
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
File: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer (raw, json)
Hash identifier: pFshbOJmU18APG6gObZorlWS2Aj4/WrNk9zAX4+ek0Q=
Subject key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E094CA0AAF2C492AFC3A3C900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 02 Jun 2026 08:45:11 +0000
Certificate not after: Mon 04 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 11653
IP: 69.89.32.0/20
IP: 2602:faca::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:09:4c:a0:aa:f2:c4:92:af:c3:a3:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 2 08:45:11 2026 GMT
Not After : Sep 4 08:45:11 2028 GMT
Subject: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:a1:18:dd:4f:16:62:09:e9:b2:30:cf:74:
65:66:7e:25:bc:e7:ae:f7:68:94:93:95:92:9e:e1:
db:0f:5f:a4:24:a9:56:cf:45:f5:80:e6:86:5b:61:
94:af:19:48:31:cd:4e:a1:8a:3a:a2:d6:a7:a0:8a:
7a:c2:25:36:f6:c7:41:ed:51:8a:1e:3a:e4:23:18:
88:cb:2c:c1:33:ac:f3:55:a7:1d:7a:a3:f3:d5:23:
dc:60:c0:e3:91:7f:9c:16:10:64:ce:94:37:e1:1f:
7b:98:4d:0d:bf:84:44:68:f4:10:e9:74:ef:6f:da:
c1:ec:39:22:9a:b0:27:5b:f4:19:d5:4e:23:ac:64:
b8:80:db:7b:c6:04:38:70:6d:f7:c9:6c:1d:0c:61:
db:28:da:26:c7:1f:5b:53:00:eb:71:a6:e7:b6:cd:
84:ad:60:a0:95:72:a2:3a:69:c1:ff:a6:7e:01:f5:
66:20:73:ac:69:2c:62:bd:83:50:e8:92:3c:75:7e:
f2:37:78:81:16:79:74:a7:38:6c:b4:f6:f4:a5:3d:
29:e5:30:af:2f:87:76:ec:93:38:01:23:8e:08:d4:
ca:97:ac:03:67:4a:39:ba:e8:26:9d:d0:9b:54:a7:
b3:0e:dc:c5:9b:3e:01:0e:8c:83:71:ed:b4:4a:d3:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.32.0/20
IPv6:
2602:faca::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11653
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:cb:8e:7c:68:6c:28:92:38:ef:72:c5:92:b2:bf:58:b6:41:
e4:fd:60:49:d4:06:96:1a:c4:55:58:7b:df:8d:be:cf:e3:ea:
05:d5:c0:bd:e6:62:08:29:0e:71:4d:f1:b9:ee:91:17:10:bf:
26:90:92:dc:17:5e:3b:e5:8d:c7:da:c1:ee:34:69:34:71:37:
ef:0b:93:19:15:11:09:5f:f1:e7:cb:43:0f:32:7a:e2:c4:ca:
b9:ab:32:15:23:6b:f9:35:6a:d9:8d:40:a9:b7:ec:38:33:df:
7f:20:43:2d:db:3e:3e:d1:7f:e5:f1:9f:fa:96:8b:4e:fa:90:
cf:02:81:1c:3e:8a:1a:18:c5:1f:d2:c1:1a:62:9e:b9:87:1e:
db:28:a0:2b:d8:6e:ba:76:2d:2a:17:1f:36:ca:ef:50:4a:8e:
95:fc:b2:a3:d4:31:8b:69:96:36:2f:e0:6c:7e:49:e3:a7:94:
05:83:f5:43:d5:6c:7e:e4:21:e0:d3:3f:03:6f:08:0b:04:28:
bb:ba:2b:3a:b9:f1:e2:bd:a0:9c:11:86:95:ee:e8:7b:66:3b:
94:ee:89:5d:5c:5e:03:9b:ed:8a:ca:fc:ea:d6:09:65:3c:52:
fe:ca:43:b0:c3:00:63:65:0a:c4:d1:bc:c9:80:8d:1a:b3:3d:
d5:3c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:07 2026 by rpki-client