
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
File: 7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer (raw, json)
Hash identifier: bvQuP05VJAWDsA5P9S+FffbWWdnsma95D5k6KuLhjLo=
Subject key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D8EEDB129F3FDFDF46DB73140
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 19 Apr 2026 12:45:17 +0000
Certificate not after: Sat 22 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 16611
IP: 23.163.136.0/24
IP: 23.175.248.0/24
IP: 142.249.120.0/22
IP: 149.112.111.0/24
IP: 2602:fa07::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:ed:b1:29:f3:fd:fd:f4:6d:b7:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 19 12:45:17 2026 GMT
Not After : Jul 22 12:45:17 2028 GMT
Subject: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:4e:d2:08:91:e4:ab:cd:7d:f9:bb:d6:a1:
6d:7c:c4:30:d0:9d:b4:b7:97:e3:a3:7a:f6:c7:12:
ae:88:f0:b0:76:cb:19:fa:ca:c2:b4:c8:03:c7:2e:
f3:64:79:3e:06:b7:c8:c6:4e:c1:1c:b7:d3:d7:30:
b9:64:ac:a4:09:52:43:59:8d:96:8b:44:df:29:22:
02:23:76:c8:0c:12:15:ba:90:7c:03:8e:ab:60:02:
ec:82:7c:ad:80:c0:6f:08:b3:f6:91:a7:4d:2e:6e:
04:53:98:9c:52:aa:7f:5a:4f:82:cf:08:00:2d:c6:
b3:29:02:cd:22:eb:e2:c5:3c:58:5d:f2:32:28:27:
9d:5f:6d:42:8a:0d:0f:85:e7:5b:2f:ce:d5:5d:55:
1b:96:6e:58:0e:f0:b1:65:ba:78:ae:5d:1a:09:35:
ba:66:75:ec:d8:05:af:36:e0:82:8e:c7:48:43:2e:
f0:9b:13:1a:88:ad:41:48:67:3e:d0:66:ba:53:02:
56:4d:84:49:fd:9b:50:ae:e5:9c:31:6b:b2:57:ad:
0c:02:90:4c:00:95:57:50:e7:32:bd:bd:8a:bc:24:
93:f7:55:fd:70:dc:ec:68:9d:5b:ba:63:5f:21:3f:
a9:26:4d:cd:84:b9:64:0c:18:cc:42:d8:80:f3:00:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.136.0/24
23.175.248.0/24
142.249.120.0/22
149.112.111.0/24
IPv6:
2602:fa07::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16611
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:df:b8:e0:f3:64:07:87:ee:a8:07:c0:45:e2:1b:19:62:e1:
52:1b:02:89:b5:b7:6f:53:52:8d:c0:92:89:64:fe:e2:e7:c1:
9a:75:85:a9:05:b3:00:ef:ee:46:39:f7:aa:89:00:fb:ec:e3:
45:21:12:3b:9b:60:de:69:c2:44:1b:96:de:92:76:0e:64:21:
8a:0f:b2:ba:22:0d:18:63:dc:8d:57:80:78:43:f0:de:ca:6d:
99:55:4d:95:8d:a6:a0:f9:e7:22:d2:4a:be:34:21:30:e6:f1:
b6:fe:e8:f5:66:e9:3e:53:d2:99:a9:28:b1:c1:b0:ea:56:14:
3d:58:e0:2c:28:42:64:ea:83:e1:75:c4:fd:df:73:e0:7c:bb:
0b:1e:c5:88:85:20:f0:65:cf:49:59:72:83:42:2f:a4:0b:2e:
0b:15:e4:f7:1c:50:97:54:4c:04:ad:c3:ac:46:30:53:7f:a2:
c5:29:b9:bf:ff:e5:3d:7a:34:93:e7:38:7d:9c:e9:97:c7:df:
4f:8a:52:fb:d0:5f:60:19:25:f5:63:0d:dd:54:a6:ad:88:14:
3f:4d:96:4c:e1:4e:20:68:50:2c:92:82:cc:42:08:42:1e:eb:
c8:4b:44:76:7c:7e:fd:98:88:48:2b:fa:47:b2:0d:e2:4c:c2:
bb:88:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:55 2026 by rpki-client