
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365.cer
File: 9f5ade9a-94ec-46e0-85bb-26aaa2053365.cer (raw, json)
Hash identifier: F0zOWglF58afXR4Clh+EfF+diEFhQr2bC4XF7DYPXMQ=
Subject key identifier: EB:59:6B:06:B2:75:48:C2:D5:58:F2:33:BB:09:6B:4D:5E:B0:7A:14
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CCE1771A2FE73AA9C4B1EC300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/9f5ade9a-94ec-46e0-85bb-26aaa2053365.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Feb 2026 10:58:24 +0000
Certificate not after: Sun 14 May 2028 09:58:24 +0000
Subordinate resources: IP: 23.151.228.0/24
IP: 2602:f487::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ce:17:71:a2:fe:73:aa:9c:4b:1e:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 9 10:58:24 2026 GMT
Not After : May 14 09:58:24 2028 GMT
Subject: CN=9f5ade9a-94ec-46e0-85bb-26aaa2053365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:0e:6f:38:61:bc:0b:e0:50:12:76:b9:3f:
45:1e:5e:12:ca:73:72:63:c8:01:74:63:73:93:14:
49:f4:14:cc:71:7f:ec:cd:03:aa:44:e3:eb:f1:21:
65:f2:ac:02:1e:02:2e:b7:2e:d0:f2:0a:19:8d:ed:
1f:2b:b4:fd:ba:fd:be:c4:e9:0d:71:f0:0b:fb:e4:
ee:8a:f6:72:0c:e8:eb:f5:20:f9:ae:51:49:a9:28:
53:9c:fe:32:b5:19:f1:e2:a6:8f:07:e5:74:33:ce:
95:21:f7:f1:d3:3f:d6:71:33:5d:17:24:29:80:78:
81:89:f8:73:8d:f1:d8:c1:ee:5e:e1:4e:3b:9b:04:
63:e7:10:57:63:01:4a:40:bb:64:75:a0:fe:4a:6e:
54:88:cd:0a:f0:09:ac:ee:04:fd:0f:ee:9f:ac:6a:
8d:78:84:74:32:a6:41:1b:07:99:eb:21:6e:89:e2:
fd:80:c7:c6:b4:e9:dc:31:92:d3:0f:f9:c1:18:d2:
ea:46:a9:5c:3d:1f:9e:e4:5a:b2:32:78:29:8c:5e:
57:4f:40:3f:7c:02:2f:bc:99:74:69:73:ab:54:d3:
b2:15:54:24:50:bc:c1:94:40:65:fc:c7:ad:92:93:
cd:5b:cc:bb:1f:e7:5d:ff:5b:89:1f:39:87:a7:06:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:6B:06:B2:75:48:C2:D5:58:F2:33:BB:09:6B:4D:5E:B0:7A:14
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9f5ade9a-94ec-46e0-85bb-26aaa2053365/9f5ade9a-94ec-46e0-85bb-26aaa2053365.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.228.0/24
IPv6:
2602:f487::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:9f:66:6e:12:2d:0d:83:54:9b:17:17:b9:c3:75:ff:5f:76:
57:b8:f6:6e:98:d2:09:1f:ff:a6:6d:12:ba:fe:60:3d:f2:e1:
16:15:3a:2b:dd:e5:36:9d:73:88:ed:02:0d:59:28:d8:94:be:
2b:e1:d3:33:0d:16:bb:89:90:b1:b8:f7:1e:e8:66:c5:44:e9:
a3:31:51:1e:0e:2f:e9:58:ef:8c:06:44:51:60:1a:0b:79:ef:
30:9b:61:9f:4a:a2:13:b9:07:65:af:0a:27:86:3b:d8:49:0c:
cf:0e:19:13:44:23:4b:33:a4:e2:93:ac:26:ee:ee:e8:96:04:
9d:58:7a:39:f6:51:80:98:91:d4:d3:7e:8e:bb:b3:de:14:53:
48:99:8f:75:65:7d:20:9a:a8:8e:bb:04:42:fd:87:bd:6e:68:
72:2b:70:99:ed:d7:fd:11:66:17:e7:f1:c8:90:35:e3:0c:38:
c5:a9:f3:2f:17:64:10:5d:32:a6:2a:18:3d:ba:26:83:a6:cf:
9d:2d:91:88:6e:45:57:0d:27:8a:ef:8b:ab:87:c0:36:30:84:
1a:79:3b:74:78:59:70:0f:e0:5b:72:15:1f:46:71:5b:63:b7:
6d:b8:2f:d7:46:67:30:de:fd:70:f2:3b:67:53:4b:20:c4:29:
7a:b2:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:52 2026 by rpki-client