
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
File: 4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer (raw, json)
Hash identifier: W2iOR+s04WmTwC3qZNumKAqpnsDLIfQ8h2FmPz0uGfY=
Subject key identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DBB98A63A2A3CF37956465080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 05 May 2026 12:45:18 +0000
Certificate not after: Mon 07 Aug 2028 12:45:18 +0000
Subordinate resources: AS: 401637
IP: 23.149.164.0/24
IP: 2602:f71a::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:98:a6:3a:2a:3c:f3:79:56:46:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 5 12:45:18 2026 GMT
Not After : Aug 7 12:45:18 2028 GMT
Subject: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:bf:db:66:8a:a9:19:80:7a:1d:8a:af:b0:
65:65:a0:bc:37:ee:e8:6c:06:cb:a9:4d:6e:b5:b2:
2f:c6:50:c0:4c:3e:dc:b7:0f:53:be:ca:5f:4b:90:
3b:be:95:ec:8e:24:b5:14:82:87:e4:d9:60:3f:6b:
16:6f:f6:82:d4:ca:23:bd:81:f3:56:08:16:6b:bb:
1f:8c:f2:40:61:60:d1:13:2b:bc:dc:2c:50:68:22:
c2:a5:0f:ef:67:46:c1:7c:b2:1e:2c:03:6e:d9:33:
e7:e2:7e:be:c4:c0:00:03:8f:95:21:44:26:6e:78:
a6:a3:d5:74:23:52:a9:36:dc:4a:51:94:e7:ca:e9:
a1:50:21:b6:78:74:59:f0:2b:84:05:89:a5:63:3f:
50:cf:fa:98:68:2c:21:64:67:7c:a4:47:ef:96:b3:
bf:91:77:b8:19:b9:01:ce:93:1f:8c:f6:f1:eb:16:
2b:ed:2a:fe:fc:6c:4d:39:8e:2d:c8:55:d6:6c:d1:
68:79:ec:89:c9:c6:1c:c5:7f:bb:1c:45:26:7e:27:
41:3f:78:c5:60:0a:09:71:35:14:63:89:27:4a:e3:
6f:f3:9f:10:ba:39:fa:51:ef:a7:ea:83:4d:43:72:
60:1f:12:f0:47:72:1b:b5:c5:b5:d9:33:9a:d4:fd:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.164.0/24
IPv6:
2602:f71a::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401637
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4e:72:dd:c0:36:94:07:eb:a6:e4:a9:81:6e:75:67:d1:8e:
13:63:1e:4f:37:5b:6e:e7:17:8a:77:ff:be:65:30:b5:d2:95:
49:8d:d2:8f:f6:de:e6:b0:af:8c:e6:00:f5:9f:02:ce:47:36:
c5:6d:a1:4e:36:16:d3:95:d8:8c:d4:3b:3a:ce:7b:4b:20:d7:
9e:03:fc:10:76:74:ab:96:e1:1a:b3:1a:0c:dd:20:81:da:65:
10:7e:36:07:6a:a0:98:28:fc:8c:d7:78:80:a9:62:33:d9:8b:
e4:fa:62:e3:b7:86:05:1a:35:e0:ae:32:c0:19:12:e5:d9:08:
1a:10:92:db:ad:c7:7b:30:c8:1d:da:ba:6d:e9:31:fe:c3:5a:
22:90:35:8a:d5:e7:2d:bb:ad:74:ae:b2:0f:d4:72:02:7f:02:
63:c3:c0:2c:5c:74:1c:0e:c8:94:f3:e2:db:90:33:a5:e3:f1:
5a:73:b7:2a:df:dc:50:97:21:b8:b0:65:fe:1a:40:94:32:ff:
83:be:fb:01:eb:bb:39:85:c5:7e:90:f6:07:3d:ad:94:5f:37:
cf:3c:47:ea:7e:36:96:05:a2:4d:f6:96:2f:e8:36:f6:fb:d0:
18:0a:44:7b:ab:fe:6d:8e:8d:e3:44:3e:da:e8:91:74:f3:1c:
8e:37:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:01 2026 by rpki-client