
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer
File: 8da2ab18-c7fe-481a-a5e3-31579c83e101.cer (raw, json)
Hash identifier: q/VUfbP+PC+kY4L2SpVUgNFhR4WNqjdax3DaFUNnzKM=
Subject key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D090AB016F494BA7FEC76E580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:45:22 +0000
Certificate not after: Sun 04 Jun 2028 12:45:22 +0000
Subordinate resources: IP: 69.161.208.0/23
IP: 69.161.220.0/24
IP: 69.161.222.0/23
IP: 206.188.192.0/23
IP: 206.188.195.0/24
IP: 206.188.198.0/23
IP: 206.188.204.0 -- 206.188.209.255
IP: 206.188.212.0/22
IP: 206.188.219.0 -- 206.188.223.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:0a:b0:16:f4:94:ba:7f:ec:76:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Mar 2 13:45:22 2026 GMT
Not After : Jun 4 12:45:22 2028 GMT
Subject: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:a7:9e:32:bc:73:08:bb:e8:2a:a6:0e:f1:
5d:83:e1:93:77:78:e2:db:06:3c:ad:97:61:fb:ef:
84:d2:8b:62:08:7e:e8:5e:69:0c:a5:35:76:d5:20:
07:f0:97:cf:e3:9a:6e:ab:5f:a9:ef:90:d7:ef:75:
08:0a:f7:36:07:9c:e7:3e:a3:13:75:2b:ba:ef:5e:
cb:3e:5d:a0:3b:08:5c:51:26:f3:f8:ec:3d:56:97:
e4:85:3e:27:2e:4a:d9:df:f7:b8:59:27:22:3f:38:
64:99:c9:2f:67:bf:fa:7a:f4:6a:cb:10:11:ad:1e:
d0:4a:76:39:c4:8d:27:69:0d:66:f7:84:67:4e:bb:
ad:be:83:ac:ab:30:91:aa:6a:95:2c:e0:03:47:63:
14:b6:8a:a5:16:62:f5:9f:3e:20:4c:bb:be:06:50:
59:78:ab:fe:f3:a3:26:c1:25:c8:c8:7f:07:9a:94:
c4:0c:4b:7b:bf:8e:8c:22:54:67:43:ee:38:00:d4:
e1:52:4c:53:18:51:73:0f:36:c0:19:77:ba:48:8d:
93:b8:46:8b:18:68:9d:9a:54:8c:b7:9a:f6:69:f4:
b9:16:df:3e:46:1c:2b:c6:95:b7:ce:2d:65:d8:01:
6f:2a:09:47:20:fe:d7:b4:a5:8b:63:2e:61:b8:23:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
69.161.208.0/23
69.161.220.0/24
69.161.222.0/23
206.188.192.0/23
206.188.195.0/24
206.188.198.0/23
206.188.204.0-206.188.209.255
206.188.212.0/22
206.188.219.0-206.188.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:cf:8a:e4:77:52:ae:fb:b1:31:98:ef:5c:a5:24:0e:b4:d0:
d8:a1:dc:fd:59:06:6c:c0:e9:29:9b:dd:ef:c0:24:65:e4:46:
8c:a5:5c:d5:50:87:a8:36:32:0b:25:f3:e9:53:f7:2f:65:26:
01:96:78:2f:c9:0c:d6:b7:4e:08:f0:1c:37:65:1d:89:23:1d:
c8:8e:27:2d:5b:dd:55:d2:92:2a:df:7a:65:ee:cf:29:19:1a:
00:36:5a:15:a7:df:1a:35:8a:5e:69:70:88:8a:66:2e:86:47:
4b:6d:3b:1f:08:31:a8:db:3d:f5:2b:50:bf:45:bc:ee:a1:34:
18:6d:b0:38:0a:4e:f6:2d:ab:9e:bf:7c:41:46:99:bd:8d:e4:
cd:9d:ed:08:29:f8:eb:51:2c:4b:b3:31:a3:a3:20:8c:e7:b5:
9b:d0:3f:2f:42:a8:c6:29:1f:74:09:49:de:f5:37:ef:14:0a:
7b:4b:f4:47:2f:39:06:2e:2c:f0:3f:a0:5a:28:67:e0:55:d4:
7d:fe:e8:8c:79:4a:3a:62:72:61:04:62:36:e0:5a:b5:bb:e8:
b3:d3:ac:73:a4:89:1e:a1:d4:b0:b2:b0:2c:8e:8b:fa:fb:d0:
87:d0:05:9c:ba:fc:3c:79:73:01:36:60:7c:bf:6a:c1:33:7b:
40:d1:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:40 2026 by rpki-client