
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
File: 124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer (raw, json)
Hash identifier: M5omwpCsEkFP/9tSCxVIAgESnopecjfnH6hv9lERRaU=
Subject key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D89585566587A42A1B4536540
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Apr 2026 12:45:18 +0000
Certificate not after: Thu 20 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 11067
AS: 40011
IP: 65.79.192.0/19
IP: 67.219.160.0/20
IP: 216.251.0.0/19
IP: 2605:d800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:58:55:66:58:7a:42:a1:b4:53:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 17 12:45:18 2026 GMT
Not After : Jul 20 12:45:18 2028 GMT
Subject: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:a8:6c:9e:38:8f:47:57:f8:d5:0a:b6:18:
0b:49:17:c5:15:1b:f4:bc:1e:77:83:56:74:04:8c:
91:20:88:75:26:b7:4e:00:13:60:ee:ca:f9:bf:da:
3c:0f:7b:b9:03:ee:33:c7:fa:37:20:02:3e:1b:c0:
ec:5c:3d:ca:d8:74:4c:48:3d:52:ed:34:90:bf:3c:
05:5f:a4:33:34:fc:f5:b5:ac:df:df:67:5b:a0:d8:
d9:5c:42:66:47:0f:32:0c:50:fc:cd:d1:f0:63:ce:
00:ba:50:d8:b3:e4:64:ba:cf:ed:b7:14:4a:5f:3f:
ef:ca:a8:1f:8a:fd:37:67:9e:00:a7:44:fb:5c:cf:
6b:37:c5:5a:5b:25:22:d4:91:a5:b8:ac:ac:40:1c:
e7:92:87:38:1e:ed:b0:a7:9f:14:95:e2:2c:b0:99:
ab:27:cb:6e:c9:0c:fd:30:5c:86:6e:f2:7f:b8:73:
c6:2c:d8:df:69:12:3e:02:1c:87:98:b9:05:bf:cf:
3e:cf:62:c8:5a:24:ed:57:e9:14:08:7e:52:9e:28:
b1:1c:e3:79:4d:ff:24:0a:7e:ae:ef:50:04:c0:94:
70:7e:5b:9b:db:20:95:b5:e6:75:af:b8:d3:5f:84:
55:dd:4a:88:16:71:b4:9e:a5:1a:de:bc:bd:84:10:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
65.79.192.0/19
67.219.160.0/20
216.251.0.0/19
IPv6:
2605:d800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11067
40011
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:b8:20:b1:23:73:14:e6:9e:dc:32:cb:38:38:97:5f:43:a3:
38:3f:7e:34:4a:bc:ce:d9:41:b9:10:44:77:9b:78:41:e2:e5:
13:13:6a:f8:0d:a9:3c:57:b8:e4:44:33:8d:4b:04:9d:da:8d:
f4:e3:7c:c2:61:83:b9:32:87:e6:b1:fe:24:40:89:dc:8b:e2:
cb:9c:8b:17:91:10:83:b1:d4:e3:05:ad:c4:87:1a:93:d0:90:
b3:65:ab:6e:7b:b3:37:2c:78:32:60:39:17:f6:ba:a9:52:06:
f2:d9:6c:87:8c:6d:cf:eb:a1:79:73:5b:89:7b:57:75:bd:9c:
f9:63:77:da:0c:f4:c7:ae:bb:4a:ad:8f:9e:92:5c:29:48:28:
74:a4:fe:05:ca:68:d2:95:26:f6:21:83:a9:46:30:78:45:dc:
fb:c0:0c:71:25:ee:91:74:9d:18:e5:ff:4a:22:ef:90:32:1a:
a5:c8:11:83:47:3c:d4:c1:a1:0e:55:87:13:4b:b8:80:a0:76:
7b:96:7a:cd:b5:c5:9b:96:00:f5:5b:62:b5:75:8b:af:09:dc:
7d:fd:9a:c6:93:07:41:45:bd:da:bf:9e:84:4b:b9:dd:cd:75:
2d:ea:48:f7:08:ea:0c:e3:97:17:c6:60:88:89:65:95:25:a2:
fa:5a:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:43 2026 by rpki-client