
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer
File: 7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer (raw, json)
Hash identifier: T5OorE0ukYMRB44EAz2SYID6fZAkjwt+F08qdtKVTXo=
Subject key identifier: 6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584E5AEDB7C6BA82FBAAD6EBABD0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 14:30:14 +0000
Certificate not after: Fri 29 Oct 2027 03:21:26 +0000
Subordinate resources: AS: 401869
IP: 142.248.88.0/23
IP: 2602:f5b9::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:ed:b7:c6:ba:82:fb:aa:d6:eb:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Jul 1 14:30:14 2026 GMT
Not After : Oct 29 03:21:26 2027 GMT
Subject: CN=7507a0f9-2e97-4b0c-902e-44f0f1c62a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:03:21:b6:60:34:ad:91:26:08:53:1c:4f:
18:77:61:ad:40:19:e6:62:66:42:04:30:35:de:a5:
b7:25:05:38:a7:59:f3:04:57:dc:76:44:77:39:77:
13:03:ac:92:98:45:05:b4:8f:a0:75:8b:be:39:c2:
29:ef:7e:8b:13:cb:57:9e:ef:6a:88:6f:ba:d1:d1:
14:de:2c:79:de:5c:78:38:a4:75:49:85:41:f9:02:
13:7e:b5:8c:5b:6c:af:96:71:a0:1b:88:97:2d:ff:
32:82:21:cd:d8:9b:5f:2c:5e:e9:2b:0d:51:c8:bc:
6d:df:fc:d8:5a:1c:13:95:73:42:32:42:66:56:ef:
b6:58:1e:88:ed:f5:90:20:c4:88:fb:09:97:70:d9:
78:2a:8f:b6:4d:e6:79:0b:fb:95:9f:cf:94:16:a3:
f8:e3:25:4d:b5:a6:25:8b:2e:aa:45:b1:ac:4e:7c:
ca:1d:64:f2:5b:6f:19:4d:67:cc:56:65:7d:52:3d:
06:1b:e2:e4:d7:7e:26:16:b5:ad:2a:ba:54:c4:be:
87:93:75:a3:4a:cf:8d:46:6f:93:be:c4:06:6c:17:
82:04:90:d6:59:3f:e2:a0:a0:0c:02:34:b3:ed:ea:
ec:30:8a:ea:72:fe:9f:0e:7e:05:1e:46:02:09:61:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.88.0/23
IPv6:
2602:f5b9::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401869
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:36:d0:df:ad:c6:54:53:9f:b7:a4:0c:44:cd:c2:6d:dd:c9:
8f:a5:a4:f0:c9:16:9a:f9:b5:d4:1f:41:73:fe:1e:77:30:b6:
3a:28:8d:14:b1:7f:6b:5e:22:d4:77:fd:b4:8d:28:de:12:d4:
02:00:8d:4b:06:3b:bd:34:d3:3a:00:9e:84:5e:1d:e7:e7:87:
2c:1a:61:61:fc:01:8b:e8:c1:74:49:f3:0f:da:c9:51:47:e3:
02:59:7f:34:e3:18:03:9f:32:fd:da:e1:2c:86:2f:ad:f4:60:
4f:5f:e2:4b:b6:25:90:4f:bd:2a:71:07:d5:af:60:0b:bf:64:
03:13:80:68:3e:3c:04:9e:31:29:0c:9a:71:ad:ea:60:2a:a6:
d8:2a:6d:7f:3d:13:4b:fd:66:3b:21:4f:8d:4b:a6:f6:e2:c1:
4a:36:69:c1:88:d4:0a:99:d0:13:80:16:cd:c2:f0:f1:4f:15:
36:c2:88:80:c4:a4:5e:9f:b5:87:19:e1:8e:7a:72:d4:9d:3c:
b3:c8:e1:65:cf:5b:c1:e1:74:f5:49:02:0b:99:a6:d8:e7:8f:
4c:03:9f:f6:32:55:a9:2a:74:d9:c7:c6:18:76:df:3c:73:01:
2f:84:4b:21:3c:e3:af:ba:fb:01:e6:26:cc:f1:b4:56:41:5c:
da:f2:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:07 2026 by rpki-client