
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer
File: e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer (raw, json)
Hash identifier: bScH0Ez2M0x+4uLF7c5sX6PpAJiREGClrGPrhGTzMTg=
Subject key identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E0681F248182AB7CD0CD42A40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 01 Jun 2026 08:45:11 +0000
Certificate not after: Sun 03 Sep 2028 08:45:11 +0000
Subordinate resources: IP: 192.197.128.0/24
IP: 199.185.32.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:06:81:f2:48:18:2a:b7:cd:0c:d4:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 1 08:45:11 2026 GMT
Not After : Sep 3 08:45:11 2028 GMT
Subject: CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:25:45:48:7f:f8:4d:d5:2b:35:9f:69:9b:
94:a7:f8:05:ec:f2:08:3d:18:39:91:ce:b7:76:7d:
d5:5d:a0:89:e8:6e:b2:e0:ed:59:ca:96:b3:d6:f4:
ef:09:c0:99:be:bd:b3:25:60:e3:30:b4:64:92:56:
7d:15:f9:11:87:75:02:d5:23:17:29:88:cd:7d:01:
05:bc:1e:a4:b1:a3:a2:8b:e1:b6:30:ec:f3:8e:00:
45:36:3c:57:97:8a:06:44:62:68:80:97:ee:1c:6e:
7b:64:92:e7:fb:64:9c:d9:84:90:8c:07:67:25:27:
72:ce:84:a8:26:b3:77:09:25:69:e2:f5:8b:b8:8f:
08:1a:6e:91:01:9b:da:9f:64:c8:6a:d5:8d:35:f2:
de:89:c2:0f:69:a4:5a:c8:93:c9:17:21:e1:fa:51:
d4:1c:51:24:5b:ba:f6:a4:4e:ba:d2:97:ef:45:3f:
27:47:e4:3e:d6:58:4a:af:e2:70:61:22:44:e1:a9:
18:28:8b:46:db:15:89:1c:09:2c:43:b0:6f:0c:5a:
ed:af:48:0d:b1:f3:d4:37:0a:41:68:01:eb:45:eb:
cd:3a:d3:e0:4b:ea:98:ee:d6:89:c0:a8:ab:ae:d9:
45:36:ca:cd:ee:58:ce:fd:79:22:c3:eb:cc:67:2e:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.128.0/24
199.185.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:5f:43:f6:24:a2:2f:d6:d6:95:cb:7f:c2:ac:e2:80:ae:08:
4b:61:f8:22:a3:0c:00:ff:7b:21:6c:f7:5d:e2:35:76:87:ab:
8b:7e:e4:36:cc:e9:a6:7e:39:ef:b4:63:64:1b:14:3c:c7:94:
7b:33:6d:34:ed:8b:5e:2b:fb:83:02:39:db:cd:fc:7a:f1:fd:
b3:dc:51:1c:63:69:0a:2b:0e:9c:a8:e9:b8:fc:f7:33:f4:f2:
19:fe:d9:e7:43:b4:b6:56:ee:35:86:f9:41:ba:b7:47:b5:56:
e3:62:06:e7:bc:9a:0c:b3:b4:88:08:4c:f5:ee:b2:98:b7:9b:
1f:eb:c0:c3:fe:53:40:e2:51:60:c0:30:a3:e9:d1:79:d9:67:
93:fc:bb:9f:df:c9:72:e7:e1:c5:db:70:22:8a:e4:b6:bb:e7:
8b:f2:f5:67:db:37:eb:76:ae:6f:37:f6:9b:20:57:7e:a8:65:
33:a9:f6:8b:51:24:16:2d:26:6b:20:ff:13:ae:c8:06:9a:72:
ff:32:ce:ec:10:a2:89:94:76:75:12:da:f3:0e:7c:a3:bd:c5:
e5:cd:33:d8:b3:e2:63:12:e1:d1:64:bc:3d:ca:9b:8f:37:52:
ef:ec:b2:4a:ca:fd:3d:82:6a:ad:f5:13:12:22:13:23:80:03:
d6:17:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:09 2026 by rpki-client