
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
File: b43c5615-9630-4bab-8258-f3b32e00f304.cer (raw, json)
Hash identifier: 9+MaOlNkagw08SLgndF3T8thMTYTsQgnwBO/HTl6GdI=
Subject key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E1FA21B0239DE0CE77035DCA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 10 Jun 2026 08:45:11 +0000
Certificate not after: Tue 12 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 36832
IP: 23.132.172.0/24
IP: 130.12.160.0/22
IP: 2602:f8c4::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a2:1b:02:39:de:0c:e7:70:35:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 10 08:45:11 2026 GMT
Not After : Sep 12 08:45:11 2028 GMT
Subject: CN=b43c5615-9630-4bab-8258-f3b32e00f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:ab:c9:e6:69:9b:31:f6:5a:ea:38:50:20:
13:e8:e9:3b:b4:b4:a9:85:ad:8d:77:d2:f1:89:d3:
70:07:92:8b:64:9e:bf:10:4b:c8:02:42:8d:64:08:
ee:c2:87:44:1e:3b:36:9e:34:e3:bf:06:ef:db:c8:
51:d0:2b:31:67:a2:5a:df:5c:1c:ad:a6:75:04:e8:
bd:0d:f6:e7:3b:86:f7:17:0d:dd:4d:df:f0:1b:84:
c2:c9:53:9e:1c:f3:e5:e0:b9:36:98:8c:2a:9a:1b:
76:f7:58:ee:74:3d:42:27:7a:5b:e5:3c:9c:c3:b0:
54:dc:f6:df:b1:4c:a9:29:d7:81:59:f8:fe:28:8a:
57:c6:23:48:0f:8a:9f:a0:00:f0:c2:57:97:c9:ec:
d3:4e:db:fd:b4:e1:7f:56:bd:01:37:46:07:18:99:
6a:96:09:42:da:5f:c9:5b:92:91:59:23:8e:a2:44:
b9:85:f7:bc:75:47:c0:99:fc:c7:d0:b4:05:0b:2f:
75:ad:cb:24:55:10:6f:8b:10:dd:56:12:a9:d1:e7:
8c:1f:72:1d:b0:52:af:7c:9b:81:eb:04:ee:24:2c:
64:ad:c6:31:29:17:39:31:12:6c:4f:01:b6:12:a8:
b0:e4:91:21:36:47:84:a6:64:1e:90:62:f4:a9:bb:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.172.0/24
130.12.160.0/22
IPv6:
2602:f8c4::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36832
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:bb:55:c8:11:47:55:96:f7:7f:63:a4:df:73:fc:16:4e:0f:
2f:e8:ec:ed:67:aa:f4:e4:b8:74:d3:e8:54:c4:ed:19:70:b9:
b3:82:06:ed:8f:dd:d1:0c:1a:b7:a2:e6:fc:ba:20:23:19:c2:
f8:4a:10:7b:4d:b1:83:1d:d0:79:6e:4e:3b:ad:53:0f:ac:8d:
69:7f:ce:f6:5b:15:86:4b:4d:a9:71:cc:58:6c:03:34:a7:54:
9c:d1:9e:1b:62:4a:91:b2:75:4e:20:19:5b:a8:8c:d9:82:d8:
99:9c:f8:b4:06:fd:2c:11:42:52:e4:90:94:e7:11:25:fa:db:
61:c7:e5:77:3d:b9:ed:35:63:78:3c:ed:cb:27:9b:ee:55:bc:
94:b1:be:6e:45:aa:c2:59:92:ea:02:8b:de:07:01:c1:73:f0:
6c:3d:90:d6:8a:1b:33:c4:04:d3:1d:c7:a9:77:38:f0:50:11:
5b:24:16:ef:6a:b2:e8:b7:82:ab:43:3c:5b:b0:46:0c:ac:8d:
c3:cb:8e:e8:13:4a:03:37:e0:f5:c0:5e:2e:04:65:95:c2:86:
f9:c3:2c:ce:3a:d0:22:7e:65:c8:46:ef:9e:8c:aa:2f:51:3c:
46:a9:9e:8f:c5:f1:87:ec:2e:9c:1f:5d:f0:80:9f:f7:ac:af:
b7:4d:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:30 2026 by rpki-client