
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399.cer
File: 2328a8c9-308b-4876-95dd-0dc937d46399.cer (raw, json)
Hash identifier: ElCpg/EySNk8UpsKZSothMp6ki+UOPCDlv5IQ8wE2jw=
Subject key identifier: AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D7EE631510D4C5C29C9D4D780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Apr 2026 18:57:14 +0000
Certificate not after: Wed 12 Jul 2028 19:39:44 +0000
Subordinate resources: AS: 402385
IP: 23.156.84.0/24
IP: 2602:f3fe::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:e6:31:51:0d:4c:5c:29:c9:d4:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 13 18:57:14 2026 GMT
Not After : Jul 12 19:39:44 2028 GMT
Subject: CN=2328a8c9-308b-4876-95dd-0dc937d46399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:93:36:09:73:91:28:44:2d:33:7e:8e:1c:
9f:17:40:bf:bd:d0:71:da:d5:04:22:6c:be:1f:3b:
fa:38:4b:92:c2:f0:9a:36:4d:f7:58:84:b3:cb:32:
32:79:24:a3:73:64:ca:b8:7d:ed:ff:87:d3:96:da:
35:fb:c4:28:8b:01:fa:af:0e:ad:02:f8:1a:b2:87:
a6:54:e1:fc:a5:09:09:02:df:8d:c9:33:eb:60:f0:
de:27:ab:f1:7a:fa:24:00:1d:2b:d6:f7:b2:94:ef:
83:3a:de:00:2f:fa:c4:a3:1c:ec:10:47:87:f0:ef:
5a:05:3d:47:d5:88:16:e9:0b:71:27:07:c8:90:cc:
7d:2e:32:7b:da:5b:0c:9e:ad:f3:f7:87:b9:ee:09:
2a:31:ec:ac:6e:5b:7d:1d:28:77:3c:21:31:8e:8c:
2d:b2:60:8a:c5:83:85:e6:de:0e:2f:fb:40:15:ae:
ce:84:d5:4e:10:84:3e:af:90:89:06:30:5d:52:55:
62:50:2a:ea:48:a5:49:80:69:cc:7b:a6:86:ba:45:
70:1d:69:cc:51:49:94:cc:2d:68:eb:ce:3b:84:3e:
b7:cb:43:41:76:26:e6:e3:2d:98:07:07:a9:26:d4:
a6:5c:e8:9f:59:b9:bc:ce:fe:ed:78:1c:a7:6d:e0:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.84.0/24
IPv6:
2602:f3fe::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402385
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:ff:fb:bf:03:01:3e:3b:72:26:8d:bf:0f:7d:b7:8a:39:6b:
0f:2a:e7:a3:95:67:f6:5e:39:9d:f1:fe:fb:cd:f2:e1:7f:0a:
d7:2b:2c:45:e8:cc:8c:97:05:58:26:1f:18:79:56:7b:3e:e6:
95:df:b4:7e:5c:8e:8d:00:f4:4f:ca:ef:b3:6f:94:25:60:36:
50:bb:fa:a0:5c:9d:90:19:30:a4:55:46:38:90:0c:27:14:d0:
a6:41:7f:e7:b8:95:fc:cc:9e:7d:ef:66:3c:31:e6:7e:b2:34:
dc:e1:e2:2c:0d:8a:11:12:fc:25:d1:c3:25:bd:1f:3a:c0:57:
df:55:09:df:36:36:15:6a:3b:69:66:4c:3b:e0:de:71:20:97:
2b:bd:c7:0f:bb:ab:8a:48:61:e3:8c:a6:a1:75:34:e3:12:d3:
6a:4e:65:08:89:41:99:dc:cd:95:84:36:7a:47:66:05:f0:46:
d4:82:4c:cb:03:45:2d:ae:f8:48:3f:f1:c2:90:df:dc:4d:53:
5a:e3:0f:82:0c:b3:e2:49:37:69:90:a3:97:90:63:9a:63:ad:
d5:b6:81:62:ad:0e:ec:a3:98:f3:f4:bd:0e:f2:90:86:9a:63:
54:8f:8c:dc:61:dc:20:0d:b6:d9:60:11:99:f6:23:65:b4:71:
94:40:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:46 2026 by rpki-client