
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437.cer
File: 3120a416-64c3-4854-8826-abbafbd0d437.cer (raw, json)
Hash identifier: NVDoOJMUY/6L811Lm8W9wxmyNAn3WZS7NKQKT6TydLs=
Subject key identifier: BE:47:B1:DF:DD:C8:DA:D8:7C:DA:A8:60:77:62:D1:74:9B:51:F2:E3
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D777702DDBD57388500A9FC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/3120a416-64c3-4854-8826-abbafbd0d437.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 11 Apr 2026 03:02:34 +0000
Certificate not after: Fri 14 Jul 2028 03:02:34 +0000
Subordinate resources: AS: 398730
IP: 23.190.104.0/24
IP: 2602:f7f9::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:77:77:02:dd:bd:57:38:85:00:a9:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 11 03:02:34 2026 GMT
Not After : Jul 14 03:02:34 2028 GMT
Subject: CN=3120a416-64c3-4854-8826-abbafbd0d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:00:53:44:16:8d:38:b8:ac:03:81:87:22:
21:81:ae:c9:54:f9:7a:8c:7c:44:86:e8:60:a6:db:
1b:77:bd:fa:98:0b:39:a8:25:93:b6:72:a5:d7:81:
22:08:f3:ac:d4:63:47:e6:1f:de:0e:61:06:9a:8b:
5d:42:80:52:f3:77:cf:1a:38:66:2f:65:22:0f:dd:
d7:dd:67:90:89:04:b4:1c:4e:e7:bc:e5:bb:ca:2d:
b8:3a:1f:f4:03:df:65:fe:32:6b:dc:2c:9d:bf:18:
3e:ac:f2:a0:23:dc:20:3e:e6:fd:47:2c:a3:0c:d2:
e5:d5:2e:11:12:c1:fb:c4:7b:b4:bb:59:f8:08:9e:
59:80:43:f6:b4:6f:fc:a4:dc:c1:6c:0d:75:3d:7c:
f3:12:73:7e:4e:59:a9:7a:cb:95:4c:b8:d7:d1:1a:
46:a6:64:6b:41:08:31:be:d3:80:60:ad:91:59:92:
95:c9:bf:40:b8:1a:4c:34:ab:3f:fa:a3:c9:ad:a6:
81:7e:8c:b9:50:b1:3d:cc:37:a5:d5:51:8a:56:42:
0f:e8:6c:5d:98:f9:e8:6a:10:46:42:f1:ee:f6:db:
b8:9a:37:5f:43:44:0b:44:b5:ff:cd:be:a2:62:22:
83:0e:da:c1:0c:69:29:98:e3:75:71:76:8a:33:45:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:47:B1:DF:DD:C8:DA:D8:7C:DA:A8:60:77:62:D1:74:9B:51:F2:E3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/3120a416-64c3-4854-8826-abbafbd0d437.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.104.0/24
IPv6:
2602:f7f9::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398730
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:db:c5:77:1c:17:92:f2:a0:1a:1c:b9:c4:80:74:a2:72:24:
2f:c4:0a:8c:f0:3e:ea:2a:a5:39:c2:d8:fe:cd:f1:44:d2:57:
dd:75:4b:e4:50:df:a8:2b:25:a6:50:c5:7d:9c:d1:a9:b7:36:
75:c2:83:c3:74:05:0f:96:38:0e:b7:a6:fb:d8:44:df:db:61:
ef:9c:6f:e9:7c:92:50:1d:4b:a7:b5:b0:6c:5e:0d:eb:5b:4a:
5b:3a:95:fb:c3:fd:b6:76:7f:3a:a6:b8:0e:5b:b0:61:1e:fd:
69:82:ae:28:83:e9:41:20:b6:37:ea:57:cc:4a:68:cc:78:1c:
c1:67:c7:a2:3b:f5:22:a9:3c:80:ef:ee:02:d6:69:6f:38:62:
a1:b8:bb:dc:02:d7:8b:51:d4:b2:dd:3e:48:c9:4f:33:7c:7a:
55:85:4f:7d:66:98:76:d6:6f:bc:c0:07:fb:4d:41:b8:60:c3:
6f:cb:54:bf:9d:01:f2:94:89:e7:41:c6:d0:cf:1e:64:76:1b:
fd:66:64:5a:aa:fb:b8:63:cf:e5:2d:8f:61:ef:f0:4d:4c:3d:
b6:49:53:67:7a:70:2a:99:93:6d:ae:d3:02:47:fd:9f:b0:e4:
74:95:30:91:97:4b:3a:61:62:f8:c1:6f:51:c7:85:08:08:98:
64:ce:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:43 2026 by rpki-client