
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer
File: 9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer (raw, json)
Hash identifier: iQrs3E8P9fz2z0mLzKrRDb3syFZsENnCuRJz/1VU/f0=
Subject key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E17420D9A9E70E82C55A93F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 07 Jun 2026 08:45:11 +0000
Certificate not after: Sat 09 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 36527
IP: 23.160.136.0/24
IP: 198.153.58.0/23
IP: 2602:fa41::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:17:42:0d:9a:9e:70:e8:2c:55:a9:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 7 08:45:11 2026 GMT
Not After : Sep 9 08:45:11 2028 GMT
Subject: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:0c:59:8a:cc:b8:c9:28:a9:7b:c2:de:e7:
52:9a:f4:c3:6b:ac:95:5f:1f:4b:8c:03:bb:c3:bf:
93:ed:46:15:a5:82:36:c0:e7:19:f4:cf:1e:d7:03:
fb:a8:b0:53:fd:0a:40:85:14:53:d5:cd:22:6b:9f:
b8:a1:8b:ae:11:c5:16:36:e3:33:b5:81:dc:4b:05:
61:79:f5:5a:b6:25:95:82:ad:20:cd:a2:e5:8a:12:
b6:b2:dc:89:c7:0e:8e:38:52:8e:2d:09:06:c5:12:
e4:ec:03:4a:2e:3b:62:a0:80:4c:1c:7a:73:5b:78:
e3:cf:d3:68:8e:55:1d:b1:9d:5b:cb:9d:ab:ec:a9:
3b:2f:77:38:bf:20:29:b8:8e:1b:7d:af:0f:fe:f5:
ec:17:23:ac:a9:0b:84:3b:f4:ca:ed:eb:89:a5:4c:
9c:dc:81:77:a4:b2:b7:33:ec:33:eb:c0:d1:ca:ac:
6f:2c:a0:6e:a0:e6:36:13:0e:c8:0f:fa:2f:c6:b3:
29:67:10:1d:cf:d6:a8:d9:8c:d0:dd:0f:98:6f:0a:
36:5b:c0:0c:63:a7:37:fc:a8:63:14:59:d4:18:b1:
73:89:9b:f3:70:fb:dc:b1:99:ca:e1:06:fa:bf:7b:
23:ed:95:99:64:e3:39:a3:0c:40:5c:08:ba:de:2c:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.136.0/24
198.153.58.0/23
IPv6:
2602:fa41::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36527
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:7b:06:ed:c3:d9:df:85:ea:bc:f1:95:f3:2c:b1:b7:ff:7a:
f7:3e:91:70:27:5b:07:ae:1a:96:06:1b:70:ee:33:a8:8b:7e:
b1:30:39:18:b6:b5:bb:0f:b7:c5:0e:c0:0f:c7:da:6b:17:e7:
f2:0e:1e:39:87:3d:0b:1a:40:5c:da:60:ea:d8:ad:8d:91:7e:
57:a9:01:09:cb:56:96:25:1a:55:e7:f6:be:52:90:de:88:90:
36:0c:fd:7d:ee:a1:17:4c:c7:36:ad:15:4a:a9:05:d9:24:10:
98:79:c9:a3:d1:6e:f0:31:fe:17:a4:a0:09:87:67:02:bb:a0:
41:7d:e0:7b:80:21:29:ef:da:00:2e:74:a6:3f:23:5b:86:6f:
a5:8f:09:30:db:41:33:67:9d:fd:69:ae:5f:8f:e4:23:ab:01:
85:c2:e1:18:f7:9d:85:71:81:e1:7e:ca:0f:96:49:73:3e:bd:
1f:f5:fc:ba:cb:7e:6b:65:69:7b:30:4e:7f:89:b6:34:a1:76:
1f:fc:c6:2f:b4:31:68:0c:f3:9a:ad:22:88:d5:c1:2e:33:b4:
86:a0:73:48:3d:e9:71:7c:08:5f:78:f9:68:2e:dd:a9:0d:07:
91:15:fd:83:91:78:a4:0a:b5:f6:7f:c1:06:9f:23:e0:39:4d:
e2:b9:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:37 2026 by rpki-client