
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.cer
File: c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.cer (raw, json)
Hash identifier: OdEvBQzMajYdDBjZd7XpNZ48RT+/x3byIFkPlU9cKfk=
Subject key identifier: C0:74:67:0C:23:3A:E6:90:0D:2F:55:B9:06:94:32:F6:29:D0:86:47
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CEAFA84E6258C3285C91B14C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Feb 2026 19:18:33 +0000
Certificate not after: Wed 24 May 2028 18:18:33 +0000
Subordinate resources: AS: 896
IP: 23.247.240.0/22
IP: 2606:f0c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:fa:84:e6:25:8c:32:85:c9:1b:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 19 19:18:33 2026 GMT
Not After : May 24 18:18:33 2028 GMT
Subject: CN=c8dddc8e-9bc3-46e4-a1dc-ff5066958d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:d3:1b:e3:b7:60:66:70:bc:48:cd:9f:8d:
b8:d8:3c:75:40:be:13:98:fa:b8:3c:2e:43:b2:56:
e3:02:38:51:3a:11:fe:a7:ca:e2:f7:c8:e0:ed:31:
51:64:13:c9:2c:4d:b8:d1:0f:28:cb:b1:e5:48:13:
ba:9d:eb:55:73:69:ba:55:f1:2e:00:87:5a:90:cd:
ce:81:ea:d5:1f:a5:68:bc:ca:26:24:d1:fa:55:76:
83:bf:6c:d7:50:2c:e1:e5:28:dd:5f:e9:32:2b:30:
c8:9b:95:3d:e8:0a:36:d4:2c:77:a5:45:51:cc:23:
d0:a4:90:db:40:eb:fd:d5:f6:d5:1d:41:15:ca:a9:
a1:15:59:56:f8:33:21:98:4c:01:95:1e:0f:48:6f:
2c:bc:43:a6:8f:24:4b:71:c9:47:9e:fb:36:c2:3f:
d4:46:4e:04:67:26:fd:b6:cd:9c:bc:80:cf:1c:71:
7e:af:46:6e:43:47:78:e1:e3:e9:12:e0:f8:98:77:
64:18:61:55:05:ad:b2:75:3b:53:6b:2a:c2:f1:93:
d6:89:54:14:0f:64:90:ed:c8:c0:03:65:e7:e9:77:
dd:2a:84:29:b8:3e:29:f3:ed:0e:4b:e5:92:6a:e5:
2e:e7:a9:37:f8:55:fc:f5:41:8b:0f:ad:bf:11:ae:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:67:0C:23:3A:E6:90:0D:2F:55:B9:06:94:32:F6:29:D0:86:47
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.240.0/22
IPv6:
2606:f0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
896
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:99:65:70:11:91:74:68:03:4b:b0:9b:6a:88:a5:a4:b4:dc:
1f:45:b0:9d:90:7d:b0:b3:3c:eb:9f:5c:32:bc:10:da:8b:79:
da:ab:ea:3d:23:de:c6:2b:92:03:8e:51:fb:d0:78:44:f9:87:
c9:ce:0b:6a:c4:25:ef:6c:10:5d:2b:71:39:4b:b6:d5:3a:dc:
a2:89:8e:63:16:ca:99:48:b3:29:fa:70:7c:0a:59:8a:5c:92:
71:20:6c:5f:7d:3b:22:bd:fd:3e:85:f2:02:9a:8b:78:3d:fd:
7f:35:42:22:b4:57:41:79:b9:cc:00:0e:85:48:5f:df:c8:91:
d9:61:a7:a0:7c:a7:62:1e:d1:f7:b9:59:92:2d:47:3d:14:24:
b4:c5:ba:f9:28:f2:84:04:4d:49:d8:d4:57:86:23:ce:3d:70:
f1:04:f0:0b:82:cb:fa:1c:41:bd:86:cc:6c:47:fc:14:2c:02:
1d:f0:e3:7f:95:39:a3:85:8d:2f:a2:ad:98:c4:9a:f8:d3:e5:
0a:79:14:8a:31:1a:f4:23:55:35:aa:69:df:ea:75:27:7f:1f:
73:90:9b:ee:e4:b3:68:9f:7b:1c:61:b7:1c:76:0b:1d:22:78:
56:8e:24:df:6e:93:ff:3e:57:4e:34:d1:cb:73:7f:a5:ae:be:
c2:64:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:12 2026 by rpki-client