
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ea849d6d-4004-4225-bfd5-883959eea3ad.cer
File: ea849d6d-4004-4225-bfd5-883959eea3ad.cer (raw, json)
Hash identifier: M8W91rcx+RZJRJDE0trOb5VHDJPKoLjrrLX/Tqe4m5g=
Subject key identifier: E7:13:54:29:FF:2D:CF:21:6F:94:D6:11:22:35:32:2A:BF:6A:E2:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584DA5432C590486AE5151226D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ea849d6d-4004-4225-bfd5-883959eea3ad/ea849d6d-4004-4225-bfd5-883959eea3ad.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ea849d6d-4004-4225-bfd5-883959eea3ad/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Apr 2026 12:45:18 +0000
Certificate not after: Sun 30 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 399641
AS: 400039 -- 400040
AS: 400254
IP: 192.81.232.0/23
IP: 192.243.216.0/21
IP: 2602:80c:5000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a5:43:2c:59:04:86:ae:51:51:22:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Apr 27 12:45:18 2026 GMT
Not After : Jul 30 12:45:18 2028 GMT
Subject: CN=ea849d6d-4004-4225-bfd5-883959eea3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:55:39:ae:36:b3:55:93:c7:a7:a7:93:5c:
f3:b4:b5:99:03:32:0e:7d:34:a1:ba:da:8a:ba:58:
79:ca:9e:fd:d8:cc:14:7c:e3:9f:f8:ca:78:b1:3d:
f9:98:79:fc:6e:2e:2d:8b:91:d9:bc:e9:2f:91:58:
3d:d6:c0:c1:c0:8c:78:65:7f:fd:ee:df:ec:33:98:
c6:06:6d:4c:83:78:88:5d:01:04:43:fe:25:1b:82:
fb:d1:4c:ce:fa:ba:52:0b:3f:c0:56:9a:20:ab:55:
85:bd:ca:c2:96:79:4c:33:82:8c:62:5f:3c:ee:66:
b4:de:7c:c9:40:10:b4:4f:98:e4:c2:d7:3d:ac:76:
71:87:d8:8c:26:ee:25:e2:9a:29:15:aa:27:89:ed:
1e:3d:1a:46:08:3e:95:2e:05:97:6f:7a:71:e0:3a:
90:63:0a:c6:0b:2b:8a:03:b0:f0:b6:9b:8f:73:0f:
3c:93:d9:bd:a9:97:46:09:0e:3d:a6:47:ef:61:74:
9a:4e:0d:10:dd:ca:9a:aa:40:0f:8c:d9:12:9a:b7:
3b:70:34:52:73:23:85:2b:ca:2f:af:da:bc:0f:6f:
1c:6e:11:7a:67:4e:31:ff:47:44:30:78:71:18:40:
72:b1:02:29:ac:52:e6:02:24:f4:c3:d4:1c:e2:08:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:54:29:FF:2D:CF:21:6F:94:D6:11:22:35:32:2A:BF:6A:E2:3C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ea849d6d-4004-4225-bfd5-883959eea3ad/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ea849d6d-4004-4225-bfd5-883959eea3ad/ea849d6d-4004-4225-bfd5-883959eea3ad.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.232.0/23
192.243.216.0/21
IPv6:
2602:80c:5000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399641
400039-400040
400254
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a3:03:0f:ff:a5:59:6d:44:2f:04:8a:8a:1f:a7:60:01:fc:
89:0f:d8:11:43:12:87:a3:31:83:e6:53:10:96:85:ce:74:e7:
53:d1:ec:dc:fb:b4:2b:5c:ef:f2:6e:58:2b:62:6f:56:de:de:
c5:91:1b:22:64:41:33:4d:fc:f5:5e:bf:f6:54:f4:6e:bd:ae:
4e:da:36:50:19:0c:1d:98:13:8a:0a:d5:9e:f1:de:de:fc:eb:
20:ae:1e:8e:0a:5a:29:65:b5:0b:c7:d8:d9:7c:be:61:8e:fb:
dc:62:78:73:f5:36:d7:c6:e1:84:e9:10:4c:28:2e:59:82:b1:
a9:74:5a:b0:15:97:b5:b2:28:de:93:bf:3a:9d:c9:05:52:7b:
b4:8a:03:8c:33:2f:ed:52:a5:31:c9:0c:70:e8:af:d2:e6:90:
cb:dd:c0:a0:23:5c:62:fa:8f:e1:b2:e4:c0:c9:34:31:96:0a:
fb:03:04:71:ec:6c:40:61:d3:4d:f0:02:34:f3:68:9c:36:7d:
58:ed:2d:6b:1a:fc:83:16:57:67:f6:89:ec:02:c0:e7:59:00:
72:59:b7:5c:a7:ce:84:3c:a6:73:be:af:45:c5:3c:5c:78:9d:
3d:33:e9:fa:d9:f3:24:bb:5f:91:20:43:bd:4c:15:b6:91:00:
da:e5:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:28 2026 by rpki-client