49:60:56:d3:04:7d:3d:29:43:95:1c:64:9e:8e:
19:42:ca:4e:13:d8:47:9b:62:ac:f2:7c:31:b2:93:
47:0d:7b:87:fa:d1:58:58:fd:11:23:f4:4a:60:40:
89:25:a7:5c:e7:f0:68:c3:0e:01:cf:6e:a9:bf:22:
ac:a9:49:83:fb:c0:f4:bc:57:99:38:fb:f3:38:1c:
aa:c3:60:9c:37:7f:5c:d5:cb:fd:ea:1b:74:a8:2c:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.4.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40321
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:f8:e9:26:23:07:86:b9:34:fc:54:3c:80:27:b9:20:fe:06:
26:f3:5c:14:ed:50:8f:18:9f:70:34:34:5b:f8:2c:bc:d5:06:
01:e0:20:91:36:e2:be:7a:cf:76:54:27:db:65:48:96:69:5b:
75:54:39:b8:b8:62:06:c6:5e:00:54:19:73:59:58:69:f9:bd:
66:9a:24:a9:1b:c5:14:18:84:62:8f:4c:43:98:11:be:41:6d:
65:d8:05:65:29:5e:40:69:e2:ed:dc:f0:b8:c8:e9:21:7f:7d:
09:2f:6d:4e:cf:88:23:b7:e7:f5:e6:92:6f:ff:cc:4e:a0:19:
d3:a3:dd:69:31:49:72:9f:49:0b:1d:df:8a:7f:ec:1e:6f:a5:
a3:58:13:83:02:95:30:8a:df:04:58:6b:c8:8e:4f:da:ec:56:
ad:22:03:d0:16:ca:cd:43:14:63:35:9f:36:54:fc:08:34:4c:
3a:b3:e3:da:9b:c9:9d:6b:a6:61:c5:bf:05:0e:36:46:76:21:
bd:60:b6:f4:d3:e5:48:a5:3d:5a:66:cf:66:50:59:c1:07:3a:
a9:d5:ce:6e:4f:ea:b9:32:4d:72:39:b6:1b:ff:f7:f1:fd:ed:
2e:e9:9a:ef:76:c7:1e:06:39:69:2c:bd:8a:a3:aa:58:7c:e6:
48:84:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:23 2026 by rpki-client