
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f115e0f-117e-4a8a-991c-93e62a7b55e4.cer
File: 9f115e0f-117e-4a8a-991c-93e62a7b55e4.cer (raw, json)
Hash identifier: GmBeKIQfGPnsUp0EJliW2/oDTskHAREwOsblMfBq9y8=
Subject key identifier: 78:B0:40:E3:1F:12:B3:38:D9:9A:64:0E:6E:73:E2:DA:55:46:99:C0
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584FA39DB8ECD41E2854F959FE00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f115e0f-117e-4a8a-991c-93e62a7b55e4/9f115e0f-117e-4a8a-991c-93e62a7b55e4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f115e0f-117e-4a8a-991c-93e62a7b55e4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 27 Oct 2026 08:10:00 +0000
Certificate not after: Mon 29 Jan 2029 09:10:00 +0000
Subordinate resources: IP: 23.166.100.0/24
IP: 2602:f2b3::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a3:9d:b8:ec:d4:1e:28:54:f9:59:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 27 08:10:00 2026 GMT
Not After : Jan 29 09:10:00 2029 GMT
Subject: CN=9f115e0f-117e-4a8a-991c-93e62a7b55e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:dd:4b:de:9a:5a:ac:0b:ed:93:49:13:48:
e9:8a:e4:5c:3f:5c:5e:f6:5d:76:1b:3f:02:c1:b9:
2b:8a:85:f5:22:a7:db:de:16:72:c1:81:c4:05:80:
b5:f7:65:42:34:61:60:f4:26:10:5a:1e:bd:39:36:
67:a4:c1:84:cf:9a:4f:d3:a3:d2:de:f5:fb:bc:00:
0a:a8:c4:2b:c6:d2:31:cd:82:b5:75:27:4d:a7:5e:
42:47:3b:db:24:8c:09:89:a5:6a:4e:c7:47:dd:5c:
91:d5:9f:00:29:81:82:58:5e:83:7a:ac:aa:d7:37:
83:1a:a5:99:52:30:58:a3:60:74:ed:a3:05:ab:56:
00:34:89:64:5f:67:8f:9e:5c:9a:e8:b8:28:56:6f:
e5:02:18:17:4d:29:a9:4a:39:56:a1:ac:a8:fe:b9:
c1:8f:37:99:ad:39:46:78:1d:b3:9c:67:26:99:88:
3a:ef:0e:47:71:46:44:91:77:1b:31:58:68:ad:20:
0a:8d:40:9e:1a:f7:fe:7b:02:2b:36:20:34:d6:a4:
ee:4b:9e:77:7f:41:e0:49:2a:8b:ce:d4:b8:07:04:
ec:67:c1:cb:4d:ce:87:58:5e:cf:1f:11:e5:61:2c:
ce:12:71:96:21:ec:d2:01:6e:79:75:83:cd:e0:7c:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B0:40:E3:1F:12:B3:38:D9:9A:64:0E:6E:73:E2:DA:55:46:99:C0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f115e0f-117e-4a8a-991c-93e62a7b55e4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f115e0f-117e-4a8a-991c-93e62a7b55e4/9f115e0f-117e-4a8a-991c-93e62a7b55e4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.100.0/24
IPv6:
2602:f2b3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:40:6a:e6:ec:b7:ee:a6:9f:fd:50:bd:63:a7:1a:53:52:5c:
35:3e:32:f6:d6:68:c3:19:4b:a3:a7:8b:8b:d1:80:d1:35:43:
4c:bf:2e:8e:2e:b6:18:24:92:58:7f:b6:f2:6d:1e:71:eb:2a:
7c:c6:22:04:19:9a:48:96:e1:56:71:b2:cd:40:05:c8:bb:23:
a3:ae:44:b6:3d:14:18:70:85:a2:53:20:5c:85:34:6a:c0:2e:
99:39:54:b7:46:f3:2c:de:05:19:20:44:fa:25:5c:09:a4:eb:
9f:27:24:e3:64:5e:c4:ed:14:b6:70:6d:a1:2e:37:fb:40:f7:
fc:59:35:b0:be:76:3b:a8:cd:fe:24:f0:13:35:47:3e:73:3c:
e9:a5:80:36:a6:1e:25:2d:b1:c2:f6:b4:5f:14:49:14:e3:6b:
ee:db:d3:b6:f8:58:d6:3c:fb:8b:bd:3c:d5:1b:ed:fd:34:6a:
47:a0:8b:c2:3b:7a:96:37:47:00:d7:8b:2e:4f:5e:f8:1e:8f:
07:b6:d7:3c:8c:f6:6f:ea:4a:44:41:4f:1e:cf:09:2e:d8:de:
ee:75:e7:b9:e2:0a:df:72:00:16:79:ac:0a:c4:19:8e:23:18:
b8:68:f2:ba:b2:33:57:79:04:6a:35:fa:be:c6:04:7b:37:ac:
0d:d7:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:44:55 2026 by rpki-client