
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
File: 48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer (raw, json)
Hash identifier: tAEY7aOa6IbutI63p22aBWf2LZc5gYh0laBgNhJ8/MI=
Subject key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584E5A427632B1A786E84EC55C80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 08:45:10 +0000
Certificate not after: Tue 03 Oct 2028 08:45:10 +0000
Subordinate resources: AS: 401727
IP: 23.186.112.0/23
IP: 66.118.56.0/24
IP: 2602:fc41::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:42:76:32:b1:a7:86:e8:4e:c5:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jul 1 08:45:10 2026 GMT
Not After : Oct 3 08:45:10 2028 GMT
Subject: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:f0:21:e7:f8:9b:a0:07:3f:a2:e4:ec:5d:
a8:ad:07:c1:46:43:d0:3b:7b:ba:ab:c8:fd:59:35:
2f:ca:e2:ba:76:ff:87:57:3a:66:39:79:eb:35:5b:
8f:9a:6c:43:b3:89:96:49:86:54:50:36:27:95:7f:
95:dc:08:df:10:df:8b:f3:52:f6:a9:b7:d1:c3:36:
c6:4f:ce:3d:65:b5:d6:c7:c0:c6:d7:3d:30:a0:18:
cf:92:af:80:54:75:5e:38:01:bf:ab:01:31:cd:0a:
32:40:69:b6:5b:81:2c:f1:5d:57:7a:28:91:0c:b4:
2f:96:dc:08:f3:e5:48:9a:93:3c:33:6f:78:72:fc:
9c:27:27:9e:79:72:be:c9:54:ba:50:8b:96:9d:bb:
93:4b:a5:aa:24:d1:40:f7:9c:8c:f1:de:d5:7d:22:
cf:10:fb:81:19:b8:2e:83:20:c2:8f:2a:34:d8:18:
52:0c:c3:af:ca:51:4b:80:41:02:27:0d:06:24:bc:
4e:2a:32:a6:6f:d3:8f:5d:05:da:92:00:46:96:10:
68:49:15:70:77:6e:5f:59:2f:4c:be:bb:71:27:df:
c5:09:d3:7c:cb:5b:69:d0:69:07:16:40:58:01:0f:
86:90:69:d4:65:83:ef:83:3c:e7:b4:a5:66:54:6d:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.112.0/23
66.118.56.0/24
IPv6:
2602:fc41::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401727
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:cf:0c:4c:2f:7e:58:6f:c8:cc:f9:74:a6:04:c5:e7:20:0c:
3f:99:7e:24:be:58:80:86:1f:35:da:9a:5b:4c:e8:c1:b2:d1:
eb:c9:ce:2e:55:2b:03:26:91:cd:df:64:d7:57:b4:78:4a:79:
a4:47:24:b2:a0:9d:e8:cc:cb:f3:71:b2:8a:2f:40:f7:58:46:
8a:cf:90:78:a0:21:69:7c:eb:0f:16:f4:67:3a:3f:8c:74:d2:
ac:38:ca:6b:20:e0:ad:95:47:61:fe:73:20:03:3f:80:98:c9:
9c:73:40:f0:1a:1a:e5:33:c6:98:8e:5a:6e:9a:f5:78:ee:4e:
76:af:28:a4:00:e7:c0:c2:5b:8e:79:34:3d:c5:b7:c1:21:55:
d8:a2:12:81:51:5d:76:05:5e:e9:19:75:b9:93:18:b1:28:80:
7f:da:96:d8:d0:73:a5:7f:34:9e:63:0d:fb:9e:7d:3a:b1:3d:
22:53:07:0d:25:ef:5b:ec:0f:1d:a8:f6:d5:e7:f6:22:9e:d7:
19:b7:86:0a:de:fa:b0:47:da:34:40:12:e7:20:6f:c6:99:f4:
f0:d7:b0:90:71:55:80:87:64:0c:89:5f:0f:fa:a0:f6:04:5d:
05:8a:ab:2b:5a:42:83:5b:09:7b:78:44:79:f6:52:66:fd:0e:
1d:e7:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:15 2026 by rpki-client