
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
File: f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer (raw, json)
Hash identifier: 9eMkT8aNBOri3tCNLt+wqipXe327gR5kkIVGbynrnzc=
Subject key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F4328584F777B5C88684B36F7B5268F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 11 Oct 2026 12:45:12 +0000
Certificate not after: Sat 13 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 62827
IP: 158.51.232.0/22
IP: 198.17.211.0/24
IP: 198.96.5.0/24
IP: 209.209.108.0/22
IP: 2620:7f:a000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:7b:5c:88:68:4b:36:f7:b5:26:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Oct 11 12:45:12 2026 GMT
Not After : Jan 13 13:45:12 2029 GMT
Subject: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:62:f2:c6:a9:e2:42:78:66:37:31:cb:2d:
23:84:0c:ec:5d:15:4a:19:7e:ab:8f:14:49:31:1a:
dd:38:b5:6f:04:1d:d4:2e:bd:dc:b6:33:78:7e:75:
54:f6:ec:f8:1c:05:4e:fb:eb:7e:85:8e:68:03:2c:
8b:a6:1c:37:59:f4:21:4e:c7:f1:28:89:44:7c:c3:
7a:d6:58:5d:63:92:f9:7e:ff:69:a3:15:e9:30:63:
22:cc:0d:db:0f:e4:6d:3b:b7:49:f1:06:b2:25:b4:
71:30:41:0f:97:eb:7a:40:17:e1:f8:6a:45:45:68:
33:f0:74:e1:2e:bd:34:53:b0:23:b8:cc:60:1f:fd:
ef:cd:2c:9c:3e:4b:16:63:9f:b8:40:f3:75:58:4d:
3b:af:b7:dd:4c:07:56:8b:e1:42:a3:9b:8e:ea:08:
6f:e9:0f:25:62:e6:e6:34:8d:0e:45:e2:ff:b7:a4:
21:7c:c7:53:2a:13:57:a3:a5:f6:08:31:a9:86:53:
1b:e4:4d:12:e6:0a:e7:2a:de:3e:40:37:e1:12:86:
78:31:60:77:4f:59:b8:0e:2a:79:0e:79:4d:d2:df:
71:70:3e:8f:2b:eb:a5:1d:a7:4d:a4:57:72:df:19:
2a:de:37:c2:2e:b2:3b:16:63:f3:37:2c:25:0a:23:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.232.0/22
198.17.211.0/24
198.96.5.0/24
209.209.108.0/22
IPv6:
2620:7f:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62827
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:78:13:57:8c:a0:6b:48:4e:cb:d5:1a:ea:44:e6:e2:59:97:
b0:93:f5:88:20:40:f5:5d:97:45:f2:7b:92:1c:0e:8e:78:27:
ef:73:8a:a3:bd:56:8b:bd:19:a1:b3:11:0e:08:1c:af:3a:65:
11:2d:d7:f3:71:aa:45:10:4d:43:99:e5:db:23:c7:9a:a0:7e:
49:e9:fc:59:e7:02:15:7d:31:f9:f2:9d:9f:d7:e9:62:41:2b:
f4:bd:7c:78:09:bf:95:cc:3f:c3:32:08:92:bb:b8:f7:a9:b4:
04:12:39:a3:31:91:b3:ac:0a:8f:f4:d0:68:16:26:4f:39:c6:
35:3a:6e:ed:90:29:e8:1b:15:7e:df:e4:1a:05:a6:25:5e:c2:
6b:7d:df:ab:2a:44:0a:75:b3:9b:6f:9b:9e:ee:18:5b:40:f7:
1e:36:15:94:5a:70:8c:1a:38:d6:ec:91:bb:7f:13:13:39:63:
f3:58:51:70:c2:39:61:2d:e0:0d:8e:d0:c4:41:ac:f7:9d:54:
10:fd:74:95:9d:e9:06:95:b6:fd:ed:e8:f7:9a:dc:a4:cd:ef:
84:b8:2c:9a:14:77:9d:47:22:0d:ec:3c:fd:1e:38:f3:82:36:
b7:c4:12:42:43:0e:e3:a9:e2:03:26:34:c6:d2:0a:24:1c:3b:
b0:4b:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:39:11 2026 by rpki-client