
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fd3679e6-703a-42c3-b57a-8861c84a400e.cer
File: fd3679e6-703a-42c3-b57a-8861c84a400e.cer (raw, json)
Hash identifier: 5Dw9m5TEI6oREe0ugUxfhq5JWnVmncCy8PTuR6q56+c=
Subject key identifier: 7E:D6:15:A3:7E:C8:CA:EE:58:5E:65:30:DC:CF:62:94:1D:91:A4:4E
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CCE1692BBC8092C5237C9FBE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fd3679e6-703a-42c3-b57a-8861c84a400e/fd3679e6-703a-42c3-b57a-8861c84a400e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fd3679e6-703a-42c3-b57a-8861c84a400e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Feb 2026 10:56:38 +0000
Certificate not after: Sun 14 May 2028 09:56:38 +0000
Subordinate resources: IP: 23.151.108.0/24
IP: 2602:f497::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ce:16:92:bb:c8:09:2c:52:37:c9:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 9 10:56:38 2026 GMT
Not After : May 14 09:56:38 2028 GMT
Subject: CN=fd3679e6-703a-42c3-b57a-8861c84a400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:dc:ee:21:af:59:d9:33:2e:eb:fa:2e:57:
c9:7b:7c:b6:20:8d:3a:77:47:70:b0:9e:ef:f8:c8:
0d:c6:ed:74:72:2a:fb:7e:cb:e2:b5:43:4c:df:9b:
73:ff:dc:e4:ad:53:da:6f:5d:6b:cb:af:38:57:28:
aa:23:e4:5b:68:d0:fb:1e:ec:c6:c5:20:8f:6a:39:
e7:cc:89:42:9f:76:96:6c:b9:aa:02:13:f0:cc:38:
03:f4:9b:41:e4:e8:fa:09:4c:60:42:97:c6:00:04:
50:c3:26:a2:af:bf:2a:2b:9e:93:19:ca:d5:19:71:
a1:ac:8d:b1:ce:cc:9a:fb:68:67:d0:9e:7c:8e:9a:
dc:9a:8d:b4:20:11:9d:a2:fc:f9:67:c6:11:00:71:
2e:a0:d0:c9:4a:a4:ea:82:6b:d7:7d:f2:c2:03:2e:
ea:cd:4d:cb:1f:f4:3e:5d:f5:a6:d0:d9:99:4d:33:
6c:72:d3:6f:43:87:26:80:26:34:5b:de:2c:9a:36:
fb:4c:8a:5b:38:20:b1:80:2b:0a:0a:4f:13:bb:12:
ed:9d:ca:0b:8b:35:10:e5:50:4a:1d:1a:e9:d8:5b:
bb:f3:25:ab:7c:c6:25:ee:22:f7:c7:d4:43:00:70:
ed:a9:91:34:96:72:ca:60:69:b5:cc:a8:ac:dd:d2:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:15:A3:7E:C8:CA:EE:58:5E:65:30:DC:CF:62:94:1D:91:A4:4E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fd3679e6-703a-42c3-b57a-8861c84a400e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fd3679e6-703a-42c3-b57a-8861c84a400e/fd3679e6-703a-42c3-b57a-8861c84a400e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.108.0/24
IPv6:
2602:f497::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:4a:78:99:d7:1e:43:67:d3:fe:5e:21:e9:fe:b4:d2:21:41:
27:1e:d2:02:59:01:e5:1b:e9:5d:dd:79:58:e0:17:49:55:ae:
8c:19:09:27:3e:50:2d:1a:3e:a9:14:01:62:53:34:0c:62:a9:
ac:de:4a:12:34:cc:38:50:7e:e7:7c:27:a2:99:95:cd:83:e6:
9f:d9:57:83:eb:8e:ff:46:09:ab:17:58:f3:e9:34:1a:8e:8e:
ae:d9:61:8f:81:c7:25:fb:5e:c7:a8:e8:b3:25:ad:d5:5f:f3:
5f:2c:d3:11:88:e1:af:9e:16:47:10:49:25:4a:b9:5e:25:db:
9a:7d:0f:ac:8b:79:4a:4e:b6:fe:c5:eb:88:0a:72:dd:08:df:
2a:e7:cc:3f:cc:98:57:1b:2a:71:26:16:d4:da:ed:92:c1:50:
64:6e:88:b6:66:e7:d1:32:8f:ff:87:23:39:a3:2e:ae:7b:8c:
79:93:0a:b5:1b:5f:ac:a2:0d:2e:63:4e:74:85:77:77:56:7f:
ba:7e:25:98:f2:93:b1:4a:4c:d2:53:2f:23:b7:d2:9c:0f:b2:
82:e3:98:cd:d0:8c:71:03:49:3b:53:5f:c1:6a:b9:ee:70:e4:
ef:97:54:1f:61:2c:6e:aa:d4:bd:82:50:4f:5c:a2:60:26:c2:
08:6d:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:25 2026 by rpki-client