
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
File: 34f935ff-170a-4b14-b64c-790e52fa9534.cer (raw, json)
Hash identifier: O/TE8gp5xnkNg+C6hrGy2p0jiyzC/5xlOKUurJUOmmc=
Subject key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584E4CB0D84FB661A89C43BDC1C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Jun 2026 12:06:16 +0000
Certificate not after: Sat 27 May 2028 00:45:23 +0000
Subordinate resources: IP: 131.162.0.0 -- 131.162.87.255
IP: 131.162.112.0 -- 131.162.215.255
IP: 131.162.224.0/21
IP: 131.162.240.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4c:b0:d8:4f:b6:61:a8:9c:43:bd:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jun 26 12:06:16 2026 GMT
Not After : May 27 00:45:23 2028 GMT
Subject: CN=34f935ff-170a-4b14-b64c-790e52fa9534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:6c:57:36:3d:e6:26:60:be:24:3f:35:80:
9b:eb:ad:48:d0:6a:f0:38:e6:87:f3:44:0a:22:1e:
d1:dc:a0:4b:6f:92:19:b1:2c:7f:8b:d6:9d:30:76:
ca:5e:c4:51:f0:9e:f9:17:7d:89:ff:69:d6:a4:e6:
40:9e:31:65:e5:6a:21:ef:58:ce:36:ca:38:8e:08:
6f:ea:92:56:d3:3e:f8:10:75:c2:cd:4d:e2:ca:94:
4e:c9:b0:65:51:2f:e3:36:f9:4e:ab:08:20:26:81:
29:e1:dd:81:b2:40:e3:dd:3b:93:cf:26:8b:3e:f5:
37:9c:02:cc:91:2f:fe:10:b6:35:da:e0:54:2c:2c:
54:af:d6:7e:33:14:3d:45:f0:67:3e:5e:a3:96:45:
ca:8a:0f:23:be:9a:11:b5:f5:cf:be:66:87:79:1a:
5f:53:e1:cb:1f:32:8b:44:78:6c:05:b3:a8:bf:d9:
6a:6a:de:04:e9:07:6c:a4:f8:53:87:ae:c9:b6:39:
8b:2f:2a:46:86:20:10:48:45:ce:2b:90:d8:39:94:
6b:cf:ba:22:1a:6e:78:3c:f3:46:1d:91:25:58:bb:
8d:36:fc:d1:af:49:2d:37:f4:b1:18:fe:c1:b8:ca:
2e:5e:e8:79:81:c1:b9:75:5d:7f:56:32:ad:3a:ec:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
131.162.0.0-131.162.87.255
131.162.112.0-131.162.215.255
131.162.224.0/21
131.162.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ac:b1:2b:79:44:e4:f8:d2:30:68:ba:ca:f7:b4:bb:4b:2f:
5f:51:ca:10:23:98:13:8c:f1:f4:71:43:4e:20:fd:1e:1f:88:
db:24:76:6a:77:57:b5:63:ab:e4:61:c1:a3:8c:60:e5:69:db:
65:c6:b5:c0:30:38:9c:5e:06:69:db:6b:89:dd:34:03:04:2f:
ab:ae:91:d0:5f:5d:31:c8:85:43:70:b8:79:b5:aa:7a:8b:d5:
a1:f9:c0:aa:1c:cd:70:1d:19:04:01:e2:d0:52:11:07:ee:ef:
f5:28:53:62:7f:94:8d:45:7d:4f:7d:94:cd:18:86:7d:e0:51:
9f:cc:27:73:69:d9:17:72:a1:4b:4c:55:c1:1f:6e:2b:34:6d:
2f:71:06:2a:ec:41:a6:e7:94:72:e5:23:bc:b6:75:e1:2b:5c:
bf:7e:2c:2e:88:4e:d0:5d:93:57:08:99:0e:80:3e:02:9b:ea:
b1:79:23:f4:fe:ca:0c:ac:a2:71:d7:7f:7c:21:4e:9a:06:5b:
86:e6:7c:83:b9:8d:e8:48:70:70:e7:b7:0e:27:37:6f:02:13:
03:7f:61:f1:63:a5:74:5c:78:2f:97:0e:e3:7a:3c:82:8a:d1:
32:f6:a2:e3:08:d9:41:e9:4b:a5:b7:ea:bb:30:ea:e6:47:1e:
7c:b0:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:53 2026 by rpki-client