
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377.cer
File: 116ccd7e-150c-4b93-89ac-f4311fabe377.cer (raw, json)
Hash identifier: 0XxAvL+LeggCd/Alr0uYaZwGCSLvw3puZY87twuiMmU=
Subject key identifier: 00:18:8C:7E:5A:26:2F:26:F1:22:51:D4:3C:E0:E7:19:78:E4:49:2B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D11FBB7BCFDD33667F3C92E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/116ccd7e-150c-4b93-89ac-f4311fabe377.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 05 Mar 2026 18:37:30 +0000
Certificate not after: Wed 07 Jun 2028 17:37:30 +0000
Subordinate resources: AS: 36538
IP: 66.102.16.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:fb:b7:bc:fd:d3:36:67:f3:c9:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Mar 5 18:37:30 2026 GMT
Not After : Jun 7 17:37:30 2028 GMT
Subject: CN=116ccd7e-150c-4b93-89ac-f4311fabe377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:96:b7:80:6e:57:ad:0c:b5:f7:29:e4:2e:
d2:ac:b5:b5:a3:c4:33:9b:07:03:b3:b9:4c:89:c9:
61:28:14:3d:94:76:15:a6:fa:c2:1b:09:e0:ff:5d:
e6:67:ab:7a:27:dc:d8:b7:a4:37:86:2f:c2:87:f8:
4d:f7:dc:99:15:a5:df:ce:9d:c2:f5:7b:5d:41:6b:
70:7f:fd:b9:4f:7c:21:3b:17:a1:88:a3:3b:bb:3f:
24:a7:6b:0c:4a:e3:df:5b:25:dc:c8:c4:7a:20:9a:
c3:19:ad:fe:95:f5:9a:66:6c:44:91:be:2b:3d:51:
68:88:4a:cd:0c:de:e4:18:a1:81:19:cd:fc:c6:1e:
32:bc:d9:b1:55:df:e5:78:9e:b1:13:e3:8a:f2:b5:
60:aa:3e:39:63:32:58:51:33:26:05:e9:79:5c:98:
f9:cb:86:89:3e:0f:99:51:57:86:da:25:c4:2b:c4:
d8:e2:bf:c9:11:f4:ff:bc:14:f2:e5:96:38:27:de:
df:a5:bf:53:0d:46:77:4d:18:1c:a6:39:89:44:fb:
b3:d3:84:8e:12:ab:49:a6:34:bc:82:05:6c:9a:cf:
64:47:29:0e:4e:25:69:0e:91:85:27:52:90:d5:0b:
b8:07:2f:bb:6a:89:e1:4a:8b:25:7b:fb:c1:be:9d:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:8C:7E:5A:26:2F:26:F1:22:51:D4:3C:E0:E7:19:78:E4:49:2B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/116ccd7e-150c-4b93-89ac-f4311fabe377/116ccd7e-150c-4b93-89ac-f4311fabe377.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.16.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36538
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:4e:57:1f:c5:1f:67:d1:a3:79:4b:2f:69:2a:40:8a:24:9d:
d0:d2:3d:25:5c:ea:11:27:8e:9e:63:46:ea:3d:47:1f:c7:a5:
34:c0:fc:26:ea:ea:3f:ec:e7:e8:5e:33:6a:c0:2f:db:57:97:
b7:28:64:d0:fc:bd:07:a5:e5:78:28:20:79:81:51:96:73:69:
86:cb:02:bd:5b:38:96:8e:fb:1c:fa:92:d6:ce:8d:cd:e7:92:
74:61:19:f7:b7:62:7b:47:50:87:00:7e:7c:db:64:66:43:ad:
9c:00:1e:a4:3a:a3:39:06:cf:3c:45:d0:24:d0:07:42:75:d0:
a1:a2:c0:d2:61:f2:c6:76:42:ca:45:42:3b:28:29:88:e3:ef:
a2:a9:c0:d7:b6:15:6c:56:2f:b7:6f:6d:87:54:ea:e5:3e:a4:
e7:31:ea:51:71:9d:cf:f7:4d:cb:d7:b8:c7:06:5f:1c:ec:eb:
8b:12:ee:0d:2e:8b:f3:b3:70:8e:bd:50:11:ed:e5:fb:25:99:
2b:fe:5d:98:f8:89:35:cb:4a:c4:b6:e9:1f:ce:92:30:b3:6e:
64:8f:f1:3c:06:60:54:82:c1:fb:fc:4f:2a:4d:d4:c5:18:ae:
9e:6f:cd:99:78:fb:48:11:68:4b:c4:3a:70:75:5e:aa:f4:b4:
ed:0b:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:52 2026 by rpki-client