
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer
File: fb993146-757e-4177-9a61-207cb7b716c0.cer (raw, json)
Hash identifier: a82Z5Odu6djHxSRQzQ5k4yDN9RQ9DF93JhDD4RNF96I=
Subject key identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D825D9EAA77288E2CA17CFFC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 15 Apr 2026 00:45:17 +0000
Certificate not after: Tue 18 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 32598
IP: 23.150.136.0/24
IP: 2607:2fc0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:82:5d:9e:aa:77:28:8e:2c:a1:7c:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Apr 15 00:45:17 2026 GMT
Not After : Jul 18 00:45:17 2028 GMT
Subject: CN=fb993146-757e-4177-9a61-207cb7b716c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:ea:e2:ee:85:87:31:91:3e:3e:8a:0c:5b:
f8:b9:07:97:ba:21:2a:36:85:7d:d0:21:5e:58:9f:
a6:dd:84:0b:44:f1:17:56:09:e6:58:fe:65:17:94:
43:c7:ba:02:12:e9:f6:58:0c:59:68:d4:f8:94:05:
79:28:1f:ed:da:9f:25:28:8e:52:8b:ab:47:31:3d:
54:ec:e9:f5:06:3d:0a:08:da:87:a7:3e:8a:81:78:
a4:5a:a5:a1:fb:77:d3:6c:cc:14:1f:27:8d:e5:d5:
cb:16:ae:dd:1f:c8:26:28:87:e3:e4:79:a0:93:21:
e6:a6:23:ea:ef:a4:dd:4d:1c:3a:16:1f:28:fe:66:
fa:63:83:36:8b:df:39:20:c1:3f:16:99:41:9d:48:
46:98:5c:37:4b:6e:82:93:00:9b:25:15:22:38:b0:
0a:0a:1a:b2:0f:33:65:ce:1e:3e:5e:8f:ad:ab:b9:
cf:3c:8e:8e:47:99:ea:31:c0:96:9d:ed:df:cc:fa:
ec:9a:09:20:c9:ee:da:9f:83:47:5f:28:07:f4:e2:
53:e7:8c:67:e4:60:de:d5:21:ed:bb:13:6e:67:ff:
23:f1:e0:72:c7:bb:3f:84:a4:e5:0f:78:82:1a:d0:
0c:b9:81:da:b4:b2:14:92:91:fd:28:52:92:fb:5e:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.136.0/24
IPv6:
2607:2fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32598
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5a:67:6c:cc:59:63:1e:ae:d7:36:2e:dd:08:c5:16:a9:3b:
70:0a:73:67:71:6c:ec:3a:8e:02:86:a3:6a:e0:8b:95:22:41:
4b:7f:9a:67:68:98:59:f2:d5:2d:e7:e7:00:03:34:92:81:d5:
b3:53:8c:f6:65:4f:c8:38:45:4f:93:1b:27:02:93:40:86:8c:
7f:91:f4:32:6f:c9:f6:52:2a:b6:1e:07:5e:be:83:b6:7e:ac:
57:9f:02:1b:82:88:9e:5a:ea:d8:c7:ab:de:57:6f:1b:7f:0f:
1c:d0:90:78:14:a0:f3:21:5e:cc:59:f7:24:1d:2d:5f:58:09:
0f:68:db:9c:e9:51:ec:6e:3b:f9:a8:ef:a9:52:c9:12:8c:2b:
62:61:d6:92:45:b0:58:01:14:ea:62:27:06:bf:6a:f1:79:a1:
d5:fc:2b:e7:d9:b4:cd:d6:a6:1a:8e:0f:7a:90:88:01:52:88:
07:68:05:08:53:7b:8c:78:71:eb:53:8c:b8:b6:f3:10:3e:f9:
0d:04:13:20:5d:26:06:4b:0b:26:24:ff:0b:88:0b:d4:8f:df:
dd:19:1d:e3:48:f8:6b:74:98:c6:3b:19:4d:83:f1:82:68:3f:
8d:db:c6:c1:a7:7f:a4:c7:2c:0c:5d:c6:f1:9f:f9:1d:0d:b5:
d5:6a:8f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:49 2026 by rpki-client