
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
File: ac65e460-1633-4b44-9dc5-be303c8b3f09.cer (raw, json)
Hash identifier: jSdU2b+JpzCZi3BdQ/S+kfwMDTA+6vSSCdRl5qGkqzc=
Subject key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DDBB382AA0A3B271FC777F100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 17 May 2026 00:45:17 +0000
Certificate not after: Sat 19 Aug 2028 00:45:17 +0000
Subordinate resources: AS: 11867
AS: 46386
IP: 23.134.52.0/24
IP: 130.12.209.0/24
IP: 2602:f700::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:db:b3:82:aa:0a:3b:27:1f:c7:77:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 17 00:45:17 2026 GMT
Not After : Aug 19 00:45:17 2028 GMT
Subject: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:95:86:b6:81:19:fa:cb:21:52:3f:65:ba:
14:9c:fe:be:c3:44:2d:da:5c:41:3a:d5:80:d0:bb:
f4:87:d9:47:a5:55:15:e8:e1:2b:9d:cb:a2:a6:ec:
49:4d:50:7d:c6:72:1a:e9:66:07:e3:51:a4:f1:9c:
02:fe:8a:07:a7:0c:49:ec:eb:06:5b:de:b2:61:1c:
d2:ed:e4:ac:11:a7:d5:fb:cd:0a:d2:6f:6c:72:2e:
b0:f6:47:57:37:88:c3:53:f2:5f:fd:0e:c4:3d:13:
ea:f7:2e:96:7f:60:cb:e3:4a:89:bf:5f:b2:b7:af:
d5:fe:6d:ae:06:ea:78:5e:42:85:cd:15:ba:66:e0:
ca:71:ec:00:48:4d:29:a2:78:a7:d2:b4:82:ab:63:
42:28:cb:12:35:91:d9:e7:c2:a0:42:84:d6:02:3a:
b8:71:1d:0d:64:4a:83:cb:e6:f3:5f:3b:b6:b8:2c:
68:ba:c5:8f:dd:a1:3a:75:fc:21:f4:e9:0d:20:0c:
ef:c6:1c:85:49:6a:20:f3:9a:45:72:ae:69:ac:09:
67:e4:a4:a0:d9:fb:d2:32:50:d9:0f:b9:f0:03:be:
f8:08:5e:67:ef:60:5c:d7:c2:97:45:4c:0a:28:f7:
60:22:39:9f:62:4a:7b:b7:b1:61:9e:3d:70:2c:76:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.52.0/24
130.12.209.0/24
IPv6:
2602:f700::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11867
46386
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e2:a5:bf:cf:fd:03:d8:89:b5:e6:a7:1b:cd:70:89:0c:23:
7a:79:bf:e1:41:17:31:61:a5:20:67:82:1f:f3:b4:94:93:e8:
d1:05:6b:38:46:46:ab:da:46:48:fb:f8:6c:9b:96:25:44:86:
c4:66:57:5c:f2:ff:a4:18:ce:57:5d:83:16:73:d4:4d:af:85:
5b:f5:9f:4d:5a:fb:09:9a:4a:3d:c7:b7:02:b5:b8:8c:19:db:
1f:89:72:cd:81:d9:95:ec:7b:6c:04:79:1d:f1:af:9a:bc:9d:
07:74:ef:38:69:0c:af:c3:23:20:f5:0d:1c:15:2b:21:4d:c1:
96:11:54:88:17:4b:fb:69:9c:9e:36:30:22:4e:63:f7:05:18:
d7:31:45:ba:59:85:37:f8:cb:5f:38:99:36:cb:80:60:75:8a:
53:65:6b:4e:da:a1:8c:a7:a0:4a:a8:87:18:cf:9d:99:c7:5d:
f5:36:a4:23:22:ea:79:ee:d2:89:4a:21:40:26:5d:de:c2:1b:
68:b7:ae:96:a9:17:ba:c4:7c:88:49:8d:a7:2b:62:91:a1:22:
4a:80:a6:f0:03:ed:24:5c:33:23:c0:a7:0f:cc:51:48:2f:b9:
b5:72:0e:ae:1e:98:30:fa:bc:b7:b1:c9:c7:32:20:c4:79:49:
8b:6a:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:50 2026 by rpki-client