
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef.cer
File: d9676341-649a-455a-996d-1bf21249eaef.cer (raw, json)
Hash identifier: zaSyuijW8MsAEyYXVhRjDjpJKcUAuBZlG8UA1ZypC9c=
Subject key identifier: 19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584F46A062F345ADD5C370F01AC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 24 Sep 2026 00:45:11 +0000
Certificate not after: Wed 27 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 19451
IP: 2607:a0c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:a0:62:f3:45:ad:d5:c3:70:f0:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Sep 24 00:45:11 2026 GMT
Not After : Dec 27 01:45:11 2028 GMT
Subject: CN=d9676341-649a-455a-996d-1bf21249eaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:03:9d:a4:8b:2b:2e:85:ba:a5:be:a8:7d:
99:12:c2:27:f7:7b:e7:25:4d:74:cd:f8:a5:81:f6:
66:89:4d:87:5d:8e:e2:a3:8f:39:8b:9d:6b:5b:b3:
8c:ab:61:72:39:a2:99:3f:ed:35:2a:32:0c:1e:1b:
5e:c2:37:59:34:c3:85:c3:5f:5d:9c:c1:a3:2a:f5:
60:be:ff:95:c1:1f:f3:71:30:e4:e3:2c:b5:3d:9d:
a6:ab:53:b7:87:f9:0f:a3:57:0a:30:4a:c5:bf:9e:
7e:c0:35:f0:dc:88:dd:b6:89:90:f7:f9:05:c3:03:
22:b5:08:e8:ad:64:27:35:fb:9f:d0:01:e7:ce:fc:
f1:99:25:f1:5a:c5:53:82:53:bc:64:72:d9:d7:83:
9f:cf:11:03:e8:c9:81:15:a4:2e:3f:88:a9:24:2b:
c0:07:61:d4:91:f5:15:06:cc:99:e5:0c:bb:36:ad:
0d:5f:83:4f:a1:3b:42:16:72:62:95:3d:c0:05:4d:
c7:84:ba:d8:4a:76:8b:aa:b1:16:64:87:9a:fa:50:
44:2e:a7:76:d2:b6:49:59:d6:b2:12:60:06:f4:35:
f0:57:61:11:05:31:75:97:28:f3:36:18:e9:7d:94:
95:8d:2e:29:a7:07:14:75:be:fc:9f:92:7b:a1:4a:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:a0c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19451
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:63:83:58:d1:4d:0e:ee:13:99:83:89:3f:f2:27:c4:15:1f:
e9:06:3d:50:2c:20:98:a6:65:c0:4d:27:4d:b5:ac:f0:56:b3:
30:ed:44:1f:a3:fc:32:1e:fc:85:44:81:90:95:d5:d3:1c:7a:
f7:fd:a9:97:5c:39:05:13:65:e1:d9:9e:9a:e8:0e:2c:1f:a2:
a7:1d:fe:b1:a4:27:16:d9:6a:5c:a3:73:97:41:16:83:8d:63:
cd:dd:02:7c:b2:16:37:ca:c3:3b:45:87:5a:8b:88:71:64:60:
03:fc:51:34:ae:9d:df:1f:93:71:81:63:cb:ab:3f:8e:ad:9b:
c1:ca:0b:88:ed:b8:75:94:d0:69:23:bb:6f:33:5c:36:12:21:
9a:dc:37:f1:df:a8:91:d9:66:8c:ab:4a:87:bd:46:41:41:14:
df:fe:56:b0:b7:19:d7:db:0b:4d:1d:77:c3:aa:44:b5:66:b0:
5c:40:06:db:f2:09:b8:10:57:23:80:79:05:b1:84:a9:53:9d:
99:6a:f9:72:02:69:6b:d9:75:1a:0f:3f:17:c9:de:12:19:bf:
a9:28:97:83:c8:38:c6:36:2b:c6:f9:a1:0a:a1:01:91:f7:a4:
32:d9:7b:a4:3b:ff:c5:85:ce:a1:2e:1f:97:6e:0e:43:de:a2:
26:33:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:40 2026 by rpki-client