
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
File: c576633f-343d-4ac3-a936-98958e5630e6.cer (raw, json)
Hash identifier: HzdChxQD48Gn0JpLYCv439Pj9gMfGQWLoW09YaskrxE=
Subject key identifier: 4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D6D9E97F132DC9CA170643E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Apr 2026 14:24:14 +0000
Certificate not after: Thu 29 Apr 2027 10:55:51 +0000
Subordinate resources: AS: 63286
AS: 397658
IP: 23.133.172.0/24
IP: 130.12.194.0/23
IP: 2602:f72e::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6d:9e:97:f1:32:dc:9c:a1:70:64:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Apr 7 14:24:14 2026 GMT
Not After : Apr 29 10:55:51 2027 GMT
Subject: CN=c576633f-343d-4ac3-a936-98958e5630e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:71:96:30:74:d4:4c:7f:53:f1:b3:f9:74:
17:a6:3c:85:50:ec:5f:c7:f8:7f:a5:0f:08:b7:d3:
3d:de:84:78:d3:77:d8:f1:b5:6c:34:92:6b:36:ac:
58:c6:f9:f4:3a:49:65:a9:11:cc:97:1f:a5:03:af:
8d:78:04:2e:4c:55:3c:a7:82:a4:56:c2:14:b7:bf:
bf:eb:da:f3:c6:cf:7d:f6:3c:7d:35:c7:24:0e:fa:
ca:ca:da:44:09:eb:f2:1d:19:7a:f6:cb:48:6e:62:
53:67:0f:7d:b5:e3:18:c2:ac:05:c5:07:42:7e:9c:
30:7d:13:30:cc:5d:d5:ae:1a:8c:a8:0c:d3:a8:be:
e4:11:1e:5e:1b:7c:76:c3:f5:3c:c9:a3:8c:13:ca:
84:e4:89:de:cf:16:c1:a8:be:1e:e1:ae:2b:5a:4a:
44:8c:18:7f:83:b0:09:e5:ef:d8:c9:6a:42:c8:f1:
ea:d4:7c:a5:74:7b:b6:83:a1:e7:54:c7:59:10:98:
75:06:ce:e1:30:05:9c:c4:55:00:af:11:e6:2a:c9:
e7:e5:a4:54:2c:62:04:28:da:f8:2f:9b:87:30:06:
fd:8b:f5:c8:f3:29:82:24:85:01:f9:2b:1e:ba:61:
ea:82:79:63:97:bc:e9:9d:df:3d:37:42:d9:80:53:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:44:27:AD:47:97:5D:01:18:A4:B3:04:B0:CF:51:42:25:18:EC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.172.0/24
130.12.194.0/23
IPv6:
2602:f72e::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63286
397658
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:b2:b6:cb:44:0d:65:94:6e:43:5a:44:69:da:d9:fd:95:a2:
70:e8:32:7a:bf:50:39:a8:39:f1:e7:60:27:c1:0f:aa:50:6e:
1f:ea:09:32:8a:2a:c1:99:de:d2:fd:b6:34:35:e9:32:45:e4:
d1:cf:cb:0c:32:62:52:ec:ed:40:93:25:d7:63:16:41:e1:c4:
92:86:e3:15:6f:44:14:2e:4c:7b:38:35:31:bd:d4:7c:a8:f5:
ab:90:97:de:ae:69:91:2f:b1:e3:ff:14:59:09:71:9f:c9:50:
ae:3a:a9:31:a4:17:87:fa:b6:ce:f1:41:52:56:62:4a:07:2b:
e0:88:ea:46:5b:ec:28:7f:6d:b3:0f:7f:73:41:2b:a5:22:63:
60:eb:06:75:e2:f9:d0:cb:f9:fd:92:6c:ab:80:b4:5e:53:41:
77:d3:dc:70:92:24:ec:15:0c:cc:be:21:a6:e7:ed:90:2b:60:
06:44:76:39:eb:1a:d9:8a:36:65:66:46:03:07:ca:71:a7:32:
8a:d0:0f:c4:83:7e:3a:4f:44:15:e2:e5:40:18:2e:50:5b:43:
e0:ad:21:a1:60:9d:cb:94:b7:db:0e:6a:e6:af:dd:6b:5a:cf:
0b:d8:eb:9d:ea:48:74:f0:de:5b:05:32:16:82:52:99:49:46:
c5:00:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:47 2026 by rpki-client