
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ab0e48c4-46b3-4130-9c99-e32392453db5.cer
File: ab0e48c4-46b3-4130-9c99-e32392453db5.cer (raw, json)
Hash identifier: KSeFWUAQDgKeMfllLF27iYyfJL23+k+nPjHnFhidFdo=
Subject key identifier: 0D:0B:19:F7:C8:27:61:84:6A:74:23:34:86:B5:4E:2A:32:C7:DB:B6
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584D253FF350E386003AC96B0D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ab0e48c4-46b3-4130-9c99-e32392453db5/ab0e48c4-46b3-4130-9c99-e32392453db5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ab0e48c4-46b3-4130-9c99-e32392453db5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Mar 2026 16:15:20 +0000
Certificate not after: Tue 13 Jun 2028 14:22:02 +0000
Subordinate resources: AS: 401832
IP: 2620:7f:5c20::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:25:3f:f3:50:e3:86:00:3a:c9:6b:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Mar 12 16:15:20 2026 GMT
Not After : Jun 13 14:22:02 2028 GMT
Subject: CN=ab0e48c4-46b3-4130-9c99-e32392453db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:74:fb:01:14:95:23:56:c0:d6:45:11:a6:
21:f7:69:d6:49:9b:14:5d:e8:6e:e4:06:b7:9c:a5:
ed:04:9e:c4:08:79:5a:39:be:a6:0e:83:5e:0e:58:
13:bc:6a:cf:e0:24:bc:3a:5e:37:a4:e6:e1:3c:b9:
89:2c:7a:21:24:ca:80:1b:e1:0d:f5:5c:72:75:7e:
11:c5:f7:8e:c1:1c:55:f9:27:69:08:67:16:b5:80:
c2:51:36:08:37:01:4e:0e:e1:bd:f9:49:3f:9e:f5:
b1:07:59:bf:d5:e2:2c:43:29:9b:37:09:99:d3:c5:
79:e3:3b:91:0f:eb:41:db:68:50:9d:a6:7d:5f:10:
18:fd:fd:2d:6e:2c:cb:36:ae:6b:24:01:72:96:67:
66:31:69:39:ab:1e:52:dc:ba:67:c4:71:00:ea:ca:
9f:50:2a:cd:ef:d0:3c:7a:3e:2a:81:5b:45:5e:7c:
86:a5:d6:93:31:d1:25:cf:7a:29:aa:32:43:ac:41:
f0:d5:b2:7b:67:3a:77:58:54:a8:26:21:36:c1:ab:
26:46:98:b1:f6:c7:b1:74:c5:1a:5f:fe:84:cf:3c:
8d:26:e5:a3:41:5d:bf:dd:c3:1b:ac:77:f9:ca:a6:
10:c1:bb:e5:96:c2:ec:5c:85:2e:69:93:eb:c1:f5:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:19:F7:C8:27:61:84:6A:74:23:34:86:B5:4E:2A:32:C7:DB:B6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ab0e48c4-46b3-4130-9c99-e32392453db5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ab0e48c4-46b3-4130-9c99-e32392453db5/ab0e48c4-46b3-4130-9c99-e32392453db5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:7f:5c20::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401832
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:81:0e:0b:a7:99:9d:6f:19:22:55:8b:b5:55:e6:16:ef:b5:
a9:0d:6a:85:74:ef:62:7b:7a:c5:e1:a8:a0:6b:d2:a3:a2:14:
bf:d1:96:d0:7b:09:a4:85:c0:2a:c0:86:7c:9e:2e:25:3e:e9:
4e:20:2b:69:7a:8f:df:d2:5e:aa:5b:0e:56:76:1f:c1:6c:af:
3e:c8:0c:a4:39:56:8e:fc:d9:a6:c6:dc:96:74:f5:c1:e1:62:
f3:7c:d7:ac:df:80:d3:a8:02:26:bf:fc:c8:5c:aa:54:0e:d0:
30:f8:4f:25:d2:60:fc:80:02:6c:4b:29:10:d3:94:42:21:ff:
21:0a:64:23:72:9e:c4:34:5e:92:82:ce:fb:9d:fb:b0:eb:37:
fe:b2:e7:11:aa:d5:83:e5:09:90:43:a7:8e:72:79:2b:3f:f4:
57:bf:0c:22:a4:1b:b1:c0:85:b1:72:f6:a8:8e:7a:35:7f:d2:
04:df:f7:e5:93:dc:ff:00:ce:81:f0:1e:cd:01:7c:a5:01:76:
f8:75:f4:a8:92:ea:70:9a:02:89:10:87:f2:b2:a3:67:28:4a:
93:79:6a:b9:da:89:8a:ea:8e:58:cc:7a:2c:43:98:db:fa:67:
49:fe:2e:1d:51:59:32:bf:44:a0:fe:49:52:2b:bc:1f:4a:2c:
ab:e5:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:51 2026 by rpki-client