
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer
File: 566ffb02-1248-4101-8962-6e8672a404b9.cer (raw, json)
Hash identifier: P/6NTKRIouw4FDMi0OOBRZV5CTK9a8PMgDUODGx9yKQ=
Subject key identifier: 62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D59E2AFCC8D8BDF27AECA5680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 31 Mar 2026 12:45:15 +0000
Certificate not after: Mon 03 Jul 2028 12:45:15 +0000
Subordinate resources: AS: 400834
IP: 23.131.44.0/24
IP: 2602:f760::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:e2:af:cc:8d:8b:df:27:ae:ca:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 31 12:45:15 2026 GMT
Not After : Jul 3 12:45:15 2028 GMT
Subject: CN=566ffb02-1248-4101-8962-6e8672a404b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:32:fb:ef:41:e4:86:8f:08:64:45:70:5e:
5c:f9:a8:7f:d3:54:ca:c2:9f:d7:c4:ea:63:48:41:
a9:08:e0:e4:2c:2c:f6:57:ab:b2:d8:fe:c0:57:d0:
12:c0:8a:ea:03:eb:a2:5a:97:86:b5:fd:c1:cb:4c:
57:3b:a6:e9:8a:c4:54:dd:6c:24:27:19:b9:cb:7c:
3b:82:c9:c4:d8:fa:a4:49:ae:35:aa:74:f6:b9:bf:
6a:78:bf:1c:8d:85:cf:c3:d3:6f:01:75:62:66:a8:
0f:66:aa:1e:a7:97:44:03:97:95:34:09:cb:63:3f:
78:c2:18:ae:76:46:e2:67:f8:bc:49:6a:ab:a7:b4:
4f:7f:0a:6c:d4:71:ba:27:de:c7:ca:0f:70:2e:ff:
35:e3:5c:cf:31:35:c4:e3:61:72:bd:b8:15:11:a8:
ef:85:8c:ff:02:be:8b:22:a6:01:61:2b:b9:a0:b8:
ff:7a:e4:b9:f1:63:b4:0e:50:40:58:e5:85:70:60:
6e:41:21:cc:3c:b4:39:c6:26:90:0a:ca:66:41:53:
98:ca:d2:ce:7e:8d:c4:91:45:42:61:84:ef:f4:91:
85:5d:cf:52:5e:0c:d6:2e:08:5c:26:54:cb:af:9f:
14:c5:90:fe:57:a0:5d:93:8d:c9:40:bc:05:73:e0:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.44.0/24
IPv6:
2602:f760::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400834
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:54:f8:ae:29:63:1f:57:86:79:ea:b0:70:a7:e7:18:73:9a:
ff:3b:67:fe:41:3f:18:3a:e7:4c:0a:51:ac:68:36:b8:73:4e:
a8:aa:03:bf:54:d7:ae:5b:94:56:95:46:20:b0:31:b2:80:6d:
c5:02:be:03:7f:c5:0a:c0:a8:23:51:b6:f0:12:46:08:8e:25:
fe:07:0f:83:8b:17:b3:4a:a1:35:e8:96:71:2f:14:f3:c3:b3:
4c:be:43:05:ee:e4:76:36:90:03:cd:03:ab:3b:4e:33:4c:3d:
1e:8e:bc:d1:dd:5c:04:72:3d:1a:70:d6:02:cf:68:f6:85:81:
e5:67:5e:ef:ca:85:2d:92:a2:ae:5a:46:d1:e2:60:13:1e:f1:
43:00:9e:69:30:fd:66:e8:3f:c8:8f:be:74:b3:a6:d1:f7:2c:
c8:f3:98:43:b8:f7:84:fa:0f:71:78:0a:6b:75:a9:30:72:84:
fe:f8:c5:b7:5e:3d:78:56:ba:89:e9:f1:62:7c:a9:53:3d:db:
86:ff:6d:f1:98:87:2c:6f:30:3e:db:40:0d:5c:f9:d3:9e:c1:
14:ca:7a:c5:af:e1:8a:57:e3:30:1c:59:97:c3:43:2f:d7:af:
1f:39:4e:9d:90:a3:41:ce:e0:b2:f4:3c:8b:f8:32:9a:eb:e2:
e0:41:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:56 2026 by rpki-client