
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer
File: 23a36039-999e-482c-a907-eb5291746b2b.cer (raw, json)
Hash identifier: qCRUxOqNMP1PbKXegnsYyBnKISKQfqiljqseLtFVAyk=
Subject key identifier: FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584FA397FF2DCAD0E11A66790330
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 27 Oct 2026 07:58:28 +0000
Certificate not after: Mon 29 Jan 2029 08:58:28 +0000
Subordinate resources: AS: 403141
IP: 23.166.36.0/24
IP: 2602:f29b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a3:97:ff:2d:ca:d0:e1:1a:66:79:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 27 07:58:28 2026 GMT
Not After : Jan 29 08:58:28 2029 GMT
Subject: CN=23a36039-999e-482c-a907-eb5291746b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:7d:45:16:7f:0c:3c:fc:fb:7c:46:a5:47:
95:fc:24:d1:8d:80:29:fd:19:d4:c5:1b:6c:be:a5:
4a:b4:96:ae:fe:ec:d2:98:a3:a1:e9:15:4e:20:26:
b4:7c:82:b0:67:10:1e:5b:51:0c:f2:75:14:4b:b3:
ab:e7:81:a6:95:3a:75:76:ec:7b:33:e1:8e:7f:4d:
ef:20:a8:20:5d:05:e9:b6:ef:96:d3:64:f2:5e:bb:
5d:ef:bc:70:14:0f:94:53:4f:88:fe:01:25:22:84:
0a:a8:d5:ab:f3:22:e9:b9:4c:08:2d:83:58:f2:e0:
41:92:58:d1:47:cb:11:f2:0e:d3:36:22:77:80:19:
f9:3c:53:e6:49:b5:18:2f:6b:65:ec:a1:ac:b0:ed:
60:6e:68:ee:88:c4:7c:a3:ed:07:ec:2d:62:63:ff:
ec:a9:28:e6:15:cb:68:4d:c6:d7:b3:63:b4:aa:68:
a1:a0:ea:81:b2:c6:de:f2:bb:93:bc:fe:ba:32:be:
8a:87:04:41:21:d8:15:5a:42:e8:a8:af:f0:15:cf:
ee:3a:41:27:27:f2:d3:9e:6f:a6:c6:27:73:7b:33:
c7:9e:69:21:cd:8d:b1:12:ca:9d:bc:ef:5d:01:ee:
0c:93:70:8a:27:89:85:d0:8a:0b:75:e2:36:a9:c0:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.36.0/24
IPv6:
2602:f29b::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
403141
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:80:2c:52:99:a2:3e:83:5a:0e:35:ee:9d:2e:e9:4d:f5:75:
59:c2:c7:8d:37:ad:7f:31:43:76:62:7a:1f:78:ed:c3:d3:3d:
d1:66:1a:5b:75:a1:47:92:92:0d:f5:1e:f8:df:1c:d3:eb:e7:
22:2f:db:be:66:df:22:3d:3d:45:1c:17:6f:72:93:a3:02:4a:
51:19:34:3f:72:e0:8f:53:95:0c:19:16:65:0f:54:36:49:c1:
60:ed:e3:48:4b:20:56:0a:de:d1:66:70:27:7d:9e:07:b9:5c:
21:9d:95:75:81:03:00:38:69:ec:56:22:e0:3a:c1:b7:ec:7a:
6f:a1:17:09:e2:c2:69:88:76:4a:ec:d9:5f:2e:54:f8:54:82:
06:8a:cd:04:8e:58:fe:2f:43:e7:4f:c8:cb:2b:53:cd:96:2d:
d7:e1:99:a0:b5:2f:37:08:0a:42:f1:8b:52:18:cc:96:63:de:
0d:7e:47:70:fa:08:8e:ef:9f:03:08:45:fa:db:97:ec:df:e0:
eb:f5:0e:18:8b:73:0a:56:ba:b1:bc:0c:ca:c3:53:a7:5d:d6:
a5:0c:7d:b6:69:11:52:07:43:47:f0:0c:ef:0d:65:01:53:cd:
ae:a6:8d:bb:07:19:96:56:c2:f0:be:97:45:44:6b:ba:c8:77:
66:d7:be:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:28:12 2026 by rpki-client