
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.cer
File: 21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.cer (raw, json)
Hash identifier: d9DMm7Q3+v5IQ6IeO7y+qz9cNqm5nCs9GPsHl8E5gFw=
Subject key identifier: 9C:F3:5C:78:76:1F:1C:6F:4B:D4:CC:20:7A:B8:13:45:39:00:62:91
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F9E90F08700B82A0B175C1200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 25 Oct 2026 12:45:12 +0000
Certificate not after: Sat 27 Jan 2029 13:45:12 +0000
Subordinate resources: IP: 23.142.92.0/24
IP: 2602:f5cb::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9e:90:f0:87:00:b8:2a:0b:17:5c:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 25 12:45:12 2026 GMT
Not After : Jan 27 13:45:12 2029 GMT
Subject: CN=21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:cb:20:aa:29:5c:ee:c7:11:df:13:ed:cc:
5e:59:d0:70:f5:3f:5f:52:c6:bb:85:d1:7f:13:ec:
df:a8:3c:3d:6d:25:04:bd:63:1b:da:12:82:3d:da:
ee:b7:3e:1f:94:84:f8:53:a8:7f:55:84:30:95:09:
a4:57:55:55:3f:13:94:6b:cc:67:27:e3:88:7e:db:
8f:e2:07:d4:d4:0a:ea:e3:6b:8d:3c:e4:5b:42:07:
e0:98:99:0b:35:31:ce:6a:0b:16:17:4e:ff:d4:a9:
cd:79:16:d8:f4:59:7f:09:f5:0c:22:7b:e2:17:d8:
72:0a:41:c6:93:49:3e:a9:75:95:61:eb:4e:64:4c:
29:f2:ca:4a:fa:09:f1:69:4b:54:f9:5d:ae:f8:e1:
0c:81:15:8d:29:0f:52:f9:c4:b5:ed:42:15:fe:6c:
fe:9f:88:5f:68:59:0d:94:b7:d3:9d:cc:98:1d:ea:
3c:d2:df:3b:26:2d:be:df:8e:a7:6c:0b:67:22:1c:
9e:51:e4:ec:bf:f2:51:dc:c1:f6:1e:f2:92:29:ac:
2e:52:77:8b:7b:ce:f2:8c:5c:7a:5f:9a:e8:55:e2:
26:aa:d3:a2:fa:88:cc:f2:cd:98:12:17:c4:08:42:
f6:07:d5:66:36:8d:b0:94:c8:96:67:f9:69:ea:1d:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:5C:78:76:1F:1C:6F:4B:D4:CC:20:7A:B8:13:45:39:00:62:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43/21908ce2-9f9e-4b5b-b5dd-e351bd4a3a43.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.92.0/24
IPv6:
2602:f5cb::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7e:01:8f:ab:6c:f9:cb:00:82:c4:bd:c1:66:bb:40:e4:53:
bd:3f:38:c8:b6:dc:a5:f8:a1:4f:de:e7:1d:06:25:b6:2a:c2:
24:fe:ad:a0:f5:05:5c:12:46:5f:7d:d9:ce:ea:e1:bb:08:5b:
97:9e:59:a4:fc:94:0d:7a:24:90:d3:c9:5e:72:6b:80:c0:14:
94:64:bf:0e:e7:42:dd:fd:f9:62:3a:da:95:4f:75:08:74:e8:
97:e9:3a:7c:09:01:a6:7e:05:6d:68:55:f2:60:30:ec:48:c9:
bd:a1:08:bb:11:9f:1a:90:ee:83:77:f2:b9:aa:24:fc:29:d6:
4d:a4:66:c7:14:3c:7f:7b:f3:a1:97:34:48:ef:12:27:19:7b:
6f:5a:b8:5b:c6:41:a0:52:d5:f2:31:50:6e:82:81:bb:8a:64:
b0:3b:6a:8a:4b:13:d6:0e:c0:11:e1:e0:6c:88:70:21:2c:6f:
09:30:cb:e5:e1:60:31:d2:d9:6b:2f:22:65:82:96:aa:d5:6a:
4b:ec:c1:19:9d:da:07:b8:74:6d:53:b9:01:76:51:a1:b2:d9:
c5:2f:01:b8:6c:02:a8:0b:1d:cb:c8:88:03:82:59:82:23:ea:
9f:c7:6f:3e:84:56:f0:d4:eb:35:45:47:04:49:78:e0:83:e3:
7d:2f:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:22:10 2026 by rpki-client