
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
File: 4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer (raw, json)
Hash identifier: HZm04Vlogz7Xlx5obSYpS+C8fhbWKswDiKJIfjfV3QU=
Subject key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D438D45C0B32F7018C5724DC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 23 Mar 2026 12:45:22 +0000
Certificate not after: Sun 25 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 21713
IP: 66.172.64.0/19
IP: 104.160.48.0/20
IP: 168.182.64.0/18
IP: 216.14.64.0/20
IP: 2605:c380::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:43:8d:45:c0:b3:2f:70:18:c5:72:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 23 12:45:22 2026 GMT
Not After : Jun 25 12:45:22 2028 GMT
Subject: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:62:b7:dc:0a:4f:e2:6b:cb:02:f6:03:2f:cc:
42:1c:40:ba:30:14:18:ef:78:67:14:75:8b:f3:09:
26:ed:ca:00:6e:66:2b:e2:1f:0d:5d:93:91:0c:80:
3f:25:b5:d6:15:50:2c:30:87:ab:a2:f9:ea:cf:a6:
31:5f:04:c4:b6:44:43:dd:35:fa:d8:fc:54:db:d6:
b8:55:b0:b5:73:04:37:7c:f9:08:0d:fd:14:25:4e:
b6:31:40:eb:ee:87:eb:d9:f0:ad:45:02:69:bb:65:
42:6e:c3:c4:6f:92:a4:13:fe:00:b5:71:b0:65:eb:
36:af:cc:15:20:dd:df:57:18:60:df:b4:11:aa:42:
9a:c2:eb:4e:53:3f:44:f1:03:3c:58:b1:ff:1c:9b:
68:77:bd:1c:bb:bf:ec:b6:31:6a:b1:a4:4b:b2:04:
42:21:14:03:7e:b4:42:82:44:bf:d6:f6:97:db:f9:
cb:e2:e1:c0:bd:92:ad:6e:a7:2b:46:31:8b:ac:a1:
24:eb:77:2a:24:8f:32:d7:35:35:6f:0b:d7:75:46:
76:e0:84:86:0b:33:1e:ab:ea:9e:33:e2:f0:36:34:
d3:d5:7b:30:8e:a4:37:d3:c8:dc:02:16:8f:79:85:
6e:f8:b3:90:93:f1:44:14:ea:3e:1c:15:dc:54:7b:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.172.64.0/19
104.160.48.0/20
168.182.64.0/18
216.14.64.0/20
IPv6:
2605:c380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21713
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7a:14:59:5f:35:1f:3f:02:cc:a9:8f:64:70:4a:69:64:d3:
23:02:d6:d0:9e:75:77:5e:7b:58:b0:a6:ff:90:25:82:d9:8c:
fc:b6:a5:26:a2:09:78:bf:b2:3f:2f:26:39:90:ca:12:df:1d:
2c:7c:94:e7:52:df:d2:e5:3e:8f:70:20:41:7e:80:b8:00:34:
63:e2:39:f5:a9:78:01:d8:90:2c:df:f8:c9:dc:42:16:1b:1f:
67:f8:b6:7b:93:e0:59:22:cb:89:d0:95:6e:69:fe:59:b7:54:
d8:91:f4:5f:80:4a:56:61:18:f1:34:96:87:76:4c:df:76:37:
5f:67:f5:e3:b9:3f:ab:44:f6:49:eb:44:32:2b:9d:0f:84:13:
ad:0a:28:96:50:9d:63:f1:a9:46:58:4d:b2:db:7a:b9:2b:e8:
45:e9:24:c5:4f:e4:0f:a3:47:5d:fd:07:ad:f2:43:b3:bc:31:
5e:10:7e:3e:8c:06:ac:b6:60:b8:d5:97:06:05:95:98:c6:50:
d7:6f:81:89:7a:4e:dd:d9:5f:5b:fd:25:65:84:9f:09:e5:43:
70:54:f2:07:7b:77:a3:14:ba:e5:8a:29:48:02:c5:df:6b:40:
4b:59:9d:4e:b8:35:10:66:d4:4d:ea:03:a6:7c:01:44:af:1e:
67:e2:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:03 2026 by rpki-client