
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer
File: 42804204-aefa-4fac-9d39-1599fa403e46.cer (raw, json)
Hash identifier: z4zx6t6SSr8AntUGtRQp5EhG2CV4Y2MaJQLuJ00iIAc=
Subject key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D1F4260881E60083AAE255F40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 10 Mar 2026 12:45:22 +0000
Certificate not after: Mon 12 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 401414
IP: 23.128.76.0/24
IP: 2602:f7c6::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:42:60:88:1e:60:08:3a:ae:25:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 10 12:45:22 2026 GMT
Not After : Jun 12 12:45:22 2028 GMT
Subject: CN=42804204-aefa-4fac-9d39-1599fa403e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:44:25:d1:8a:2a:ff:91:1f:f1:fe:4d:18:
12:11:c2:99:f8:f6:25:92:46:59:d9:27:c8:d4:9c:
f6:cd:ba:d4:d5:2c:9f:11:fb:03:ce:56:ab:85:44:
a8:e4:d1:d7:4c:70:3b:b5:9b:82:eb:c4:15:57:66:
13:48:8c:55:8d:1f:23:83:a5:5b:96:f5:d8:56:39:
d7:be:ed:58:0d:ec:df:de:0d:e9:c4:46:3a:48:20:
70:e2:1f:72:d7:5a:2a:74:8f:de:37:d7:6b:78:ef:
59:20:e0:bc:17:0f:fb:0c:f9:3d:d1:38:ba:ad:32:
78:bd:13:6b:9d:2d:f5:54:c5:86:67:07:87:5f:d1:
86:ff:6d:8d:24:e3:7a:1e:71:b3:de:53:c1:d0:af:
44:e4:21:41:dd:aa:61:ab:96:0b:de:3c:6e:50:66:
68:05:04:ba:70:d1:56:f1:65:87:63:5d:05:ac:96:
88:84:9c:3b:a7:77:71:c0:03:39:9c:28:90:ba:eb:
b2:91:55:f3:e8:00:9b:11:3b:7c:e7:16:ad:19:fe:
1f:62:95:bf:75:b0:f1:cb:e7:4b:69:e4:b6:d2:46:
95:b9:bd:3c:df:ea:d2:e9:10:79:39:d3:f1:d7:8b:
5d:e1:cd:79:9b:e1:c6:52:d6:48:4d:b0:e9:07:ea:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.76.0/24
IPv6:
2602:f7c6::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401414
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:de:20:29:43:7e:d2:50:bc:3e:3b:cb:d4:1e:86:1f:40:5e:
c3:a0:0a:4e:4f:e4:f2:33:e8:4e:61:cd:6e:1d:47:32:81:89:
22:71:22:6d:f2:58:aa:60:fc:d9:ca:19:6c:91:e6:34:38:c0:
16:a9:a7:6b:6f:43:0f:4b:a8:c6:06:ab:a9:b9:9e:7f:97:86:
2b:ac:63:78:63:44:87:6b:01:f4:fc:d1:25:0d:fa:8e:a8:62:
df:39:84:89:55:20:d9:2f:fa:f2:e3:b6:4e:c7:94:7e:69:af:
a7:34:ee:a4:cd:6a:9d:1f:da:2a:f6:39:49:76:3a:36:9f:24:
c8:cc:9b:72:7d:d9:23:cc:d7:ae:23:c7:ed:48:13:93:ff:9f:
f2:b1:1c:18:f8:a9:7e:f0:b6:c2:08:8b:9d:06:75:2d:0b:e9:
a4:60:1b:ca:4e:74:36:93:21:11:59:e3:47:35:13:f3:90:07:
72:5f:c8:e9:58:57:33:82:c4:19:32:c6:55:e5:e0:0d:39:b3:
94:11:de:b2:bd:ea:64:d9:77:59:cb:67:02:cd:ee:aa:8b:ba:
c9:40:9c:ed:14:7d:66:2e:67:a6:95:2f:16:89:bf:40:f6:29:
b8:93:02:01:b0:46:ad:d8:7f:90:74:77:ec:5d:f3:38:23:0f:
4b:be:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:36 2026 by rpki-client