
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer
File: dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer (raw, json)
Hash identifier: 1ux2G6qZyIeK7Iy+7cNIRyfTswn1MAZn1jW8VMO+AqY=
Subject key identifier: 75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C
Authority key identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73
Certificate issuer: /CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf
Certificate serial: 010D0C9F4328584D4922A3041F34C100FD7A2F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/750FD3BA0F6C08563CDDBE911979FB122797649C.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Wed 25 Mar 2026 12:45:22 +0000
Certificate not after: Tue 27 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 53427
IP: 23.128.100.0/24
IP: 2602:fa91::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:22:a3:04:1f:34:c1:00:fd:7a:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf
Validity
Not Before: Mar 25 12:45:22 2026 GMT
Not After : Jun 27 12:45:22 2028 GMT
Subject: CN=dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:4f:c9:13:a7:36:68:d8:e3:39:13:3e:32:
3a:26:4a:97:88:23:2c:52:db:bb:3b:99:e2:c8:da:
96:d7:7e:5b:e9:cb:28:3a:22:a4:d8:77:db:96:cc:
7c:3b:89:1b:e7:62:24:b4:5d:f5:63:e4:6b:71:85:
b2:99:2a:b7:00:c1:91:f1:b5:4b:68:2a:00:fd:ff:
f3:ae:d0:9a:fc:fc:ee:87:b9:bc:d6:37:df:c0:69:
53:55:2c:06:e5:7d:b1:d0:b7:d6:37:80:44:de:dd:
23:bb:84:76:d7:e8:0a:bd:87:0f:07:5a:41:55:f8:
52:cf:0b:4e:f5:af:e7:64:ae:b5:6e:2a:62:75:b0:
d0:8b:d1:9c:34:9b:73:a5:ee:55:2f:59:8c:4b:0f:
93:ca:05:0d:c5:5f:ba:96:99:e6:11:6f:65:23:f2:
02:8c:4a:b6:b3:b3:57:84:6a:d6:d0:a7:da:75:97:
0e:33:6e:21:ca:64:b1:50:2a:f9:a8:d5:19:89:23:
1a:87:14:6f:b1:0c:e7:4d:a2:51:00:c3:1b:c4:3f:
94:08:e0:45:70:78:e8:32:26:e8:08:ad:f6:46:ef:
95:92:45:e7:5c:42:1f:7f:0b:19:c3:bf:b6:c4:03:
a8:68:43:cc:f0:d9:49:63:1b:6d:4a:79:af:04:72:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/750FD3BA0F6C08563CDDBE911979FB122797649C.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl
X509v3 Authority Key Identifier:
keyid:0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.100.0/24
IPv6:
2602:fa91::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53427
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:31:cf:79:89:df:c9:d2:b0:7f:e3:77:09:5b:32:4f:77:2f:
40:a6:01:1d:6d:5b:1a:92:2a:ff:d3:f6:dc:15:5a:f7:55:18:
40:d4:ae:a7:87:5d:ba:e0:20:dd:fb:98:1c:05:57:67:85:61:
2d:db:b2:2c:01:7f:7a:df:94:fa:bb:71:ae:39:7f:b1:c4:85:
68:2a:86:c3:a7:17:fe:80:8b:9b:b2:ff:f3:0c:cc:02:e1:f4:
7a:bf:33:0a:dd:e4:94:4d:bf:0f:e0:60:18:a3:72:3b:a9:49:
08:e9:83:30:cb:82:c7:90:e9:5c:fd:82:73:4f:c2:3b:71:50:
c4:d2:23:fb:61:c5:c3:50:2c:4f:70:16:a2:5f:87:57:0c:25:
5d:09:a8:58:f5:06:c5:2e:de:36:1e:df:81:16:6a:bf:ec:64:
46:5a:21:4b:44:92:d2:85:cf:68:2c:98:c8:9d:fe:70:5b:8e:
e6:d2:5e:c1:8b:15:23:f8:e5:ee:b3:af:64:d1:fc:50:79:2a:
c2:65:81:23:86:f9:7f:3c:6a:f6:ea:a6:3c:2d:48:07:ba:a1:
f6:59:0a:fb:84:71:d9:62:76:1c:ae:75:b7:17:9c:96:2c:34:
8a:0f:df:5c:57:0a:72:3e:bb:f4:a2:44:fa:fa:b5:6e:e1:c8:
39:e6:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:37 2026 by rpki-client