
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer
File: 8cb64613-5b0d-4968-b601-e2f2cf053f18.cer (raw, json)
Hash identifier: F9OAr5pj8QvpuYKk+FI/HaCpA4NIH8unMZ9nE1ndufs=
Subject key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E14775F4CEDEE9B0AF5630180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 06 Jun 2026 08:45:12 +0000
Certificate not after: Fri 08 Sep 2028 08:45:12 +0000
Subordinate resources: IP: 192.146.156.0/24
IP: 198.162.20.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:14:77:5f:4c:ed:ee:9b:0a:f5:63:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 6 08:45:12 2026 GMT
Not After : Sep 8 08:45:12 2028 GMT
Subject: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:d3:8e:03:2e:38:ea:c0:72:80:28:1a:6e:
22:d5:8a:5e:87:91:03:e8:51:48:cc:41:c7:68:b5:
51:04:f5:ec:93:57:cd:5f:47:7e:6c:df:15:35:2b:
5e:90:0f:5f:5b:2f:25:94:b2:45:4e:cb:fd:88:89:
14:1c:7c:8e:74:c0:e1:e4:cb:f7:8f:6a:b9:e2:87:
eb:11:56:b4:a8:96:ea:01:74:8c:63:9a:f1:7c:23:
1c:ea:87:9c:d9:c5:98:a8:26:55:79:e7:77:4c:e6:
49:ca:50:c5:3b:f0:a2:76:52:4f:ec:e2:95:f2:70:
8e:30:23:6c:63:04:79:05:c4:f1:01:3e:f2:67:12:
38:f4:a8:0d:51:bf:19:cf:c8:0e:12:6c:52:98:0d:
f5:d5:70:96:3d:39:fa:2c:17:b4:2d:37:41:81:66:
11:f6:4b:59:a7:ca:00:b2:e0:68:b4:67:65:20:dc:
c3:50:21:c4:4e:c6:8b:de:5b:be:aa:d2:5f:92:e7:
55:53:92:96:5a:ba:8b:c7:c0:91:31:df:05:7c:46:
8a:8e:1e:a8:22:77:b3:61:aa:33:ca:2a:fa:0e:b7:
d3:a0:4c:10:f2:13:12:29:bf:c5:0f:43:d5:47:55:
db:81:e8:ce:13:bc:10:c3:13:2a:05:2d:32:5b:73:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
192.146.156.0/24
198.162.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:90:1e:99:c9:83:84:09:04:a6:17:64:35:1f:19:92:18:63:
48:47:65:e8:75:4d:f0:16:2b:e0:0f:4c:d4:60:a4:31:3b:4c:
31:78:d3:66:22:97:94:1f:cd:7b:bc:ad:49:01:59:42:2b:be:
a4:11:ca:91:6a:b9:08:54:b6:c4:cf:d0:a4:25:6d:b3:75:eb:
07:8b:e0:eb:8c:c3:8c:11:63:cb:88:90:0b:ce:30:bb:3c:14:
64:f3:f6:85:22:06:2f:49:20:10:b0:7f:07:cf:94:8e:cd:0c:
eb:0b:72:b9:43:ad:4d:5f:81:e1:fc:35:e3:ea:89:60:23:b7:
f1:24:89:66:c1:3f:02:db:98:40:15:d9:fd:90:d9:1e:c3:69:
12:80:a1:ee:f5:78:df:34:d9:eb:82:64:84:a3:55:d4:fe:df:
0a:1f:9c:8f:0e:ba:33:0b:56:50:03:3d:39:a3:78:ed:4e:ce:
2c:7c:99:e8:51:a5:21:e9:1d:22:a9:5a:44:8f:b2:3e:90:3f:
40:1b:46:4b:1c:18:ae:56:10:0a:b0:2c:3a:ed:6d:c9:6c:32:
0a:8a:df:eb:10:76:ba:1b:8a:12:4f:7f:f4:f9:c1:48:fb:2d:
05:d3:6b:12:56:33:f9:12:4d:50:30:d4:7d:28:b3:af:7a:5f:
46:59:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:50 2026 by rpki-client