
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/012e0612-f171-40ac-88ab-19e006e64084.cer
File: 012e0612-f171-40ac-88ab-19e006e64084.cer (raw, json)
Hash identifier: ndbePPjqvrmg8gpxIyDpCMRMLr0234vePMLZSdJ22y8=
Subject key identifier: 48:79:97:C4:E6:F1:E2:50:7F:CC:2D:04:25:E3:D5:5B:36:02:62:50
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D5D2DE234F18A2CD662CAEB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/012e0612-f171-40ac-88ab-19e006e64084/012e0612-f171-40ac-88ab-19e006e64084.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/012e0612-f171-40ac-88ab-19e006e64084/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Apr 2026 17:04:12 +0000
Certificate not after: Tue 04 Jul 2028 17:04:12 +0000
Subordinate resources: IP: 169.146.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5d:2d:e2:34:f1:8a:2c:d6:62:ca:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 1 17:04:12 2026 GMT
Not After : Jul 4 17:04:12 2028 GMT
Subject: CN=012e0612-f171-40ac-88ab-19e006e64084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:2c:af:22:ee:36:11:d0:1f:28:92:a9:38:
96:57:4c:0a:a6:81:4e:e8:92:61:2c:d1:7a:1c:82:
85:26:47:5f:81:c5:17:be:fd:60:2a:18:46:3f:ec:
b7:00:e9:de:29:59:4d:a4:76:3c:1b:23:71:eb:05:
7f:33:bf:37:de:c1:62:96:66:df:b1:bd:d8:a7:ae:
92:07:d8:14:53:f9:5a:d8:79:aa:5a:e9:a4:7c:c1:
66:03:08:a9:dc:4f:ee:81:1e:0d:82:9d:89:73:57:
06:cf:37:2c:68:96:a7:2c:eb:cd:c5:93:0d:71:b4:
49:03:7b:ed:8c:47:7c:97:1d:a7:9a:c1:64:0e:a6:
45:a4:25:8b:a9:18:2c:84:ea:9f:27:1a:fb:17:b7:
fe:86:ef:7e:52:a0:46:bf:dd:11:23:b6:d6:93:77:
a7:f7:a0:7b:5e:7f:6b:1e:ec:f1:f1:bb:29:76:05:
d1:c6:fc:01:84:29:0f:bf:c0:a8:5b:f2:9b:10:d0:
31:fc:17:f9:61:21:c1:3f:e2:6e:43:39:a2:9f:6f:
09:ec:9f:3b:e6:34:54:50:2e:84:4c:6b:0f:dc:b2:
bf:d9:f5:b2:e6:9f:6e:23:39:5b:a2:4c:16:1b:f1:
9f:2d:0d:b8:ad:f5:ae:4d:48:3b:8f:29:98:5e:97:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:97:C4:E6:F1:E2:50:7F:CC:2D:04:25:E3:D5:5B:36:02:62:50
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/012e0612-f171-40ac-88ab-19e006e64084/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/012e0612-f171-40ac-88ab-19e006e64084/012e0612-f171-40ac-88ab-19e006e64084.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
169.146.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:eb:40:79:fb:7c:8b:ee:a5:ec:3d:89:30:4a:c9:45:67:e2:
4d:81:da:a5:37:90:6a:99:78:29:07:41:03:a6:f6:49:e9:bf:
6b:84:1f:37:af:6a:9b:fe:ca:d1:8a:c5:42:81:20:76:82:b1:
8c:75:4b:d4:e2:c0:c2:50:1d:c3:84:73:40:04:5a:b9:27:c7:
19:1f:88:c9:d1:27:36:f0:72:15:ca:a7:f6:9b:2b:44:3b:54:
4b:37:c7:20:8a:a4:1f:e8:1b:13:6d:d6:f3:b3:93:22:91:cd:
c4:01:86:4f:5f:b6:59:eb:24:f6:e3:b0:e1:47:92:6c:8a:73:
b3:89:93:07:5b:60:4a:bf:99:c8:6b:ba:2d:f0:14:8b:9c:25:
ad:49:53:6d:ec:89:23:fc:e4:22:78:02:dd:7e:59:15:49:ce:
d5:bd:b1:58:b3:04:a2:d9:f8:88:77:10:49:19:9f:2b:38:fb:
e3:f7:35:5e:f6:24:90:9e:d9:22:63:02:98:81:23:72:1d:9a:
b4:23:06:02:f0:ba:f5:20:f5:ef:30:04:5a:90:08:9f:c2:e9:
9d:79:b7:5e:29:90:2c:03:39:a0:3c:be:fd:54:af:64:b8:f7:
3c:24:5b:7f:4e:b3:fb:7c:27:2c:a7:1d:6f:cf:c6:c9:38:2a:
1f:e4:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:53 2026 by rpki-client