
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
File: ec11d358-69b9-4c96-bf47-e3edd5cff218.cer (raw, json)
Hash identifier: E/nsaE9SDBqq9aPthiwTSZTgAyJgbUbY5A+ijamTxMA=
Subject key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E7D28042FD5F06EE1B82186C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Jul 2026 20:45:11 +0000
Certificate not after: Sun 15 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 36344
AS: 54432
IP: 69.168.224.0/20
IP: 199.115.104.0/23
IP: 2607:dac0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7d:28:04:2f:d5:f0:6e:e1:b8:21:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 13 20:45:11 2026 GMT
Not After : Oct 15 20:45:11 2028 GMT
Subject: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:08:c5:74:12:89:49:fc:fe:28:5d:6d:25:
a4:db:20:ec:9b:0d:8d:48:13:be:10:bd:0f:2d:2d:
28:43:88:a8:cf:87:3a:d0:77:2f:47:8b:db:09:1d:
88:08:6c:c8:4e:cf:14:d3:82:e2:f3:ad:d7:c3:21:
d8:5e:03:88:f3:86:c4:0f:d8:64:09:97:fb:88:5b:
58:a1:64:3c:3c:3b:28:5c:7b:05:83:82:67:76:64:
01:1a:f9:1f:33:c8:f1:19:ef:d5:6f:b2:19:b1:61:
ec:8c:0e:47:80:41:5a:da:92:ef:67:08:4c:b6:65:
83:1f:6d:47:04:65:ff:c8:1a:a5:47:ae:1a:21:b9:
b7:7b:4d:f1:01:3a:99:30:a4:42:2e:36:47:6d:cd:
eb:56:e9:89:bd:0a:fd:11:0d:9a:ae:c5:be:02:a5:
20:3f:39:18:6f:32:65:1a:e2:fd:ab:f6:8e:b7:ec:
c1:a6:54:9a:1e:b4:da:c7:90:37:ec:aa:e3:44:5f:
2e:ad:4c:5d:a8:fe:c6:ff:c5:2b:24:49:e4:47:d0:
a6:97:9d:1a:c9:3d:7a:38:29:66:e8:5b:a1:f9:2b:
90:28:71:34:c6:1d:10:0d:3d:b7:c8:35:e9:85:31:
a4:1f:5c:fb:9b:f3:d3:33:f9:12:bc:95:06:ff:2e:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.224.0/20
199.115.104.0/23
IPv6:
2607:dac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36344
54432
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:e8:5b:6e:c0:54:20:f4:1b:a4:85:b2:83:ad:3a:78:f3:06:
0e:eb:9e:7d:09:4f:06:40:1e:ff:8f:ae:e4:cf:1e:b7:86:4d:
36:03:26:30:f2:8c:b7:41:be:63:95:83:5c:68:69:f2:d3:d6:
9d:98:a2:ce:21:1c:b6:e7:60:8b:0e:d0:4d:a0:28:99:bd:6b:
e4:95:75:f6:e8:8f:d3:9a:ff:5a:d2:53:01:69:48:b5:ee:cc:
46:57:9d:f6:60:77:f9:6f:55:61:64:1f:f3:a3:54:15:e4:c9:
2b:89:fa:ac:8c:8a:01:3f:33:f9:d2:5f:76:a3:f2:aa:78:88:
2f:96:66:e6:66:c1:5e:82:c2:a4:36:8f:9c:5c:45:2d:2a:89:
b4:58:a5:83:df:65:c9:46:15:74:fb:23:70:2a:75:d0:e9:c3:
1d:7b:bd:d6:2b:a6:93:27:bb:ab:26:01:70:b3:b5:ef:02:db:
a4:89:39:f2:df:63:52:d3:6b:83:99:f0:cb:ca:0e:9d:af:c9:
a7:4b:22:4f:0c:c4:2c:2a:bc:fe:b3:93:91:1b:d1:3e:52:99:
74:b7:95:e9:9e:b6:b9:8d:96:50:6b:1f:5f:86:a9:66:47:85:
38:b8:bd:88:13:25:50:f4:00:70:e6:8b:96:a9:47:cd:14:60:
3b:49:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:57 2026 by rpki-client