
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
File: a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json)
Hash identifier: 6Ma7Yti0LU4ShPprPLSqKAFsnKMa7NwIRzvhtGVBF9A=
Subject key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DCAF3673701491A3A64D5BB40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 11 May 2026 00:45:17 +0000
Certificate not after: Sun 13 Aug 2028 00:45:17 +0000
Subordinate resources: AS: 27010
IP: 23.165.184.0/24
IP: 208.68.180.0/22
IP: 2602:f9f6::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ca:f3:67:37:01:49:1a:3a:64:d5:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 11 00:45:17 2026 GMT
Not After : Aug 13 00:45:17 2028 GMT
Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce:
e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b:
c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82:
28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1:
3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81:
48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a:
eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59:
c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef:
34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03:
c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19:
de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0:
72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2:
32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1:
19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13:
9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14:
a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32:
da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.184.0/24
208.68.180.0/22
IPv6:
2602:f9f6::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27010
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:92:21:5c:6c:5c:e5:f2:41:c7:df:8f:fa:95:43:a5:9f:b7:
0f:b4:43:70:cc:b5:c5:42:54:58:b1:7d:7d:12:58:84:50:f7:
27:b3:87:b3:3c:19:78:e5:8c:50:aa:37:5d:82:c6:3c:b7:4b:
d7:a4:fc:8b:01:7d:15:92:39:02:5d:ee:5c:51:3d:2a:17:d0:
3f:bd:59:a8:20:2c:8f:e4:14:5f:c5:b3:c4:45:55:4f:f8:71:
4a:aa:6e:ad:fe:08:26:e1:99:3a:87:eb:bc:39:24:d1:61:06:
a8:dd:51:4d:c6:9f:52:9a:be:1c:a0:5b:ba:1c:d0:00:f6:39:
97:38:73:8b:97:5c:80:33:15:9f:10:c5:29:8c:57:35:86:7a:
f2:c0:73:7f:12:2d:bf:7a:2a:54:fa:fb:64:56:b1:37:58:b9:
3c:c3:b5:41:c9:78:9b:5e:35:dd:4d:48:a3:43:dc:29:b5:12:
10:ac:3e:62:5f:ad:93:44:2d:b2:88:a3:0a:0e:89:85:30:59:
c5:74:58:8e:0f:99:4c:89:f3:f1:e7:e1:a5:09:ed:67:21:3b:
82:04:05:f9:7c:86:84:79:7e:09:f0:07:4b:bb:0e:c0:c8:24:
33:a8:dc:74:68:5a:65:7d:41:21:63:40:9a:7c:cd:f9:50:b1:
18:02:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:09 2026 by rpki-client