
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer
File: 1f8437cb-088c-4f24-b728-2e13ad3df4df.cer (raw, json)
Hash identifier: O6MR4yBna1nzfr9lxGVE7dunhPrzpJKQoTLIiHOga9k=
Subject key identifier: 5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E86ED69C2043CB5C9DDB9D480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Jul 2026 08:45:11 +0000
Certificate not after: Thu 19 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 40008
IP: 206.168.116.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:ed:69:c2:04:3c:b5:c9:dd:b9:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 17 08:45:11 2026 GMT
Not After : Oct 19 08:45:11 2028 GMT
Subject: CN=1f8437cb-088c-4f24-b728-2e13ad3df4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:44:3e:0f:cd:cb:27:be:15:75:b0:d9:66:
62:5d:1a:68:f0:1b:84:ec:1b:00:e3:88:b5:e8:73:
14:10:4f:85:e0:b0:30:8c:4a:6d:43:bd:e7:c5:b5:
27:2a:bf:ca:53:f4:06:21:16:c8:46:9d:c0:a1:94:
b3:3c:a3:4f:13:3f:73:b7:26:c3:d6:43:b5:5e:40:
df:43:ef:c2:45:b9:6f:1d:d4:18:a2:ff:db:ee:fd:
b0:33:ff:a9:f5:70:9a:a1:1f:f8:10:aa:4b:d6:93:
f0:2f:7a:bf:ce:e5:48:28:58:a1:35:e5:d8:e7:18:
4e:21:c9:6c:48:80:c5:85:2c:ed:0c:1b:ea:6d:65:
44:55:98:34:8d:7f:19:cc:50:f9:98:0f:e9:73:37:
00:4b:4f:cf:06:50:4a:6e:5d:1b:c8:b1:bb:cf:8e:
66:7e:9c:e1:5b:42:a9:40:b6:5c:d1:83:47:65:5a:
60:7e:ce:a3:2e:48:c5:1d:81:49:2c:a5:57:ca:25:
16:58:bb:c8:bb:7c:57:35:f9:1b:0b:57:73:26:8c:
0e:5e:d1:97:64:f3:ff:5e:35:ba:29:79:27:69:b0:
c7:e1:fb:5d:9d:7d:f4:9b:91:6f:1a:ad:25:36:a8:
05:2a:7e:b2:bb:15:91:15:a3:0b:8b:bc:0d:69:5c:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.116.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40008
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:48:1b:e0:19:22:52:b5:6e:df:28:75:ae:e2:bc:80:95:54:
60:2b:46:89:50:91:3e:38:fb:17:67:fb:01:b6:44:b1:2c:ad:
cb:ca:87:0e:2c:48:bd:37:db:f4:b5:ae:51:c0:37:c2:19:5e:
88:68:ce:99:21:57:df:77:4c:0e:b8:c4:6c:b2:7f:2e:62:e3:
85:c6:e6:a1:85:f4:9d:d3:f6:24:60:ac:43:b3:70:d4:35:56:
e7:53:8f:2b:8e:3a:c1:f4:5a:a5:c6:02:35:c5:e1:fc:c9:de:
22:20:61:a3:6f:f7:43:68:3c:ed:14:7d:e7:fa:2f:db:ef:4c:
1b:ed:15:2e:07:e3:0c:66:24:83:b1:aa:65:8e:56:b0:bf:8c:
45:b7:12:cb:03:95:a9:3d:86:f2:24:1b:4d:15:91:85:e0:82:
ee:56:ff:e0:53:d2:79:de:6d:4b:81:4c:b0:34:e9:01:51:19:
d6:b6:83:34:16:06:6e:97:b5:3a:4e:32:aa:c8:7d:29:4d:f1:
50:22:2d:b7:c4:01:93:d6:b6:e4:e0:50:67:38:e8:38:f3:3f:
10:d8:bc:30:c2:a8:a2:7d:03:d4:99:1c:74:50:55:75:16:b8:
2b:d1:29:30:dd:d0:30:56:e3:58:42:9e:87:e9:18:ba:7b:40:
12:ec:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:28 2026 by rpki-client