
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/20ec4796-73db-44c4-8722-11c80c664cdb.cer
File: 20ec4796-73db-44c4-8722-11c80c664cdb.cer (raw, json)
Hash identifier: spijOQpNQKUHuSJ3aOJkbsFpaoIEGsusVymV+EjG8/E=
Subject key identifier: 3A:43:35:98:B4:14:6E:72:2D:23:27:F5:26:9B:23:70:F5:F9:49:72
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial: 010D0C9F4328584FCEFC28BB34851C08E8708639
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/20ec4796-73db-44c4-8722-11c80c664cdb/20ec4796-73db-44c4-8722-11c80c664cdb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/20ec4796-73db-44c4-8722-11c80c664cdb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Nov 2026 21:00:02 +0000
Certificate not after: Tue 13 Feb 2029 21:00:02 +0000
Subordinate resources: AS: 393318
IP: 198.181.200.0/23
IP: 2620:61:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:ce:fc:28:bb:34:85:1c:08:e8:70:86:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Validity
Not Before: Nov 11 21:00:02 2026 GMT
Not After : Feb 13 21:00:02 2029 GMT
Subject: CN=20ec4796-73db-44c4-8722-11c80c664cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f9:61:d7:77:40:66:bb:03:e9:57:05:40:8b:
6a:f4:d0:10:99:b8:0f:f9:b4:ce:23:69:ed:37:a0:
4e:e5:f8:d9:5a:db:5e:d7:48:89:c0:a8:d2:a6:c8:
0e:66:41:6a:15:b5:1b:4c:f8:3b:1e:a3:1a:77:32:
4a:e7:89:70:a5:36:c2:8d:ea:a1:73:c3:af:07:c9:
ce:0d:45:1b:79:8b:53:88:76:c1:9c:1c:81:36:4f:
b3:0e:ee:0f:a0:52:c5:bb:08:cd:f5:cb:0c:e8:9c:
16:53:38:40:bc:bd:ed:40:9f:87:67:fb:09:50:65:
76:3b:37:8b:6b:54:c7:82:8f:7a:8d:22:69:85:f0:
b9:02:d1:a5:58:58:19:15:cf:9c:b5:c7:eb:05:f8:
46:ce:6d:4e:76:0d:85:5f:8c:20:60:6f:3e:ac:11:
0a:cc:d8:79:cf:3c:27:be:2a:e5:f3:e3:56:68:f6:
3d:3e:f9:a5:be:98:52:45:21:dc:08:a0:8e:d1:5d:
05:df:93:ea:f8:ed:06:8d:0d:af:b4:70:68:ee:e8:
a5:be:c7:b4:ef:10:eb:77:27:ed:95:21:53:5e:92:
00:8f:b3:c9:97:cd:ae:8d:f5:d1:3e:e2:9c:dc:ef:
e5:26:6c:d9:01:04:55:0c:9e:2f:89:3c:56:4a:bc:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:35:98:B4:14:6E:72:2D:23:27:F5:26:9B:23:70:F5:F9:49:72
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/20ec4796-73db-44c4-8722-11c80c664cdb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/20ec4796-73db-44c4-8722-11c80c664cdb/20ec4796-73db-44c4-8722-11c80c664cdb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
X509v3 Authority Key Identifier:
keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.181.200.0/23
IPv6:
2620:61:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393318
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b1:27:b5:ea:c0:64:c3:9a:02:1f:df:21:27:69:c1:fb:1a:
85:b8:21:37:e7:11:73:89:6f:7f:83:d2:18:d5:d1:9e:99:c7:
61:63:53:a4:d0:d4:df:45:b8:91:6b:5a:40:9b:2a:9a:49:fd:
55:a3:a1:70:55:62:c1:a8:4b:3b:42:67:ab:8c:f2:36:09:da:
fa:a9:f9:4b:4b:a1:d7:30:71:39:d6:8f:1f:12:ab:fd:77:d1:
a2:f5:b5:f9:ba:a8:b5:5c:9e:7a:a3:2b:75:2a:ed:f5:cf:33:
e4:1b:37:a6:b0:ac:fe:7e:03:d8:13:0a:13:ac:20:7f:2f:16:
48:47:f5:ad:39:e0:fd:f9:8d:53:2d:07:4e:fb:a8:28:2d:2a:
13:13:8c:1a:7d:89:a1:d8:23:04:62:34:d0:ad:92:44:99:d4:
22:9e:29:56:09:14:97:c9:2d:e3:c9:f7:62:a7:e2:d7:9c:36:
15:83:18:c4:e6:cf:fa:1f:64:c2:3d:15:cb:14:b4:ea:6e:55:
59:81:87:7a:a0:0f:d2:d5:b6:96:1c:62:d9:c8:81:e8:94:3b:
09:f2:78:15:88:de:8f:1d:78:20:c8:37:4b:06:5a:07:ba:44:
59:df:df:46:e6:be:a0:6a:e9:7e:89:05:0b:14:6e:89:99:a9:
81:04:dc:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:50 2026 by rpki-client