
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
File: 46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer (raw, json)
Hash identifier: VI35SByQTKD5awxypKDjXohRdhzjELkHmYi6d34ctg8=
Subject key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E8B1D713CC9C4AB2151E5B200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 18 Jul 2026 20:45:12 +0000
Certificate not after: Fri 20 Oct 2028 20:45:12 +0000
Subordinate resources: IP: 23.167.56.0/24
IP: 2602:f9c4::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8b:1d:71:3c:c9:c4:ab:21:51:e5:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 18 20:45:12 2026 GMT
Not After : Oct 20 20:45:12 2028 GMT
Subject: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:f9:36:17:65:f5:8b:60:62:9a:84:40:68:
72:91:2f:00:ff:85:5e:07:4d:c7:11:1e:f9:2a:73:
6e:62:77:73:62:61:1c:db:01:58:77:d3:f1:05:2b:
ee:2c:bb:35:fa:90:2e:ae:ba:71:bc:d3:bb:f9:fb:
f9:d1:46:bf:d9:7e:2c:ab:d2:aa:f7:d5:f1:db:b9:
b8:c8:d9:ca:41:55:2f:70:b7:9f:f5:50:4d:8b:4c:
20:fa:1b:ad:e4:8b:30:d7:cd:7e:a4:eb:3e:7b:6d:
48:f5:f5:1e:7f:79:12:db:8d:e6:30:5a:41:e7:76:
5e:fb:30:4f:fd:a9:42:2d:55:12:b9:2a:d6:7f:2c:
39:f0:50:ab:f2:dd:d3:46:a8:1c:60:f5:b3:31:95:
bb:4f:e4:82:e0:df:58:07:4f:c4:d8:44:e3:e9:3f:
e1:9f:41:a2:08:91:33:ad:0f:a1:55:ac:ec:b0:b9:
96:af:e1:9e:f5:5d:f8:69:34:b6:67:dc:ff:f6:a6:
ad:2a:42:4a:28:2d:3f:26:e6:45:9a:e8:6f:ab:d1:
37:9b:61:9c:78:3a:3b:7e:6a:33:c4:69:1c:57:7f:
93:37:b3:02:5e:a8:56:3e:e1:ee:e2:9c:d7:a0:50:
e5:1a:c8:58:28:56:54:12:30:a6:60:de:7c:0a:d6:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.56.0/24
IPv6:
2602:f9c4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:0a:8b:d2:c4:74:f5:5b:ca:04:f1:76:09:d8:8f:65:e8:4c:
98:77:50:da:de:3f:ba:99:83:32:e8:3f:c6:08:f6:0d:e7:98:
58:ec:28:50:7c:e1:57:bc:57:88:0e:de:17:b1:1c:24:1f:9c:
be:80:ec:3e:09:e2:08:1d:3b:e3:57:a2:61:bb:5f:0a:bd:b3:
f5:b1:e4:9f:16:f4:ad:c4:07:ce:44:f4:8f:eb:6b:c9:3c:16:
40:58:d6:64:d5:31:0e:e4:4c:35:4d:ff:a7:a0:85:6a:77:e9:
65:eb:4a:aa:e0:00:f5:55:4f:b2:75:f3:86:bc:78:1d:e3:8d:
c7:d3:aa:32:00:4b:6f:86:e0:cc:83:f1:eb:e1:f7:94:2d:3d:
b7:d0:6a:8c:9e:0b:8f:cc:c4:5c:43:d4:fa:79:68:f6:88:58:
0c:d2:0c:21:af:3c:1d:6c:a1:dd:a5:55:22:e8:dc:9a:ba:4c:
41:37:d1:d2:f5:3d:0b:b9:8c:c2:df:be:a2:7e:b4:54:a8:c1:
fc:17:ea:88:17:33:8d:03:86:15:52:59:81:bb:cd:53:3a:ed:
aa:63:80:9c:9c:3c:e8:78:89:17:85:1c:bb:00:75:0c:01:9a:
0d:19:38:f6:77:b4:1c:6e:1a:f8:00:8b:82:2e:af:08:f4:54:
59:4b:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:10 2026 by rpki-client