
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/10018cd4-57ce-444c-9ad2-9f478251e4ec.cer
File: 10018cd4-57ce-444c-9ad2-9f478251e4ec.cer (raw, json)
Hash identifier: zvUiQIBbvWyHLe0TDcqaQD2en+Z3LaDe8p8z/ztGpAk=
Subject key identifier: 8A:82:7A:1A:D0:FC:4D:E6:F3:57:BD:B8:4A:F8:DE:9F:65:F3:94:0A
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D6302DC0FD3F97E07A67E87C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/10018cd4-57ce-444c-9ad2-9f478251e4ec/10018cd4-57ce-444c-9ad2-9f478251e4ec.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/10018cd4-57ce-444c-9ad2-9f478251e4ec/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 03 Apr 2026 19:12:22 +0000
Certificate not after: Thu 06 Jul 2028 19:12:22 +0000
Subordinate resources: AS: 400732
IP: 23.140.136.0/24
IP: 2602:fb59::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:63:02:dc:0f:d3:f9:7e:07:a6:7e:87:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 3 19:12:22 2026 GMT
Not After : Jul 6 19:12:22 2028 GMT
Subject: CN=10018cd4-57ce-444c-9ad2-9f478251e4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:53:53:3a:f8:f2:53:95:70:c2:67:06:9d:
52:9a:4a:33:69:2d:27:a4:a2:87:d1:d1:4a:b8:86:
a2:d5:3c:f7:17:3e:58:1f:92:20:0e:57:d9:a7:43:
97:b9:48:05:21:9f:ec:59:7c:1e:57:72:af:f2:6d:
12:c8:b7:95:87:37:b0:6a:bd:91:86:b2:db:d0:cf:
06:a0:85:93:e9:bb:0f:e9:6f:d4:30:78:50:25:47:
39:9e:85:6f:c9:20:fb:04:68:fa:b1:36:29:b8:ce:
f4:ad:90:db:2d:17:6a:07:a4:97:18:fe:e9:38:1b:
d5:9d:54:fa:7e:b5:75:8c:f5:5a:31:8a:ef:06:ee:
f7:76:67:8f:b6:12:e1:a9:c8:00:70:37:36:b6:84:
22:d1:7d:a2:b4:5d:8b:f4:d4:fc:eb:88:4b:4c:a7:
06:ab:6f:fa:35:23:2d:07:49:c1:46:cb:44:4e:2e:
44:68:b7:aa:52:a6:a9:fc:6b:f4:49:69:45:05:69:
31:a8:26:c3:a6:96:48:54:a8:78:b8:fe:79:18:3e:
3c:45:17:eb:8e:e3:41:5c:dc:ef:a7:c6:33:1b:af:
94:56:fb:eb:e8:e8:a9:2e:32:85:bf:84:d3:5c:35:
0a:6d:81:59:44:78:9a:aa:9f:cb:7a:02:f4:4a:42:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:7A:1A:D0:FC:4D:E6:F3:57:BD:B8:4A:F8:DE:9F:65:F3:94:0A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/10018cd4-57ce-444c-9ad2-9f478251e4ec/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/10018cd4-57ce-444c-9ad2-9f478251e4ec/10018cd4-57ce-444c-9ad2-9f478251e4ec.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.136.0/24
IPv6:
2602:fb59::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400732
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:8e:10:ab:8e:ea:61:6b:be:8d:92:7d:0b:7f:3a:0b:b0:d2:
e7:7d:e1:96:e9:35:fa:4e:e2:67:b8:74:1f:79:3d:80:c4:c8:
d3:2f:3f:92:ea:b6:e2:81:bd:8e:35:89:41:f2:b7:27:95:36:
48:4d:3a:b5:ca:c4:55:f5:4d:9f:a5:70:04:c3:4e:bb:42:a1:
c7:d3:ab:b7:1b:e4:dc:e2:af:c8:cd:6b:d7:99:e2:0f:7c:bb:
cc:a3:c1:91:81:0c:75:0e:fd:f7:8a:31:ab:75:31:82:73:be:
fa:75:7c:47:f4:e8:1e:a9:0b:c6:ee:99:66:28:9b:7d:b8:13:
63:24:e2:58:f3:48:31:85:09:c4:b9:a4:36:79:a4:9b:d3:ae:
fd:04:89:3a:07:d2:f6:7d:de:64:1f:5e:fb:96:66:d3:9b:e3:
84:83:ba:16:82:6e:c0:6b:dc:4b:da:09:1a:a7:99:c3:74:04:
7b:30:fc:91:a4:86:58:fa:50:7b:56:b4:70:dc:61:81:67:1b:
04:fa:f2:87:6b:a9:30:1f:6c:2f:2c:3c:4c:ab:ee:80:b4:fa:
71:b4:45:f8:92:af:1f:2b:0e:d4:27:0a:1f:d1:1f:9b:b4:90:
35:3b:eb:35:c6:91:aa:1e:dc:65:0d:2c:f6:c8:0d:20:f1:de:
1f:25:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:10 2026 by rpki-client