
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer
File: a7c20d98-d772-40a7-b671-02859bf02e23.cer (raw, json)
Hash identifier: hdoTj4npBpuN9uId4XsGyVrSt/wz6aoim5bFGC/zsng=
Subject key identifier: 7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD721185D4A8462828E122600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Feb 2026 16:40:07 +0000
Certificate not after: Wed 17 May 2028 15:40:07 +0000
Subordinate resources: AS: 14341
IP: 23.152.76.0/24
IP: 2602:f474::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d7:21:18:5d:4a:84:62:82:8e:12:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 12 16:40:07 2026 GMT
Not After : May 17 15:40:07 2028 GMT
Subject: CN=a7c20d98-d772-40a7-b671-02859bf02e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:51:52:8c:19:01:df:0b:7e:d0:2c:d6:48:
d4:9c:dc:ee:78:31:01:29:83:d4:cf:ac:56:2b:1e:
b3:d9:db:be:45:ca:e2:c1:a6:f0:e6:94:c5:b2:7d:
45:f3:83:02:0c:b2:d2:56:02:72:b4:e8:ff:bc:f1:
b1:8a:a8:2a:a6:0d:e5:ab:88:bc:b4:a9:5c:2f:07:
1f:51:4d:85:9b:69:3a:1b:3a:56:85:92:97:50:09:
d1:bd:bc:46:fa:78:a2:87:02:46:b2:0b:e7:91:4d:
e3:12:5d:7d:84:29:67:1b:07:74:3a:ce:22:24:f3:
50:12:a4:4b:13:b8:28:35:8e:34:08:37:be:5b:38:
76:07:87:cf:44:2e:99:ff:04:2f:75:cd:b8:28:d0:
47:40:f9:78:de:b3:3a:68:86:6b:5f:c1:6c:97:b1:
0d:a8:df:10:29:53:fd:22:19:63:00:1f:fa:ea:ce:
41:2b:4e:6e:37:37:29:bd:5c:fe:3d:66:21:ed:66:
c9:a1:b5:f7:d4:56:a2:8e:e3:6d:ec:1a:46:ec:16:
26:0b:91:76:e1:0e:92:8b:cd:8b:f7:1d:80:eb:2a:
8d:64:8f:45:3f:c9:e1:68:d5:15:3e:e3:b0:40:db:
4d:b8:c5:72:d0:35:a5:6c:c0:e9:d3:1b:fd:bb:bd:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.76.0/24
IPv6:
2602:f474::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14341
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a3:1a:b5:e9:96:d2:79:a4:71:b7:e0:0c:2b:dd:ec:46:0f:
8f:20:b7:c4:c7:d9:50:80:30:75:c7:b3:8f:95:e6:21:77:65:
43:10:07:54:57:ff:65:99:e8:85:56:6e:05:d2:0b:3a:22:bb:
bc:37:2e:7d:e3:7b:a4:d6:04:19:38:ce:99:9a:4a:ba:22:07:
52:5a:69:4b:39:71:71:b5:74:0a:1a:ae:1d:97:83:5c:91:2b:
8f:73:da:a5:a5:98:2f:5b:53:f1:10:e3:08:57:1d:fc:f6:cb:
f8:17:8e:66:19:b4:36:c9:23:bc:7d:60:4d:21:13:a3:f2:ae:
17:9d:1a:44:b8:99:ba:da:c1:a5:64:2f:08:21:8a:9d:f2:60:
51:58:2b:c8:87:5f:a6:d5:fe:4d:cc:75:5b:3b:25:d4:36:3e:
40:53:0d:7f:69:b8:93:40:bf:05:70:b1:58:94:b0:ef:d7:ee:
5d:ba:b4:4b:9f:e3:7c:dc:2d:39:b1:3e:6f:9f:d3:22:5f:ff:
46:81:8c:50:b9:66:09:95:d1:a3:f5:02:58:8b:2f:f6:26:53:
81:0b:95:01:74:6d:cb:77:e0:fd:f7:b9:94:f5:8a:9b:4c:24:
68:9b:c0:4c:56:23:49:30:2d:58:12:7b:21:69:87:36:4c:c7:
0c:cc:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:08 2026 by rpki-client