
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer
File: d47a94a4-ac39-4383-91f3-389070353c6d.cer (raw, json)
Hash identifier: Iqij0aZGHfs1X8UDym2C///2EBL4AJapFi42WolHCyo=
Subject key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584F42AEEE906D40CAB0DA346B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 22 Sep 2026 14:51:16 +0000
Certificate not after: Thu 15 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 397293
IP: 68.69.8.0/22
IP: 209.164.48.0/21
IP: 2607:9cc0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:42:ae:ee:90:6d:40:ca:b0:da:34:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Sep 22 14:51:16 2026 GMT
Not After : Jun 15 12:45:22 2028 GMT
Subject: CN=d47a94a4-ac39-4383-91f3-389070353c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:48:f1:91:da:77:66:a2:48:80:15:73:44:
ac:2e:4b:97:5c:0b:3a:11:f8:95:63:cb:e5:d3:19:
73:54:09:50:7c:00:4c:41:46:20:f5:fe:2e:df:29:
70:a4:c6:da:97:5d:6d:8d:99:ca:a4:4a:c1:da:be:
14:f9:9a:f0:ad:eb:86:46:ad:98:5a:45:f1:91:e1:
d3:d2:7a:82:6c:32:3a:27:a5:03:7a:01:d0:ae:a4:
90:71:4a:19:9c:e6:36:6f:3f:de:04:f9:3d:b9:ec:
ea:78:3a:00:5f:ca:1f:02:4f:10:6e:b8:ee:a4:d1:
f1:c3:48:f0:31:46:cf:52:b5:b6:c8:ca:d0:36:1c:
b4:f9:25:ce:14:b9:04:39:10:21:10:15:23:ee:ac:
a4:f2:49:de:e7:14:26:d7:21:23:b5:25:03:ea:ce:
59:96:68:68:a1:15:69:35:4b:ae:c7:90:9e:5d:5f:
12:2e:42:bd:71:51:aa:18:4d:ae:67:49:16:23:fa:
1a:d0:fc:17:2c:e2:a1:76:f3:bb:22:67:27:83:cd:
9e:f0:59:82:12:4c:ed:ea:91:72:16:6b:ad:61:d9:
15:c0:b8:25:e4:3f:1e:13:4c:59:35:4d:ce:27:d3:
3d:15:38:73:bf:3e:9a:c8:8a:7e:48:b6:02:6f:61:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.8.0/22
209.164.48.0/21
IPv6:
2607:9cc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397293
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:9b:81:66:90:5e:0b:34:0b:48:c2:26:14:b6:db:bd:6f:24:
61:f5:be:37:ad:24:9d:df:73:7a:d5:df:cb:7c:5d:2f:0f:4f:
b0:27:10:f8:ec:37:22:84:68:7b:66:81:b8:3f:b7:5e:7e:e7:
d0:b8:f3:34:88:d8:e6:7d:f9:38:14:b7:82:8a:44:a4:d3:f3:
ff:d5:31:2f:09:ae:81:c6:7c:88:55:ed:2f:b2:8b:a0:c3:5c:
2f:23:23:f0:7f:37:cd:6f:a2:c4:99:e2:20:d7:c4:7d:4a:af:
fd:63:6f:06:92:28:08:89:65:60:63:a7:da:31:80:fb:4f:48:
d6:ea:96:cf:64:c9:1c:54:04:f8:f4:1a:e8:e5:10:6b:d4:6c:
98:52:36:36:f7:ba:13:cb:dc:0a:8d:0f:33:57:1b:6c:60:33:
ee:da:22:ef:a0:99:af:e5:e9:ac:d2:e8:2c:2a:32:d5:1b:ec:
60:ec:d9:de:fd:90:5e:d0:98:ed:d9:79:5d:16:4a:8d:46:3f:
9d:d3:18:bf:31:e5:8f:6c:7b:1a:5a:5c:2d:7b:46:f5:19:93:
ed:b5:59:47:f3:1d:42:07:93:6c:24:b5:f0:bd:fa:c4:4d:b4:
15:f0:2e:26:b5:c4:4d:31:bd:46:9d:67:da:cf:4f:e0:b3:74:
39:bf:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:55:26 2026 by rpki-client