
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
File: a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer (raw, json)
Hash identifier: Gqn3mlJ+DDSWKLrFcNWIlUMc6J/hd/mXkmilxJW/Mbo=
Subject key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584EA2D841068F1932DA339CCE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Jul 2026 08:45:11 +0000
Certificate not after: Sun 29 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 18503
IP: 161.108.122.0/24
IP: 199.34.241.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a2:d8:41:06:8f:19:32:da:33:9c:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jul 27 08:45:11 2026 GMT
Not After : Oct 29 08:45:11 2028 GMT
Subject: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:3b:78:9a:5c:4c:48:e4:82:2c:be:94:fb:
30:af:2b:df:b6:1a:68:3f:93:5c:e5:f4:6c:b5:b1:
8c:56:bd:92:a6:ec:59:37:08:10:d0:96:8b:63:8a:
6a:ad:55:91:14:6c:31:8e:0b:91:32:d2:f2:3a:9b:
43:74:59:c0:1a:c8:00:94:cc:da:47:ac:e7:ca:ca:
44:e5:8e:48:31:41:9b:8a:1a:a2:11:c1:91:69:c6:
4e:c5:70:22:de:80:3e:cb:5b:2c:1d:ba:3c:29:bb:
56:15:e7:0f:03:f4:e2:7f:1c:9e:6b:f4:b2:5b:e2:
5e:ab:af:a7:c4:0c:30:c0:15:69:90:c1:f5:45:b4:
cf:1d:b2:3e:ea:50:f5:d5:f9:04:11:41:b5:15:bd:
15:0f:4f:36:ec:e7:14:43:8b:7e:64:f9:96:d6:96:
d4:bf:b8:16:da:2c:77:9f:27:b0:e1:d4:b1:f8:f9:
15:ff:92:54:28:4b:2c:2b:f3:25:45:6a:04:48:7c:
c0:90:f3:b3:eb:74:87:14:ce:8e:cd:f5:2c:01:4f:
c2:1c:50:2b:c6:ad:b0:92:85:b7:75:64:51:bb:42:
29:af:16:65:7b:98:17:38:8e:9f:63:59:7f:a6:57:
e3:a0:53:0b:fe:44:5f:19:70:ec:f6:79:0d:b2:87:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
161.108.122.0/24
199.34.241.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18503
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:4b:ce:f1:02:4c:2e:50:fe:86:77:1e:bd:70:54:34:fd:16:
81:5a:ea:c0:56:c3:d4:f0:54:f0:77:35:2f:04:ed:ff:1e:c7:
df:f8:04:ed:da:85:28:05:5c:f3:d5:cf:37:70:84:0d:02:a7:
55:f8:f5:af:ba:bf:47:23:50:8e:98:85:df:a1:2b:83:ca:2b:
d1:6f:dc:3a:87:43:3f:df:9b:8c:ca:22:7f:6b:11:80:1c:e4:
a0:7a:5f:51:19:eb:2b:c9:0a:14:c6:a5:74:d9:fa:70:29:21:
e0:e1:bb:a1:0f:9a:7a:db:6d:f7:9b:b5:1c:1c:5a:cd:f1:65:
73:2b:18:01:f4:4e:d4:87:f3:c0:4d:08:98:de:4b:ac:09:ed:
5a:ce:21:b6:a2:3a:50:de:a3:24:61:ea:fd:56:3e:1e:8d:b0:
5c:7b:18:80:db:7e:f3:b9:9d:81:1b:45:12:6d:d4:0e:2d:ba:
a1:d1:d3:ed:31:55:cd:f4:65:84:a3:ac:0f:63:89:b3:db:c3:
3d:7b:e9:c6:c2:d9:a8:fb:9f:8e:92:0e:a6:30:28:71:96:6e:
61:dc:5c:3b:89:63:95:7d:b7:d2:16:1a:c3:47:97:46:e1:a6:
71:87:02:2d:fd:ac:f4:98:14:3c:3e:aa:ab:a6:8c:87:eb:e5:
04:ea:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:29 2026 by rpki-client