
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8.cer
File: 65443887-0807-4b1f-82f3-c04f3da375a8.cer (raw, json)
Hash identifier: GJqBRU5wa01m/NB5EMg7xxJs7EfLGx3SMDrtRUPpv2Y=
Subject key identifier: 3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CED5B5ECACCD4C0801525CB40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 20 Feb 2026 15:45:19 +0000
Certificate not after: Thu 04 May 2028 15:07:58 +0000
Subordinate resources: AS: 402164
IP: 23.144.84.0/24
IP: 2620:5a:d000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:5b:5e:ca:cc:d4:c0:80:15:25:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 20 15:45:19 2026 GMT
Not After : May 4 15:07:58 2028 GMT
Subject: CN=65443887-0807-4b1f-82f3-c04f3da375a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2c:4b:f5:74:41:67:5e:df:25:c8:82:62:fb:
74:54:73:7e:2a:8e:3a:5b:45:17:dc:e9:e7:2a:6e:
3b:51:29:63:5a:d5:1f:9f:71:81:e5:7d:c5:b3:29:
cb:03:87:7e:02:46:96:05:a2:bc:55:9f:dd:ce:6b:
c7:43:cd:21:84:44:0b:a5:55:20:0e:99:ef:37:ea:
fb:20:15:02:5a:1d:fe:4b:b8:dc:a6:96:be:1f:55:
41:a2:f7:f4:4c:de:3f:70:54:00:86:fd:dd:e8:56:
65:b0:03:6f:d0:59:8d:80:47:de:3c:27:e6:7a:49:
e2:b6:69:74:d2:5a:64:b8:21:f9:42:44:2f:f5:f2:
54:e3:12:4c:8a:39:de:a9:4c:22:64:87:d1:c8:19:
11:12:7e:60:3c:19:64:87:4d:56:7c:f1:f6:d0:05:
a3:b2:64:0d:ec:ef:77:83:3e:3b:66:e0:9a:0a:b4:
98:a2:7a:d5:99:9c:36:3d:13:8e:a0:5b:e4:ee:e0:
0e:a1:f2:6b:bd:b1:83:f5:54:9b:bc:98:7f:3f:cf:
1c:36:2f:5f:6b:8e:43:ff:41:d8:9d:dc:93:02:ef:
ea:57:ff:bc:a0:d3:d0:55:fd:38:ff:a5:96:b3:7e:
97:f6:8c:1c:6d:34:fb:d1:a3:ba:d1:39:78:4b:b2:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:6B:B7:FE:3B:78:FF:BF:70:88:3E:A0:C2:56:04:AE:DE:D3:1B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/65443887-0807-4b1f-82f3-c04f3da375a8/65443887-0807-4b1f-82f3-c04f3da375a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.84.0/24
IPv6:
2620:5a:d000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402164
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:33:58:d0:4c:f7:99:42:2d:5a:5f:d5:57:71:1b:82:04:49:
e8:bf:eb:34:10:42:0d:aa:78:31:cd:a8:d5:6e:00:74:cb:69:
4b:d4:6e:ea:4b:52:89:e4:86:41:69:9a:70:87:b8:4a:2c:6e:
be:1e:7f:fd:50:ec:38:96:44:74:d9:f0:21:a2:6e:68:69:69:
3d:47:72:bc:89:1e:05:6c:b0:78:95:35:5b:a2:ad:be:f7:f3:
1e:4d:b7:99:51:80:dc:e4:ba:cd:1d:53:50:4b:ba:20:25:33:
87:fe:a8:dc:5d:5c:2e:d3:31:a9:ac:84:5d:01:74:89:fc:b2:
3e:6e:75:cb:e0:be:e1:87:b9:4f:32:0c:2a:09:b2:c8:af:8b:
3f:78:33:d1:54:2c:27:5f:23:67:ef:aa:44:20:fb:67:d2:43:
04:3a:70:4e:dd:7f:d5:5b:f0:4d:b3:85:a1:b0:ee:d8:44:25:
87:99:0a:03:26:71:e8:44:0a:7f:69:e6:12:ce:3c:af:57:f2:
c6:08:66:df:62:48:8c:d1:4f:bc:a3:b4:94:b4:d1:ae:34:93:
f1:a0:bb:b1:3d:f5:e9:ee:ea:c3:19:71:5f:fe:80:f3:1e:6e:
2c:92:f2:fc:83:62:2d:e3:8a:db:68:42:4b:13:b2:22:32:e0:
3d:a7:42:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:14 2026 by rpki-client