
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer
File: 9e02d737-f857-4f86-b0cd-a7966c6e2ac3.cer (raw, json)
Hash identifier: qMzluvcXpqMCET0BCeNIobHbWLcZnZRZezRju+iY4OU=
Subject key identifier: B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CEE71BDCF8B244ADC7C11D8C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 21 Feb 2026 01:06:12 +0000
Certificate not after: Fri 26 May 2028 00:06:12 +0000
Subordinate resources: AS: 402212
IP: 2602:f44d::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:71:bd:cf:8b:24:4a:dc:7c:11:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 21 01:06:12 2026 GMT
Not After : May 26 00:06:12 2028 GMT
Subject: CN=9e02d737-f857-4f86-b0cd-a7966c6e2ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:62:3a:47:ec:1b:01:43:fa:5f:05:d1:2e:
86:c0:1f:19:20:07:6e:b9:8a:bb:be:a2:50:3a:63:
45:c4:52:85:cf:f2:68:73:68:96:a3:93:d8:bd:2b:
db:04:23:88:55:ac:13:8d:04:dc:a0:1a:92:ff:fc:
8c:15:95:59:34:ea:f3:55:31:ee:ee:b3:cf:ea:9a:
1e:f5:f3:48:0b:86:8d:c1:21:56:26:67:78:97:0c:
8d:ae:f8:b7:26:bd:78:30:50:ff:b9:52:73:57:c8:
98:ee:ad:47:c5:1a:a5:fd:dc:aa:8c:d3:c2:92:c4:
a9:29:04:04:98:11:8a:7c:0b:d8:35:74:f8:fd:6b:
fe:a4:93:11:87:5a:b9:d7:c7:f2:1d:46:02:5b:b3:
db:a8:e9:c1:58:0e:ff:39:8c:7a:47:e4:64:fd:a0:
43:b9:b7:4c:d2:bc:10:9c:1e:cf:c9:5a:05:bd:4f:
18:d3:74:39:9d:61:6f:39:a1:4a:5e:fc:4a:e2:2d:
df:15:31:6e:46:ad:7d:d7:94:b4:14:42:aa:0d:ca:
24:56:80:2c:cd:a2:a8:d0:f1:74:26:3d:94:42:14:
c3:0b:d7:54:1e:01:2c:f3:9a:35:67:9a:43:89:a4:
1c:ed:e9:86:22:7d:45:ce:20:a9:d8:4e:7b:95:df:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:98:4A:99:17:91:42:EC:68:51:3E:B2:F4:35:AD:E3:C1:40:DC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e02d737-f857-4f86-b0cd-a7966c6e2ac3/9e02d737-f857-4f86-b0cd-a7966c6e2ac3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f44d::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402212
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:03:d4:b1:cf:44:fd:10:64:ef:27:ac:1d:19:68:78:d9:5e:
e1:8d:2f:d9:12:70:49:6c:0f:ee:4a:22:b1:35:e8:09:ca:c3:
ce:6b:ad:5e:55:a0:f4:d6:25:a4:88:0d:f7:8b:e0:d4:5d:57:
94:60:c9:08:6d:c0:73:06:d9:6c:3f:37:0b:38:5a:0f:e8:bf:
50:da:f9:5b:a0:e7:1c:56:dd:1f:a6:98:56:c9:bc:ce:62:14:
f9:67:f5:a3:a5:2b:b4:25:3b:a0:60:fb:1b:68:15:8b:19:fc:
2e:2a:59:6f:b1:c4:f5:87:5d:07:24:57:10:c5:69:9e:49:2f:
42:20:c8:b6:e0:cd:d3:03:e6:e4:9e:de:80:74:71:57:b5:d3:
3e:3a:99:96:e9:78:2f:41:a8:b8:6a:54:a5:0e:c3:31:a0:4c:
29:4e:78:fa:4d:0b:d2:da:88:27:dc:04:60:c4:fa:d8:8e:9c:
c4:94:02:69:9a:c6:2a:ef:0a:c0:2d:09:44:37:bf:9a:42:80:
d0:f3:56:a2:73:61:c8:22:fe:52:2e:d6:6a:30:0f:09:f2:6f:
ad:35:97:0f:17:13:b2:7b:ae:e0:63:b9:dc:0d:33:62:27:89:
53:2f:b9:80:65:7b:fb:d8:b1:09:e6:f3:c7:f7:db:51:4b:ff:
6b:cb:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:24 2026 by rpki-client