
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bedb46f6-4d86-4364-b4fd-2a771cf44af5.cer
File: bedb46f6-4d86-4364-b4fd-2a771cf44af5.cer (raw, json)
Hash identifier: beWS0s6lXpdal/ihA738FRXCqR9gVdIMNRGvcNCgbCo=
Subject key identifier: F9:08:20:15:14:01:6A:06:4B:C4:F5:12:7D:B0:A4:34:AE:45:95:65
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD660E8D85EB57874CA798DA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bedb46f6-4d86-4364-b4fd-2a771cf44af5/bedb46f6-4d86-4364-b4fd-2a771cf44af5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bedb46f6-4d86-4364-b4fd-2a771cf44af5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Feb 2026 10:12:53 +0000
Certificate not after: Wed 17 May 2028 09:12:53 +0000
Subordinate resources: AS: 396221
IP: 162.252.35.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d6:60:e8:d8:5e:b5:78:74:ca:79:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 12 10:12:53 2026 GMT
Not After : May 17 09:12:53 2028 GMT
Subject: CN=bedb46f6-4d86-4364-b4fd-2a771cf44af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:d3:60:89:bb:4d:f8:a7:2f:b1:f4:98:ee:
22:b2:bc:d7:82:3c:1d:d8:3a:1f:db:4e:61:a7:43:
20:e2:58:fa:af:1c:7d:3d:c5:50:af:db:e7:0a:e8:
0c:7a:ef:63:e7:f2:f2:d0:79:16:18:53:2a:61:73:
4a:13:f0:ba:54:23:6c:ad:93:0f:ed:2c:c7:03:01:
fa:72:6c:ac:9a:75:49:a5:da:d5:8d:92:ca:5c:5f:
fa:cd:1e:2f:ce:55:05:2b:18:db:d2:d6:4b:7f:43:
b5:b3:39:4b:1d:92:cf:51:5a:e9:12:9c:84:28:ac:
79:1c:45:73:e6:b5:ed:27:59:c4:15:86:4a:a9:87:
e1:18:3b:db:33:09:2e:21:7b:19:ed:f7:2c:19:63:
9a:ed:0a:87:41:d5:47:07:34:e2:06:9d:7d:49:b1:
38:ea:7b:89:fe:ac:02:6a:21:d2:97:fa:2f:b2:cd:
87:45:1c:a4:f5:c9:0e:a1:42:86:d9:75:30:9e:2b:
57:28:d4:8a:68:dc:6f:99:e6:6c:be:e8:2c:7d:b6:
f9:95:25:b7:16:2e:bf:d5:04:da:08:81:1f:a2:6d:
06:ff:5d:bf:92:e7:52:29:be:ec:cc:3f:d8:77:8a:
ee:b3:f0:9f:90:d7:d5:02:20:65:77:2e:92:41:d2:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:20:15:14:01:6A:06:4B:C4:F5:12:7D:B0:A4:34:AE:45:95:65
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bedb46f6-4d86-4364-b4fd-2a771cf44af5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bedb46f6-4d86-4364-b4fd-2a771cf44af5/bedb46f6-4d86-4364-b4fd-2a771cf44af5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.35.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396221
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c5:19:f1:d4:ab:6c:17:5e:ff:a3:f6:20:cc:45:36:41:07:
e4:58:28:21:9e:35:07:be:31:fd:db:81:e4:c8:9f:36:d9:94:
91:ce:b2:f4:db:b2:70:d0:7c:79:79:d4:ca:7d:8a:23:03:f8:
de:1e:7b:7b:0f:5d:ae:f2:eb:af:1d:ea:be:48:7d:c4:b7:0f:
e4:3a:f0:59:0a:4e:69:56:d0:96:3e:17:fb:96:08:be:cb:39:
e0:7c:28:34:43:69:28:0e:81:0f:1b:f0:3d:91:a7:47:8b:da:
03:6b:6d:84:ed:fb:17:da:83:2f:5b:1d:56:ec:3b:30:2a:6c:
5f:21:c1:be:e1:9d:af:da:b9:ff:4c:51:e7:c8:7e:40:e7:3b:
27:0f:03:27:77:56:cb:44:19:1e:84:c4:fa:ff:5e:80:3f:a5:
2a:d3:d1:61:da:f7:0f:c4:cc:ac:c4:b3:ae:21:de:7a:76:66:
ec:4d:40:e3:3d:db:c8:7c:3c:62:82:4e:0b:40:2d:f7:84:fb:
cd:69:39:c0:16:bf:55:44:e8:26:b9:06:5f:07:94:fd:98:69:
c9:aa:9b:91:f5:6c:4b:8e:ec:6a:06:21:be:fb:87:bc:83:5e:
ea:39:5d:22:01:0a:de:4b:d3:e8:1e:9f:5b:1f:51:ac:63:3f:
d8:cf:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:11 2026 by rpki-client