
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
File: 3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer (raw, json)
Hash identifier: D4Lbg7GlG4Ha48FEoZf2zfCk36p6yRLqQLmVfBkphts=
Subject key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584E78F7FE19C5D104F16DC076C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 12 Jul 2026 08:45:11 +0000
Certificate not after: Sat 14 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 399864
IP: 45.41.20.0/22
IP: 169.128.208.0/22
IP: 206.168.56.0/22
IP: 207.167.112.0/22
IP: 216.238.56.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:f7:fe:19:c5:d1:04:f1:6d:c0:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jul 12 08:45:11 2026 GMT
Not After : Oct 14 08:45:11 2028 GMT
Subject: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:f2:58:4d:fe:21:9e:c5:00:2e:73:72:63:
c0:90:18:50:5b:f7:f4:2f:4a:a4:e5:22:10:a0:ab:
b3:60:df:00:86:88:db:b5:74:f4:22:a2:25:47:61:
93:67:ee:80:5f:fe:7a:1c:34:4f:59:b7:47:bb:d0:
94:0f:45:56:c9:cd:c5:a6:e7:da:7f:0f:4b:f1:06:
4f:b3:a6:57:dc:e7:76:3d:5f:4a:37:90:e7:84:0d:
2c:15:02:f1:b8:34:e2:9f:a9:7a:55:5b:1a:ff:95:
0b:7e:98:98:51:c4:e5:df:08:db:7c:f4:0e:54:6c:
2e:7f:3c:b3:e4:17:ad:6b:aa:b5:2b:06:12:a4:b9:
7b:fc:c9:47:80:9c:ee:de:41:53:d0:d2:09:17:68:
f4:00:4d:7d:c8:e8:bb:3a:cb:51:bd:07:43:27:e9:
0b:c9:0d:85:d3:93:9d:54:81:dd:12:6f:6b:30:28:
77:32:4e:4e:2a:f8:d9:ff:ad:9f:91:e4:3f:a1:19:
7d:e1:ed:15:db:74:0b:b4:b0:f0:c7:b2:00:b5:42:
66:6d:3a:66:8b:5c:2d:5e:d0:ce:de:4b:54:30:34:
43:7c:e7:c3:1f:1e:b9:cb:5a:32:9a:6e:10:23:b2:
94:f2:c0:04:2f:cc:4f:c1:80:d6:08:fc:fb:8c:40:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.41.20.0/22
169.128.208.0/22
206.168.56.0/22
207.167.112.0/22
216.238.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399864
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d2:11:8b:c9:0e:24:cc:b4:f5:b1:d9:03:9a:66:6f:a2:8e:
c3:41:68:1f:3d:aa:14:b7:69:40:74:3f:8f:de:8f:90:c5:74:
27:c6:36:e2:01:82:ab:c3:b0:fd:65:62:76:17:05:22:12:79:
ad:48:17:ec:20:28:4b:93:f6:1d:98:60:d5:97:cc:cc:0c:66:
e5:f8:c4:a5:36:e9:b9:1c:de:48:22:1b:e9:2c:e8:0c:c7:ef:
3a:e7:7e:51:d7:b5:7d:35:b4:91:e6:83:b3:29:7b:43:d7:3a:
4e:09:7a:88:6d:e9:ca:cd:2b:42:7d:cb:60:71:ce:81:92:af:
f6:d5:11:9b:ec:d9:92:f6:92:f5:28:ae:ed:f4:ae:39:2b:5b:
d7:94:17:ef:5a:40:ff:39:68:dc:9c:ba:25:c0:67:71:f4:9f:
e9:37:70:1b:92:05:fd:f5:3d:f4:2a:e0:58:3f:4b:c1:82:55:
1d:c1:3f:89:42:66:7a:20:68:8c:7d:2c:cd:62:40:ae:5c:5a:
1f:08:ec:5e:99:6a:c9:37:4e:7c:5c:60:72:25:df:7f:dd:3c:
e6:d7:5a:b6:5a:ae:72:25:26:1b:e7:9e:dd:ea:92:67:26:45:
f6:d2:c5:57:d7:5e:da:01:7e:19:e3:bf:ef:43:eb:7d:5e:d4:
20:63:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:12 2026 by rpki-client