
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
File: 7b430551-8bf9-4310-8a7f-b2233e29affd.cer (raw, json)
Hash identifier: 8Wvb7AZ1eAWg8ru8bYBE4f9sANW5VVRDjSzQED4svEU=
Subject key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E8B1D713300D19A8C0BD052A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 18 Jul 2026 20:45:12 +0000
Certificate not after: Fri 20 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 53790
IP: 199.127.236.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8b:1d:71:33:00:d1:9a:8c:0b:d0:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 18 20:45:12 2026 GMT
Not After : Oct 20 20:45:12 2028 GMT
Subject: CN=7b430551-8bf9-4310-8a7f-b2233e29affd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:9a:18:ed:dd:62:ec:ad:09:e7:d8:64:4b:
81:a5:2c:f5:7b:42:f3:8f:93:fc:b5:16:ec:fd:2d:
21:e5:90:fd:89:db:03:7a:6c:83:69:f3:24:15:ce:
8d:32:ee:df:fb:f8:88:c1:ba:49:b2:d1:bf:d2:f7:
a0:8c:93:6a:03:66:cf:3f:12:21:e9:81:3c:0e:e4:
64:68:dc:72:b6:e0:08:d0:d5:e8:f4:dc:7d:f8:9e:
49:8b:e1:4b:50:31:5d:a2:26:74:97:60:45:9f:65:
0e:4a:f9:6d:63:c2:e1:3b:42:de:a2:1f:7a:4a:e2:
47:7a:54:de:d0:cb:b9:30:a4:5f:0b:66:8f:0c:17:
17:3d:f7:06:ba:71:56:03:55:1f:10:6a:51:7a:29:
2a:ef:5f:ae:7c:d3:cd:ec:89:dc:9e:df:10:07:bf:
5d:89:c2:65:a2:d2:d5:5c:a1:3e:71:1e:0f:07:c3:
98:21:1c:01:c3:c2:54:1b:66:cd:52:2d:fb:bc:d2:
cf:67:13:df:ea:5e:c9:8f:3e:4d:2b:3e:51:dc:7d:
bf:5d:6a:b0:e1:14:af:c0:8f:b6:55:7b:91:fc:a0:
ce:a0:c0:35:74:d3:bd:68:56:e2:84:f4:21:b8:a9:
8f:c2:4e:92:91:67:6a:17:8e:d9:05:cb:be:14:fb:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.236.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53790
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:90:22:39:ee:f7:55:4b:c9:6b:9c:71:92:6d:e8:87:cf:cc:
b5:25:8c:b1:39:de:36:2b:18:cd:90:3e:e5:97:6b:9e:df:dd:
81:ff:e3:5a:d1:2a:2d:40:07:55:3b:ef:85:49:87:15:b1:4a:
f6:18:c9:f1:af:11:a7:2a:7d:05:68:32:07:e3:72:8f:38:0f:
c4:1e:98:1f:ad:57:69:d9:d1:9d:52:09:75:73:e4:0c:c8:9b:
77:3b:5b:b5:18:22:a7:39:bf:66:1a:74:80:37:d5:eb:9b:94:
15:f0:c3:20:ae:be:1f:c2:8d:43:a2:f1:30:79:60:a7:eb:fb:
af:00:51:9c:e6:e7:dc:d6:ea:c1:4f:6d:30:c4:b2:36:15:30:
d3:53:ad:06:27:e3:58:f1:77:76:18:a1:fb:e9:e4:c9:f1:89:
e4:27:84:0c:be:ab:c0:ac:63:08:1a:bd:66:6d:5d:3a:f6:da:
f2:ff:21:dc:a6:9c:87:a5:82:20:f1:dc:eb:f5:94:31:87:e0:
7b:68:62:d8:c7:4f:3e:17:f6:fb:51:cb:47:da:21:50:ea:33:
b9:4c:bf:68:2f:13:64:df:65:c6:a0:8a:54:02:4a:c9:f8:10:
98:df:0c:c6:20:70:88:4f:7d:44:59:29:33:95:ac:24:93:e6:
66:3c:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:11 2026 by rpki-client