
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/662357f1-92ff-44ec-9e58-1a1273ab47bc.cer
File: 662357f1-92ff-44ec-9e58-1a1273ab47bc.cer (raw, json)
Hash identifier: Wc+5IXt2Nc5I06CLxkEzxqtnaMW+n40TayyNvqRPxMU=
Subject key identifier: DE:37:B2:56:B7:38:0D:F1:48:0E:27:A5:39:27:E3:92:BE:72:93:A5
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D57DD68C666A85E65A295FA40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/662357f1-92ff-44ec-9e58-1a1273ab47bc/662357f1-92ff-44ec-9e58-1a1273ab47bc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/662357f1-92ff-44ec-9e58-1a1273ab47bc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 30 Mar 2026 19:23:01 +0000
Certificate not after: Sun 02 Jul 2028 19:23:01 +0000
Subordinate resources: AS: 395904
IP: 23.155.44.0/24
IP: 2602:f41c::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:dd:68:c6:66:a8:5e:65:a2:95:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 30 19:23:01 2026 GMT
Not After : Jul 2 19:23:01 2028 GMT
Subject: CN=662357f1-92ff-44ec-9e58-1a1273ab47bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:10:88:12:3e:ab:ef:33:3a:4b:ac:c4:8f:
b8:46:bb:d3:a6:61:0d:8d:45:61:dc:0c:b7:d1:42:
51:13:38:05:38:9e:76:64:37:7e:03:6a:06:c6:38:
1b:d5:ed:71:2b:e6:15:5f:8b:5f:20:bf:26:76:48:
69:5e:82:3a:64:67:9f:43:a1:f0:40:0b:5b:83:fe:
31:9d:20:2e:96:eb:8c:c9:19:41:34:06:c7:ca:61:
db:7c:c4:bb:ad:bd:a5:9a:29:aa:d0:99:96:6e:e2:
41:81:92:16:16:c4:28:ff:56:df:0c:bc:89:9a:4c:
28:36:0c:67:5e:40:5b:c4:05:7e:cd:7d:1e:aa:00:
f6:23:ad:67:78:e6:63:78:19:22:79:15:86:60:19:
00:70:46:2c:8e:07:49:33:fd:1a:99:85:dc:f0:19:
c6:1d:d7:07:f3:48:cb:29:a1:33:c8:bf:72:d0:c4:
50:70:28:8c:02:a3:8a:b3:0f:c3:d9:5d:7c:d4:26:
e1:25:7f:53:98:27:1b:56:18:4b:0e:99:e5:f7:2a:
18:17:de:b2:25:1c:8e:2c:19:91:d6:53:df:9d:46:
32:a9:dd:d3:6c:17:d9:a2:9a:cf:94:df:61:44:44:
9d:84:86:f3:f4:b2:d5:69:60:e0:69:50:15:c1:85:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:B2:56:B7:38:0D:F1:48:0E:27:A5:39:27:E3:92:BE:72:93:A5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/662357f1-92ff-44ec-9e58-1a1273ab47bc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/662357f1-92ff-44ec-9e58-1a1273ab47bc/662357f1-92ff-44ec-9e58-1a1273ab47bc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.44.0/24
IPv6:
2602:f41c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395904
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b1:4d:86:4c:61:1b:dc:b2:b3:34:ee:be:f8:ed:47:bc:6b:
fa:93:47:d8:b1:37:36:9c:72:87:6d:a8:3a:d2:29:4c:82:43:
1d:c7:70:ee:cd:b7:24:52:90:61:ff:c3:f0:6c:70:b6:26:35:
01:b0:34:65:e0:ae:26:8a:9a:90:74:13:d3:f7:33:87:35:b7:
cb:75:86:06:ae:72:22:c3:42:b6:e5:58:20:00:39:88:16:76:
e0:05:a1:da:e0:d1:3a:c5:6e:3c:19:87:de:17:e5:bb:2c:b5:
85:78:9c:b9:83:55:d7:37:d6:76:82:89:6c:3c:6a:3e:41:e1:
ac:e9:cf:d1:64:d1:10:32:42:9c:ea:57:a1:47:02:f4:8e:e9:
4a:f2:d0:c7:d1:20:aa:30:f5:54:3b:cb:df:49:50:55:dc:43:
7d:66:85:a4:b1:5a:df:a0:28:33:70:1f:1e:77:37:db:d1:49:
0d:d7:e0:8f:67:7e:0a:95:c8:42:2a:a1:75:d0:18:ed:df:f7:
30:68:55:d3:26:39:db:a5:76:a2:db:3a:df:7b:7a:85:e1:13:
1a:e3:fe:93:0b:73:eb:ce:cb:05:46:25:05:ed:8e:88:54:a3:
5c:fc:fe:60:ee:91:d5:3d:20:08:f4:e0:f3:d8:f8:35:72:b3:
77:e3:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:08 2026 by rpki-client