
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c.cer
File: 32d328f4-70f7-4c81-ae12-d79329b5bc4c.cer (raw, json)
Hash identifier: krdbI2qHazXvDQZuZKetRTTZD74ea7gvFB/dj26VwyA=
Subject key identifier: 44:16:EF:DD:E5:FC:7D:39:0C:B9:39:49:EF:5E:68:89:6C:B1:47:C5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584E7F00E36208012022190B9900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/32d328f4-70f7-4c81-ae12-d79329b5bc4c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 14 Jul 2026 12:37:58 +0000
Certificate not after: Mon 16 Oct 2028 12:37:58 +0000
Subordinate resources: AS: 402636
IP: 23.160.196.0/24
IP: 2620:41:4000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7f:00:e3:62:08:01:20:22:19:0b:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jul 14 12:37:58 2026 GMT
Not After : Oct 16 12:37:58 2028 GMT
Subject: CN=32d328f4-70f7-4c81-ae12-d79329b5bc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:b1:3d:a4:81:a7:2b:eb:3b:ae:69:09:d5:
ee:30:cc:a0:6a:70:08:26:48:04:b8:a4:65:72:15:
73:e0:cd:f8:41:97:b2:e0:08:3d:55:40:a3:a5:9b:
f2:50:4b:f1:65:a6:5d:3e:36:20:36:12:57:6f:06:
c6:66:94:c7:6c:cd:21:0f:5b:98:ed:99:0c:e3:3e:
ff:a8:11:94:90:89:8a:cd:dc:09:ab:3d:bc:79:42:
14:ec:f3:d7:38:c4:3f:09:3a:4e:00:2f:10:ad:9f:
f8:da:84:d8:3f:59:d5:cb:de:4c:a8:c8:7b:94:18:
c0:c9:db:25:23:df:bd:d2:52:c4:cb:7f:f2:e2:cb:
8f:7c:6d:97:6b:b3:40:7c:fe:f7:9a:b4:97:69:66:
cf:7d:a2:63:e1:31:31:fb:9c:d4:20:29:80:1d:cb:
5f:02:1f:a1:36:fd:3d:79:1e:81:78:cd:0c:dc:dc:
72:05:9c:05:96:30:1c:6b:b7:3e:e6:59:8b:6e:10:
42:3d:d0:4a:53:41:d4:5b:c9:5f:5c:5c:fc:a2:70:
2a:b7:26:6d:62:a1:1c:6d:c7:dc:22:44:49:7f:d6:
88:2b:49:92:0d:7d:e4:74:71:2a:55:4d:70:f5:50:
15:c3:a3:0b:73:bd:91:ce:6c:e3:20:10:e0:47:4b:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:EF:DD:E5:FC:7D:39:0C:B9:39:49:EF:5E:68:89:6C:B1:47:C5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32d328f4-70f7-4c81-ae12-d79329b5bc4c/32d328f4-70f7-4c81-ae12-d79329b5bc4c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.196.0/24
IPv6:
2620:41:4000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402636
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:63:b9:25:00:30:30:f1:b7:fe:d3:33:8c:e8:f3:e2:84:df:
b1:4e:db:e5:51:42:19:d7:47:74:60:3a:cc:7d:d8:4a:f3:22:
b6:32:dd:c2:00:da:7f:6a:1d:a4:94:15:ec:b7:53:a4:d3:34:
e9:c0:5b:00:60:54:23:89:ab:ba:f9:0d:c7:ee:c5:66:92:47:
53:84:b9:e5:49:3a:9e:85:06:f5:0f:6e:32:66:13:c4:31:43:
fa:cd:54:f9:96:0b:e5:9d:c4:1a:2b:7a:1d:21:5b:8f:b0:15:
19:97:57:27:2f:20:88:da:7e:ca:db:5a:91:75:b7:b3:ad:f2:
69:80:1a:1f:23:aa:8e:7f:1e:4a:04:d5:58:3d:23:ab:92:13:
9c:35:b8:d6:84:b1:44:33:29:57:f7:be:ba:3c:58:da:9b:fb:
6b:7a:44:64:7f:ed:0c:a7:31:86:53:5e:d4:90:2b:f5:6b:88:
7f:95:d2:ea:a6:c7:3e:b4:45:c4:82:05:51:98:01:ea:52:77:
c7:33:1d:34:c1:5e:a7:29:be:90:8d:53:c1:c3:c7:b7:a5:20:
0f:d2:d2:9a:84:fd:c2:0c:d3:96:b3:f3:0c:fc:0a:6a:94:e5:
25:01:73:5f:3b:1d:66:32:c0:76:57:21:14:d0:de:db:9e:79:
36:2e:25:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:20 2026 by rpki-client