
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
File: 2e689c55-8453-486f-8b88-f433fba67f55.cer (raw, json)
Hash identifier: cJyYce49ZCAWt9CfqmTheA7LQh4j+qkJrbZoo7NhaNM=
Subject key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584CBDAA36B2BDD09C6573E38238
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Feb 2026 13:45:22 +0000
Certificate not after: Mon 08 May 2028 12:45:22 +0000
Subordinate resources: AS: 26216
AS: 27179
IP: 104.192.194.0/23
IP: 172.96.24.0/21
IP: 2607:2b40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:aa:36:b2:bd:d0:9c:65:73:e3:82:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Feb 3 13:45:22 2026 GMT
Not After : May 8 12:45:22 2028 GMT
Subject: CN=2e689c55-8453-486f-8b88-f433fba67f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7f:c8:a0:b8:75:36:55:87:a6:a6:f9:04:0a:
0c:08:1e:5e:e0:07:cd:7c:20:12:af:3f:6d:df:49:
b6:ce:1a:8b:ae:36:af:07:c9:55:e7:b5:af:82:c5:
91:d0:c6:0b:46:6c:d1:15:4c:0c:d9:7d:60:2c:58:
75:c1:02:06:4c:5c:a3:a3:31:6e:c0:fd:84:9f:b9:
1d:4d:a2:46:b4:ce:cf:68:ce:6e:e3:e2:18:10:65:
23:c3:b8:ad:a1:54:16:59:ed:d3:24:4d:3f:67:af:
5f:1c:6c:7d:9d:c2:80:20:fb:db:6d:2c:c2:a8:23:
a2:b6:73:e7:47:5a:03:94:03:ee:12:29:32:be:fb:
02:34:94:66:66:1c:05:2f:d5:65:6a:9f:c9:37:0c:
01:40:a7:73:44:7b:43:32:17:64:76:10:e3:58:c1:
3f:98:fd:ad:c8:be:ba:da:76:3c:bf:ee:94:82:57:
a0:c8:1d:7d:16:b0:b9:d3:a3:54:f5:31:7c:17:0a:
2b:c8:2c:b3:04:52:8c:63:cb:1a:66:ba:e6:40:82:
21:59:f7:d1:3a:ce:f1:01:dd:c5:47:69:79:0d:7e:
8f:69:06:57:85:19:4d:be:1a:80:12:c2:0d:e5:47:
c8:9b:b8:c5:7b:e9:2f:54:e9:7e:12:6e:e2:c7:07:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.192.194.0/23
172.96.24.0/21
IPv6:
2607:2b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26216
27179
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b1:8a:09:cf:7d:e9:7f:d5:ee:e3:12:f8:e5:f8:2a:81:a6:
32:6e:25:f7:1c:6a:01:07:01:c6:e0:d1:07:a4:6e:43:5e:f6:
f2:ac:c1:fd:07:8e:7e:d6:ae:04:75:40:09:08:2d:66:0e:78:
fe:8f:f8:cf:9e:4a:20:ad:6a:b0:20:5c:e7:28:a9:d6:5c:c9:
f8:a2:9e:70:d5:4b:8b:26:b6:38:4e:47:b4:e2:da:e2:e1:d8:
b9:d0:dd:28:1b:02:3c:11:a3:db:7b:fd:46:13:ed:c0:41:df:
21:c4:c3:33:60:23:8e:91:8e:81:e7:81:c7:82:52:70:64:48:
7e:85:03:75:9c:e9:64:55:87:4e:69:dd:dd:05:75:5f:c5:19:
94:00:57:76:7f:a2:ca:5d:d0:c8:2b:24:a7:f8:81:67:23:6e:
80:d5:f3:10:32:c9:29:75:0a:92:71:f4:7b:b0:8a:72:1e:e2:
d7:e4:5f:28:d7:a0:fc:40:ad:95:93:67:f9:aa:67:98:b2:d0:
46:9e:a0:e8:a0:81:0f:70:88:83:10:ac:cc:66:2e:16:03:8c:
68:21:65:be:06:8a:74:77:07:04:b8:8a:0e:8d:05:ae:3a:32:
39:6c:21:f9:83:e3:26:6d:94:6a:56:4f:77:a7:be:30:9e:90:
38:ee:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:34 2026 by rpki-client