
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer
File: ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer (raw, json)
Hash identifier: KhOW/4T4UcGcIrCx+jzIRLn8szzPmwXJEdzahDF6nQQ=
Subject key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E7097F1EEBB4CAA48876CEE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 09 Jul 2026 08:45:12 +0000
Certificate not after: Wed 11 Oct 2028 08:45:12 +0000
Subordinate resources: AS: 54785
IP: 23.160.104.0/24
IP: 2602:fa57::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:70:97:f1:ee:bb:4c:aa:48:87:6c:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 9 08:45:12 2026 GMT
Not After : Oct 11 08:45:12 2028 GMT
Subject: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:9a:87:9a:f1:c3:dd:98:05:bd:1b:bc:1a:
d2:f3:86:7f:6b:41:a3:8b:89:7a:ab:c3:30:90:cd:
bf:6a:47:5f:74:5d:74:84:36:e6:51:13:f7:57:75:
b2:65:64:7f:32:ed:18:2e:5e:4e:5a:23:7a:54:34:
37:9d:07:94:58:77:49:36:2c:24:c3:37:d7:9e:d3:
16:7b:92:ff:c8:fb:f5:77:77:8b:26:ff:99:98:6d:
d1:45:1b:28:7a:86:9f:06:15:c1:fd:da:1e:bf:2b:
cd:0e:30:c3:60:09:64:c9:47:3b:64:22:0c:8b:fa:
6a:3f:04:98:d9:61:73:ce:d3:91:a9:18:7f:2c:8a:
9b:97:dd:55:b0:eb:31:b9:2e:8d:7d:b3:de:83:3a:
7d:c7:f9:c7:4b:a0:6c:d2:64:0f:51:e8:41:e0:bd:
5e:98:6c:0e:8b:1b:14:b9:d8:46:a0:92:7e:f1:07:
db:4b:16:11:18:0a:7e:8e:a1:5e:d1:b5:44:58:21:
8d:d3:79:9c:91:7d:ac:d8:e5:ea:88:a4:b3:4a:a1:
12:f4:16:fb:c0:4e:15:b2:6f:6b:e6:81:ba:1d:22:
a7:82:74:ca:9b:cc:5a:db:aa:55:ed:f0:11:7e:47:
88:75:a8:53:94:3e:bc:58:ff:da:1e:45:67:82:d9:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.104.0/24
IPv6:
2602:fa57::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54785
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:06:77:3a:0f:53:2c:04:d1:8f:b3:e2:f8:10:30:60:84:1a:
30:00:46:bb:fe:01:1a:09:48:59:33:1a:58:f0:15:83:8f:06:
14:23:e8:88:18:f0:b6:63:86:ca:85:cf:08:30:0d:db:13:45:
3c:ce:e8:da:ab:ec:28:44:7e:9a:0e:fd:85:6a:94:9a:17:92:
a1:c1:81:62:9d:5f:4b:2a:53:59:a0:ee:10:89:70:1f:1b:6c:
0a:c4:e9:6a:75:4a:27:d5:23:a5:68:d3:24:f9:a4:aa:c9:6c:
23:35:2c:2b:c3:e6:1e:4d:b1:d3:70:12:ec:22:dd:b5:6d:35:
bc:3e:fa:58:61:d9:3e:99:22:69:e4:af:f5:7b:a3:29:4e:8e:
c7:d1:b6:c8:62:06:d1:23:7f:78:80:08:c4:1e:2d:42:c0:46:
96:0a:65:59:3e:2f:96:3c:02:48:d9:63:4f:bc:b3:8e:7d:87:
48:9e:c5:2c:a4:f8:73:f5:76:7e:91:de:6b:d3:cb:fc:a6:a1:
da:1e:e3:59:ae:d2:71:3f:97:db:2e:75:ad:08:e7:ad:44:8e:
96:1c:75:36:45:f2:e7:63:d1:79:a0:a4:a3:e4:b5:16:bf:a2:
77:24:5b:7f:37:ab:2d:a8:25:2a:bd:9e:30:85:20:7f:c9:e5:
2e:9c:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:28 2026 by rpki-client