
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.cer
File: ad76ac54-2f3f-4538-a712-8d6d1a762b0f.cer (raw, json)
Hash identifier: v7bcmA3dr/H7r6FZs+vRFPeqaU8ddEqqAdZNdgDjvt8=
Subject key identifier: 8A:0E:3C:77:E8:E5:E6:A4:A1:31:AC:5C:01:11:68:50:9E:BA:1F:48
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E25377942D5C1EAA97D3C9600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 12 Jun 2026 08:45:11 +0000
Certificate not after: Thu 14 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 398726
IP: 45.45.232.0/22
IP: 2606:e3c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:37:79:42:d5:c1:ea:a9:7d:3c:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 12 08:45:11 2026 GMT
Not After : Sep 14 08:45:11 2028 GMT
Subject: CN=ad76ac54-2f3f-4538-a712-8d6d1a762b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:e4:3d:2b:42:26:ce:64:93:9a:b7:35:13:
a2:d7:66:11:58:43:55:bc:b7:82:83:cd:55:05:81:
da:84:0e:2a:18:96:66:eb:6c:e6:25:9e:9d:8c:5c:
81:f1:51:6d:e0:52:3e:df:c9:d2:c7:e0:87:09:7f:
04:d6:33:85:1e:9b:a1:d5:58:cf:a0:25:87:2f:45:
4f:c4:d4:71:ef:c6:54:b6:60:33:7b:56:96:19:c1:
63:95:f8:f5:86:1d:11:0c:a0:15:ee:ab:7f:e4:30:
3e:99:3d:5c:e0:0f:79:e9:90:11:df:5b:9a:ec:cf:
62:20:25:da:3d:27:b7:6e:67:73:39:4c:ef:78:31:
e5:07:2a:1f:98:31:f2:1c:ec:85:69:e0:8b:cf:c2:
33:f6:ca:3d:e9:1e:a5:0b:9c:1d:ab:b0:c3:5a:64:
9b:86:5a:9c:33:a4:86:d3:c3:1f:0f:db:b9:73:2e:
b9:d3:8c:20:35:30:57:ec:74:bb:54:29:fb:bb:27:
7b:30:f5:c3:f8:2d:18:6c:d6:bd:0b:15:27:02:0e:
69:66:d0:75:58:3a:2d:76:2e:80:34:4a:d2:ad:b2:
e5:9a:d0:a6:a1:1b:24:d0:c9:86:d7:02:cf:0b:8a:
6a:b9:2a:09:55:11:66:0b:76:c1:73:45:e9:4d:33:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:3C:77:E8:E5:E6:A4:A1:31:AC:5C:01:11:68:50:9E:BA:1F:48
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
45.45.232.0/22
IPv6:
2606:e3c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398726
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:42:ed:2f:96:77:de:7c:98:e5:cb:34:ce:4e:f2:44:a5:e2:
8c:15:c0:fa:ac:1b:2f:87:36:58:91:72:9f:ba:97:31:0c:5e:
71:e7:1e:b5:f4:9f:cf:44:bd:be:c4:bd:d4:8e:98:ca:6f:c1:
1e:f8:f5:f0:5e:f7:8e:c6:c8:12:08:f8:ba:e6:f2:71:69:e6:
d7:ae:aa:db:4b:7f:4a:e5:05:d0:d1:e0:4d:58:8c:97:42:44:
11:33:2a:6c:f2:8e:20:45:b5:b5:39:92:d3:65:a6:e8:3d:53:
a3:fb:ed:9e:9f:7f:55:f0:cf:22:a0:37:27:cb:eb:a7:cf:c9:
c1:61:bd:33:06:fa:a4:05:31:e1:0d:d1:25:4e:ce:a8:cf:ae:
98:51:1f:fd:56:02:bf:1a:3c:ef:2d:b2:d8:eb:0b:63:4b:6c:
c4:68:3e:ae:3c:34:a2:a0:3d:61:a6:24:d0:3a:c3:be:19:42:
10:4d:ae:2c:10:24:c0:d2:74:ae:68:cc:a5:9a:5b:13:50:c9:
a9:23:c3:1a:59:46:bd:87:8d:bd:9e:13:4d:2c:26:63:c9:59:
be:2e:37:1a:a7:6a:f7:5b:a5:3e:b7:a6:05:c7:f8:25:73:3b:
30:27:44:e4:58:c4:38:8c:6d:9e:d1:d3:e0:68:5a:a0:5d:73:
cb:d4:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:18:10 2026 by rpki-client