
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer
File: b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.cer (raw, json)
Hash identifier: R2nBMXHL6+T4pjFcvKOz9UT0bwGFwMequBCg/GazlB0=
Subject key identifier: 5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E051C9B5D729C87DFC68BA780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 31 May 2026 20:45:12 +0000
Certificate not after: Sat 02 Sep 2028 20:45:12 +0000
Subordinate resources: AS: 394193
IP: 192.84.225.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:1c:9b:5d:72:9c:87:df:c6:8b:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 31 20:45:12 2026 GMT
Not After : Sep 2 20:45:12 2028 GMT
Subject: CN=b89bdcb9-22f0-4629-8ed8-bb4a33f9102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:fe:21:aa:00:2f:13:82:03:42:a8:49:e1:
4c:61:8b:ef:20:c0:b9:62:1a:3d:ca:63:ca:09:dd:
77:f2:af:f4:36:69:f3:31:f4:4d:73:b2:ed:33:34:
87:da:51:92:1c:16:bc:d7:d3:2a:c2:31:bd:67:7b:
a3:47:48:23:9a:87:de:2a:cf:25:46:d2:41:e6:35:
84:fe:62:85:75:f2:c9:c7:35:a2:f9:85:93:21:ed:
d1:33:48:c6:41:21:fb:24:72:4b:b9:9e:97:c4:27:
1d:31:21:84:2b:6f:de:46:54:b6:18:c5:36:31:5d:
08:5f:fd:29:9b:c1:b1:38:2f:3a:15:c9:3d:71:bf:
22:9f:d4:3c:2a:35:1e:be:07:62:d4:02:3d:ed:88:
f4:32:3f:f7:14:80:20:65:62:d8:d1:10:7c:a2:01:
d4:aa:b6:c2:68:ab:75:dc:40:03:f0:bc:b6:d4:a8:
c4:29:76:ae:30:a0:30:67:52:71:92:a0:e4:ae:f8:
63:43:40:c5:f1:9f:58:25:3b:95:9d:0b:86:41:29:
9d:4e:26:63:3f:be:a1:98:8a:d6:d9:42:33:a1:00:
1d:6c:0a:32:80:76:bf:6e:c4:62:68:52:ef:24:64:
1e:18:d2:67:38:96:72:59:9d:12:ca:a2:02:c7:74:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:D3:88:EC:13:87:CA:F5:B3:CC:E8:D3:CC:DF:BB:12:91:BB:E3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b/b89bdcb9-22f0-4629-8ed8-bb4a33f9102b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.84.225.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394193
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:e1:1e:cd:5c:79:74:15:b4:1c:cd:40:e7:c4:c0:88:b2:8a:
cd:54:c6:be:87:fa:f8:2c:22:8d:60:41:9f:81:c3:76:7c:b8:
2f:51:7e:ca:d4:12:d2:61:0e:09:47:b1:cf:c5:a2:17:26:65:
56:c4:75:79:3a:26:70:1e:f5:8c:09:8d:77:07:11:74:dc:83:
0f:f1:b0:68:94:8e:3b:4a:90:5c:7f:07:e3:92:22:e8:b8:f6:
2d:76:76:82:27:05:2e:4d:b6:b6:d6:77:4c:97:a9:6f:2d:b1:
39:a6:c0:01:ef:0e:a6:e4:f9:be:6d:68:61:d7:3f:00:f7:03:
9f:fc:8b:be:79:ac:a6:d2:72:d3:b8:fb:1c:ed:c9:17:73:a7:
a5:21:e5:24:67:3d:0c:51:e2:4b:d7:6e:a6:fe:72:ea:3c:9c:
33:91:a2:56:94:02:99:09:b5:7a:2e:50:8e:a1:66:b0:b3:47:
fd:4b:b9:c0:f8:04:49:b8:ff:05:bf:d2:dc:0c:1e:a9:5a:ab:
c9:3f:44:22:7e:25:34:71:d3:89:27:63:e3:1f:25:71:dc:1d:
32:95:2e:c7:a9:c4:92:b5:1a:b4:8c:44:bb:45:5b:1d:66:bd:
23:90:c9:4a:9a:be:88:34:7d:c3:1f:ff:17:87:ec:aa:04:84:
9a:0c:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:14 2026 by rpki-client