
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec9c60cf-56bf-4758-b907-646eb29ecf55.cer
File: ec9c60cf-56bf-4758-b907-646eb29ecf55.cer (raw, json)
Hash identifier: Bdrd4Fj0JqoxLc8pAY6wACmTuQiOVWAeeHqgAFM+Ba4=
Subject key identifier: 39:A1:82:00:9B:C5:95:12:1A:F5:D4:2C:37:E4:BA:98:0B:2D:D9:CA
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584F3FA5AFFF958DF971EA731CA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec9c60cf-56bf-4758-b907-646eb29ecf55/ec9c60cf-56bf-4758-b907-646eb29ecf55.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec9c60cf-56bf-4758-b907-646eb29ecf55/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 21 Sep 2026 12:45:13 +0000
Certificate not after: Sun 24 Dec 2028 13:45:13 +0000
Subordinate resources: AS: 394761
IP: 192.231.177.0 -- 192.231.178.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:a5:af:ff:95:8d:f9:71:ea:73:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Sep 21 12:45:13 2026 GMT
Not After : Dec 24 13:45:13 2028 GMT
Subject: CN=ec9c60cf-56bf-4758-b907-646eb29ecf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:67:e7:37:f6:b5:cb:70:c0:8e:5e:63:d1:
f5:ef:99:a2:f9:82:ad:13:18:5e:32:0a:54:39:13:
5f:36:a4:1a:94:92:e2:db:dc:12:fd:ff:f6:3f:39:
66:f6:5c:41:fd:51:09:8e:7b:12:dc:c1:fb:6a:1c:
e9:29:e5:d4:9c:4e:22:50:9d:c0:77:1a:0c:93:82:
30:32:c0:0f:89:6c:3f:29:47:c6:63:f9:0a:9f:ef:
28:29:26:ef:37:04:3a:84:e4:17:88:bf:f9:12:48:
c5:27:4f:75:e9:65:c9:48:10:e5:cd:67:64:6e:2e:
d5:c8:f9:58:76:fc:c8:37:99:9c:03:17:17:2c:4d:
48:b5:19:5b:f2:2d:b2:1c:84:58:af:78:85:55:11:
e8:d1:4c:82:52:9f:9e:bf:4c:11:63:10:79:62:a5:
40:ae:d4:ab:bb:dc:ea:82:16:5f:8c:af:1a:ee:9b:
56:d9:78:bc:aa:c5:15:37:4b:e5:6b:07:aa:37:70:
d4:f5:4b:7d:02:7f:6c:ed:db:43:14:ab:73:55:b8:
88:a2:1f:74:d6:0f:0e:5d:62:c0:b1:02:02:ad:b7:
6c:2a:d6:a7:84:6c:7e:fd:2b:6e:67:65:ed:d7:02:
02:dc:ad:38:6c:29:e0:6e:d9:bf:19:36:88:68:b9:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:82:00:9B:C5:95:12:1A:F5:D4:2C:37:E4:BA:98:0B:2D:D9:CA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec9c60cf-56bf-4758-b907-646eb29ecf55/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec9c60cf-56bf-4758-b907-646eb29ecf55/ec9c60cf-56bf-4758-b907-646eb29ecf55.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.231.177.0-192.231.178.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394761
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:90:42:b4:95:9f:e8:5c:0c:e9:14:60:24:93:32:63:50:54:
e6:4a:15:9e:d3:67:f4:58:d3:2b:1a:17:74:ef:e8:d4:8c:d8:
ca:07:0d:00:ed:69:b5:8b:7d:cb:cd:ea:ed:62:e7:57:db:c1:
e1:4e:3f:d3:97:7c:bc:79:ce:08:d3:63:49:5e:e8:f1:a9:76:
ba:8c:30:33:b2:22:57:68:cf:07:06:75:ee:8d:2b:30:bb:59:
c0:8f:00:65:7a:47:09:9e:95:35:c9:4c:44:b3:92:db:d0:fc:
3e:5c:04:6d:de:a6:ce:48:2d:86:a9:49:f2:55:b4:d1:0c:86:
43:c8:93:ea:d6:78:ac:d9:e7:7e:69:f8:cd:05:ee:52:f9:5b:
12:86:da:7c:ee:5a:2d:62:cd:8e:69:f4:db:3f:33:a0:95:a6:
2e:09:83:c9:06:f4:29:ac:9d:38:cc:71:0c:ea:2c:ef:4e:9b:
1a:cb:b6:22:43:4f:af:70:28:6a:21:e5:36:66:3f:8c:91:8a:
a7:0d:71:13:e0:fb:af:63:42:97:c2:1b:8e:46:37:77:b7:bb:
84:e2:7a:72:4a:aa:de:f1:a5:c1:4a:b3:04:5f:f1:df:83:e8:
50:16:88:6a:49:1d:d5:62:12:22:89:68:eb:60:e0:50:be:99:
89:fa:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:37 2026 by rpki-client