
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b127092-020d-467c-a0c1-d1b4bf2393f9.cer
File: 8b127092-020d-467c-a0c1-d1b4bf2393f9.cer (raw, json)
Hash identifier: jPwIQYxMYax9beCh1dfF4Yc7AlET4L4EBTvib4UlQ8k=
Subject key identifier: 3F:11:3F:B7:5B:CD:8B:2E:9B:BE:5A:99:7B:22:F1:9F:9A:58:F7:FA
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F91A7756F6C209C96C68ACC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b127092-020d-467c-a0c1-d1b4bf2393f9/8b127092-020d-467c-a0c1-d1b4bf2393f9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b127092-020d-467c-a0c1-d1b4bf2393f9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 20 Oct 2026 21:45:04 +0000
Certificate not after: Mon 22 Jan 2029 22:45:04 +0000
Subordinate resources: AS: 32454
IP: 204.115.62.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:91:a7:75:6f:6c:20:9c:96:c6:8a:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 20 21:45:04 2026 GMT
Not After : Jan 22 22:45:04 2029 GMT
Subject: CN=8b127092-020d-467c-a0c1-d1b4bf2393f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:1e:fa:53:97:43:1c:39:1d:16:e6:d5:59:
c7:b3:41:14:de:25:bd:db:c6:a5:f9:c1:45:8b:d5:
99:c6:c2:f1:e6:8c:9b:b6:09:58:6d:42:3d:da:20:
13:7a:f8:12:2d:e7:d7:9d:d9:c5:1f:59:bf:32:ed:
12:52:af:89:6d:fe:29:02:87:2f:e2:49:bf:73:ac:
d8:d7:25:ed:2a:bb:1b:d2:66:0c:9e:ae:53:58:dc:
f5:49:1d:a6:f8:db:01:bf:b4:a7:4d:c2:84:f8:fb:
45:62:c0:f8:4f:a9:f9:7c:71:d6:e7:81:b7:65:c9:
6c:32:a0:de:e4:18:a1:0a:db:be:d9:35:8f:e9:15:
bb:c3:e5:f7:ee:f1:43:99:bd:e3:60:28:95:f3:db:
27:34:33:35:40:10:b4:11:0e:a1:c7:03:14:17:fa:
7d:4b:33:1e:51:20:93:55:24:62:cf:41:2a:e0:6a:
2c:d3:e4:04:6b:16:52:3c:e5:35:da:81:ae:93:0d:
59:ed:15:58:92:dc:11:84:ea:f4:91:46:1d:bc:35:
16:02:13:43:d6:32:e5:74:4d:54:8d:81:e8:e1:39:
72:e5:31:29:47:01:85:ba:ee:bd:2d:33:8b:aa:10:
cb:23:3e:7c:19:5f:14:c0:40:f8:38:bb:0a:59:9c:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:3F:B7:5B:CD:8B:2E:9B:BE:5A:99:7B:22:F1:9F:9A:58:F7:FA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b127092-020d-467c-a0c1-d1b4bf2393f9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8b127092-020d-467c-a0c1-d1b4bf2393f9/8b127092-020d-467c-a0c1-d1b4bf2393f9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
204.115.62.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32454
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:c9:85:4d:a4:c9:5f:47:e3:f6:fd:09:76:32:16:1b:8e:74:
48:3f:42:c5:50:50:77:ca:5f:fd:c9:e1:cd:fc:49:29:e3:62:
8d:ba:03:4f:60:7a:31:6b:58:11:3c:a5:89:4c:e1:c9:21:63:
81:03:db:d2:c2:29:51:f0:fd:e5:5f:d9:57:95:2b:f4:2e:6b:
83:f0:4e:fa:35:be:0e:ef:1a:6f:9b:3a:e2:b6:45:6d:c2:2e:
33:7f:e0:ff:28:e0:52:5a:aa:4d:44:94:30:5b:29:69:cd:d8:
f3:6b:d3:e7:69:57:b3:c9:04:2b:3d:cb:08:ce:b7:3d:c3:56:
f7:59:aa:8e:40:a0:3e:12:6e:ae:05:2a:7d:4e:08:5f:c0:33:
c6:7b:00:01:2c:b9:e9:4d:b0:57:71:43:de:a5:2d:2a:39:86:
76:21:08:38:71:07:20:95:0e:f2:5a:92:20:6e:b7:05:a1:8c:
e7:e2:d2:f2:ca:e4:f8:73:b3:3e:cd:6c:fa:ab:be:b6:76:37:
3e:de:34:ca:89:40:52:45:47:87:b3:e8:61:5f:95:9d:07:82:
4d:0b:a5:ca:d8:f7:4c:39:d9:d9:5a:1a:29:aa:ee:2c:a7:e1:
cc:72:51:a7:09:6e:45:30:a2:7e:f4:ce:b6:44:34:fa:c3:fa:
7f:97:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:10:15 2026 by rpki-client