
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
File: 43d85349-fcc3-4834-8564-24f8a824b0cd.cer (raw, json)
Hash identifier: sqMI0OlkcjE3BxVtPDlP68POyBFsbaTDUezMy6ZBWA8=
Subject key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E7BC2B0A17824A57F6064A5E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Jul 2026 08:45:13 +0000
Certificate not after: Sun 15 Oct 2028 08:45:13 +0000
Subordinate resources: AS: 399613
IP: 23.141.148.0/24
IP: 2602:f698::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7b:c2:b0:a1:78:24:a5:7f:60:64:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 13 08:45:13 2026 GMT
Not After : Oct 15 08:45:13 2028 GMT
Subject: CN=43d85349-fcc3-4834-8564-24f8a824b0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:f4:4b:9a:80:e6:61:6f:78:cc:3f:ae:87:
b6:fa:b8:55:3b:98:34:e0:d4:0e:1f:0c:88:38:a5:
06:f1:c9:de:7d:17:e1:e6:a7:7c:21:6b:b6:9e:b8:
ec:a3:e8:99:7a:e0:b6:a3:c8:b6:50:5e:52:c4:57:
e9:24:16:0d:8c:92:f9:a8:38:b1:9f:73:cb:4f:72:
00:65:8c:e8:08:35:f4:8d:9a:97:d4:c0:65:7f:34:
c0:e0:d3:0c:2c:50:4a:ca:07:f3:81:e6:fe:c9:7f:
c3:93:01:96:a1:e0:df:b4:bb:2d:6c:41:b9:28:55:
a2:ec:19:f2:c2:e1:32:3e:e1:f1:f2:dd:eb:21:d6:
bb:86:07:b8:6a:9b:fb:32:f9:8e:04:0a:d1:77:00:
e3:87:29:07:2f:ee:7d:84:79:34:d6:73:c2:e4:62:
aa:88:97:dd:7b:93:3d:02:e7:1d:87:5d:90:de:b7:
cb:2e:39:2e:f7:3a:5d:09:3a:da:93:f6:9f:97:55:
68:cd:f0:86:23:6b:f7:ea:e6:8e:57:5a:b1:52:d0:
9a:84:0b:c1:06:9d:e1:82:64:d6:0a:b1:70:f4:68:
bf:53:a8:58:7c:63:46:7e:1c:7a:af:73:1d:ef:56:
1e:56:a8:d5:14:ec:b7:9f:f4:12:fd:41:69:48:55:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.148.0/24
IPv6:
2602:f698::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399613
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:c4:1c:9a:a7:27:f9:38:66:36:d2:2a:8b:d1:12:26:a8:27:
1e:e4:62:3a:d5:64:6f:76:b6:31:20:71:69:94:7f:47:f8:af:
2e:8e:f7:c6:6e:06:75:e5:0b:35:73:4b:a2:61:5b:c8:20:c0:
27:87:57:85:92:8a:8d:cb:d4:5f:19:40:67:b9:ed:3d:84:3b:
d9:4f:58:ba:c9:9d:c2:c1:fb:00:d6:8c:41:a7:0c:c8:e5:7d:
27:52:2a:f0:79:49:e0:23:dc:a3:cc:25:ed:b5:98:c7:a6:0b:
5e:08:30:05:4e:fe:ad:44:1d:3e:c9:75:aa:1d:75:44:af:52:
75:1b:46:72:e7:e8:e3:5b:af:b7:f8:f9:5a:9e:e2:ca:87:30:
03:69:65:16:df:3e:e4:a5:14:ae:a0:d0:6c:42:0d:a2:32:6a:
d9:21:96:18:ac:53:79:5f:1c:1f:81:61:ec:fe:d5:11:ae:47:
6a:06:80:2f:36:a4:cb:58:f3:9a:c4:71:e6:0b:89:ad:df:29:
f2:68:61:27:92:54:1d:33:f3:96:f6:be:68:b6:99:36:bc:56:
5c:83:38:a5:95:b1:ed:fb:a2:d6:93:aa:06:8a:55:ec:db:2f:
42:e2:66:fa:15:28:66:6e:13:9a:32:31:b4:e6:25:af:ad:3d:
39:7c:fb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:58 2026 by rpki-client