
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
File: 2d448124-6e45-40ca-b551-28ef364c99c7.cer (raw, json)
Hash identifier: i0S8ag0zpl/yphIjfd/m6VHxUyXIj5PGuo2u1Ph8Oh4=
Subject key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D19AD001E0A09B65071B28B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 08 Mar 2026 12:45:21 +0000
Certificate not after: Sat 10 Jun 2028 12:45:21 +0000
Subordinate resources: AS: 397994
IP: 23.136.8.0/24
IP: 67.159.193.0/24
IP: 202.157.151.0/24
IP: 2620:a0:2000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 29 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:ad:00:1e:0a:09:b6:50:71:b2:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 8 12:45:21 2026 GMT
Not After : Jun 10 12:45:21 2028 GMT
Subject: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:65:3e:3c:6d:2e:b5:24:73:62:b0:8e:62:
f0:57:0e:3d:e2:12:2a:2c:c9:0c:30:28:6d:2c:f9:
31:96:97:0b:55:53:12:3d:b6:34:37:c8:31:85:d6:
37:24:48:29:97:88:60:a0:59:c0:95:04:f4:a4:e5:
56:6d:90:50:a1:3f:30:b2:95:4a:51:47:e9:db:23:
b0:02:01:e5:63:a7:04:05:8d:75:39:7f:8b:32:d2:
87:18:eb:5a:23:1a:85:bd:80:fd:2c:ad:be:72:23:
78:a2:18:46:e6:43:ed:ac:18:b2:21:41:66:a5:1e:
bf:18:02:06:a7:d1:e4:a0:c9:54:6c:99:e8:1d:93:
c8:3d:c8:3b:9e:f7:5d:ec:4a:ca:95:4d:3c:b2:6c:
27:ef:89:9d:89:34:aa:c0:48:f6:c7:b3:4a:35:9b:
a7:3b:65:5e:4d:6d:6f:3a:89:54:01:27:5e:ab:c1:
90:81:b4:6a:ad:2d:dd:b9:68:a7:66:0e:06:8d:19:
08:74:32:84:26:62:33:c8:06:f7:37:a2:2c:16:46:
89:ed:23:38:7f:5b:9d:1f:ab:8f:29:b7:1e:32:61:
70:b0:db:20:93:f8:83:4f:c2:05:bb:42:35:f1:34:
14:a4:6a:67:58:79:e6:a4:4b:26:f7:c0:b2:87:01:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.8.0/24
67.159.193.0/24
202.157.151.0/24
IPv6:
2620:a0:2000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397994
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:1f:c2:4f:71:e3:22:43:03:1f:f1:90:bc:12:d0:39:4e:61:
ac:0f:4c:4f:05:ae:0d:6a:8a:67:9e:84:ac:3a:23:60:99:db:
58:3d:71:5d:d0:36:40:9c:bd:a1:26:6e:32:02:26:eb:59:45:
c2:cc:6e:ff:8d:44:ac:24:47:d3:3e:f8:64:f7:e5:f8:c2:e9:
3c:80:e6:fd:18:0e:77:66:37:13:6c:c1:57:d4:5a:28:8b:dd:
09:a5:55:ea:24:5f:4c:07:9f:a0:16:06:84:21:86:7e:71:0a:
55:91:78:c4:ce:2a:2b:9b:71:fb:e2:8f:0e:ea:0e:63:6c:be:
b3:f4:92:76:a2:7f:f8:ec:7f:39:35:78:e1:2c:84:5d:f4:e3:
76:7c:25:c1:23:b0:c8:66:14:ef:b8:09:42:c9:0d:61:ce:33:
83:7f:83:ed:19:0f:33:d1:24:ad:7d:6b:f5:33:40:39:fa:a3:
9e:af:4c:b2:a6:d6:cb:db:62:c7:6f:c1:6b:36:25:59:d8:b5:
f0:bd:16:d3:6d:41:00:48:f5:67:74:51:0c:17:d8:24:eb:e2:
c1:45:46:dd:09:03:6b:db:09:90:46:82:88:ce:b9:b3:5f:e8:
fd:e8:26:4b:26:73:7f:4c:75:2a:cb:20:68:a1:e7:82:10:21:
60:d8:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:38 2026 by rpki-client