
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
File: a4e67936-c857-487d-93df-2dff7fa79988.cer (raw, json)
Hash identifier: 3U9Bf34dVZ/CxbVmh+VjB/nBGufSI5SnbLBhJh9N5GQ=
Subject key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D4227EEDDA3A237E6B9DA1E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 23 Mar 2026 00:45:23 +0000
Certificate not after: Sun 25 Jun 2028 00:45:23 +0000
Subordinate resources: AS: 19940
IP: 66.114.64.0/19
IP: 72.0.224.0/20
IP: 216.16.144.0/20
IP: 2606:8800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:27:ee:dd:a3:a2:37:e6:b9:da:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 23 00:45:23 2026 GMT
Not After : Jun 25 00:45:23 2028 GMT
Subject: CN=a4e67936-c857-487d-93df-2dff7fa79988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:30:94:4d:5d:a0:b4:01:83:3b:88:31:3f:
ac:e4:be:ec:a4:8d:b6:ff:3a:d3:47:f9:ee:19:35:
72:02:44:a1:1c:56:be:60:b2:d2:a0:f2:1e:58:0d:
03:4f:b1:ba:ec:4c:59:c8:de:12:52:24:2b:b6:b0:
cc:c5:52:2c:1b:76:70:12:22:1d:68:30:05:4a:c7:
43:50:37:b1:fd:0d:63:04:61:c1:a9:3b:79:c0:81:
32:8b:71:df:fa:b0:63:e1:2c:41:0d:be:09:a7:af:
1a:31:3c:7b:0f:26:7d:ca:89:cd:ea:a1:5b:81:c3:
18:4d:0e:3b:c9:ed:34:cc:38:b6:68:a5:0a:20:c4:
e4:b2:4e:8d:ac:a7:7f:ad:8d:ba:a5:28:6a:48:fe:
95:59:b2:9a:dd:17:11:f7:bc:ff:9d:71:c6:39:f3:
58:73:da:6c:72:be:3d:23:64:28:a6:36:1b:3f:f1:
8b:fd:87:3f:9f:19:f3:5c:64:95:58:25:a2:ee:8e:
0a:f5:8f:60:cf:e6:9b:f9:b6:57:f1:74:3d:8f:e9:
39:2f:98:fb:b7:bf:ad:c9:76:6e:c0:a0:5a:f4:29:
ac:df:30:ea:ef:63:97:d7:0b:ab:a0:56:60:fc:d6:
a4:33:e0:e0:1e:94:9d:82:55:f5:30:af:8e:99:ea:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.114.64.0/19
72.0.224.0/20
216.16.144.0/20
IPv6:
2606:8800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19940
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:94:ed:43:48:0b:2f:36:7a:48:9d:55:42:08:af:4d:db:cb:
a6:5a:9b:a9:1c:b4:da:b2:eb:07:cc:c3:cc:ba:fa:70:2f:42:
38:e0:1d:1e:76:e2:f9:27:96:a9:5b:27:30:81:90:1a:19:27:
ca:93:27:d5:c3:e8:c5:f6:20:16:aa:13:18:7e:ef:2d:97:17:
65:c1:89:11:c8:63:df:0a:1b:1b:c6:d4:19:fa:a2:a7:0f:76:
22:7a:44:47:20:9a:45:96:79:b6:08:3c:56:18:34:ad:c6:d1:
0f:52:c9:3d:0d:68:eb:9d:6b:6a:44:a8:a2:ad:4d:d5:42:55:
e2:80:50:a8:f0:ad:d9:be:60:9f:a5:f5:00:70:e4:23:40:b5:
ea:fc:0f:97:2c:6d:da:71:34:39:6b:9c:bd:e9:31:47:0e:2c:
66:eb:b4:91:32:4a:05:23:7a:fd:b8:b8:7f:25:46:20:a4:98:
5c:38:9d:2f:3d:37:32:e9:b7:e0:22:6a:68:1e:85:53:54:61:
6e:08:b9:8d:3e:f6:c1:ce:5d:c3:55:98:99:b1:94:ad:1e:bc:
9d:1f:5f:36:9e:f7:47:07:8a:75:9f:42:74:06:7e:ff:33:46:
ac:ae:f3:a3:4d:f8:eb:2d:c3:d1:24:b8:65:61:da:e6:4d:f8:
0d:a9:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:03 2026 by rpki-client