
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.cer
File: f769d6bd-b4ab-4fe6-b057-419528f2f4f4.cer (raw, json)
Hash identifier: RvkbECsUqA6VSWfXNdAZvy30WaZm9//26jIjfahuVPo=
Subject key identifier: 44:26:C5:2E:71:00:E8:A5:EE:D6:2F:77:80:48:71:0B:E1:2F:20:B6
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D87E8044A5CCB5B12C9CEEC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Apr 2026 00:23:11 +0000
Certificate not after: Thu 20 Jul 2028 00:23:11 +0000
Subordinate resources: AS: 402397
IP: 23.156.188.0/24
IP: 2602:f3f3::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:e8:04:4a:5c:cb:5b:12:c9:ce:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 17 00:23:11 2026 GMT
Not After : Jul 20 00:23:11 2028 GMT
Subject: CN=f769d6bd-b4ab-4fe6-b057-419528f2f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:40:26:24:0a:f0:83:39:4d:11:23:b7:3c:
55:a0:9b:f4:af:15:37:6d:f1:eb:41:72:a3:19:41:
6c:d8:78:6a:78:09:8b:27:47:1d:cf:b0:ca:d0:09:
7c:b3:ca:20:63:73:a6:d1:af:c6:ed:2b:d3:e2:c9:
3b:a4:30:63:3e:fc:26:db:67:27:86:18:6a:a0:0c:
5f:b9:b2:24:f1:98:ed:1c:63:13:16:5c:7b:d2:a9:
b2:18:8d:45:a2:28:7a:7d:d7:45:8a:ee:c1:99:8f:
05:06:d3:48:84:02:40:15:cd:21:10:40:97:bc:86:
38:91:ba:ec:03:7a:fc:02:be:5a:e3:dc:22:d9:c0:
44:a4:b8:dc:c2:ff:ea:89:29:b7:28:b5:2c:38:84:
cb:f0:c7:c9:4a:8e:c4:26:38:fd:4c:36:7b:5c:8a:
0e:88:1f:a4:ca:0c:63:17:18:ce:9b:d6:dd:4c:c2:
43:08:12:be:0e:e4:e6:d3:96:5a:39:23:de:6c:7a:
cd:89:d7:00:5d:1f:dd:9e:f3:33:f3:b9:bc:7c:1a:
73:4f:26:74:d0:6d:b4:f6:e3:f6:60:a0:7c:d1:7b:
6b:68:fe:16:14:10:fa:5e:81:4a:d6:37:7c:0f:9b:
15:ff:b6:63:05:ff:58:78:50:39:0d:d4:93:34:e0:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:C5:2E:71:00:E8:A5:EE:D6:2F:77:80:48:71:0B:E1:2F:20:B6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f769d6bd-b4ab-4fe6-b057-419528f2f4f4/f769d6bd-b4ab-4fe6-b057-419528f2f4f4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.188.0/24
IPv6:
2602:f3f3::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402397
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:c5:14:1d:fb:db:e2:49:74:bf:87:ed:76:bf:d2:b9:97:0e:
b9:10:0c:fb:14:7e:7e:67:b9:e9:0e:0f:82:e3:47:46:59:32:
5b:8b:3c:01:41:fa:7c:96:c7:3a:66:e4:26:3b:d6:3b:13:15:
77:ca:18:6a:b9:04:f9:b0:85:62:19:75:08:1c:50:23:f6:e4:
ca:6b:18:50:58:c2:a9:e7:46:71:81:b6:16:2f:d4:ab:8c:af:
2a:16:92:c2:a6:0c:1b:8d:e5:52:60:03:95:15:ae:d0:3a:de:
9f:5a:18:2f:21:d5:43:52:2d:68:a4:6f:2c:c2:b1:3d:3b:67:
30:e7:5f:a7:d3:55:3f:92:50:92:3a:82:0e:e6:8f:61:91:d0:
4a:8d:e1:b2:86:aa:73:be:45:78:b0:b3:70:1a:10:85:b9:29:
ba:98:db:b5:b6:76:fa:89:59:da:3a:e9:7f:a9:8b:07:c2:88:
00:1d:26:fe:f0:81:e3:bf:03:f7:03:52:ca:25:ef:00:bc:09:
a6:29:34:8f:5d:29:f6:6f:d1:c1:7a:e5:fe:f3:ee:f3:aa:e9:
69:dc:e7:3d:d3:17:92:92:0c:0c:b9:39:f5:55:42:7c:21:6d:
67:d4:28:18:ce:fd:93:27:8d:ca:89:50:bf:7f:c9:10:a4:79:
8f:82:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:42 2026 by rpki-client