
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer
File: facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer (raw, json)
Hash identifier: 7yHsODyl//RHwAAI6hhId8tXNQIoFgcJh942Ex1A4c8=
Subject key identifier: D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F8F2491FDC7B1C7DE886D6480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 20 Oct 2026 00:09:44 +0000
Certificate not after: Mon 22 Jan 2029 01:09:44 +0000
Subordinate resources: AS: 403078
IP: 198.140.140.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:24:91:fd:c7:b1:c7:de:88:6d:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 20 00:09:44 2026 GMT
Not After : Jan 22 01:09:44 2029 GMT
Subject: CN=facf4a7c-d3a7-47c4-9334-2ccfeb660384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:c6:6e:20:7f:e0:d1:75:a6:a6:6f:f6:d8:
46:43:bb:ff:bd:69:1e:56:b8:da:49:b3:08:38:7b:
92:3a:2a:c1:c2:92:a9:8c:13:37:65:12:2f:1b:91:
8d:2c:5e:37:2e:5b:a7:ad:05:6a:bf:a7:f2:52:b9:
9e:59:29:f5:b4:7c:29:4e:d6:4b:64:d2:2a:2a:4b:
57:df:67:a3:80:03:b3:42:59:5b:4b:b5:47:41:55:
fc:30:5d:0e:de:f9:86:2b:49:8f:d2:ee:90:05:17:
e6:59:e2:d1:07:2c:d7:c1:0e:0d:e0:20:a0:d1:36:
ce:99:f0:47:87:0f:6a:bf:a8:29:41:ae:d5:4a:31:
7b:ba:95:06:59:8f:e0:b6:8a:fd:91:fa:43:26:dd:
f5:5e:f7:2c:a3:d4:67:4b:ff:ad:6f:78:5a:c0:db:
13:41:f2:fc:56:a4:d8:c4:dd:12:31:7c:67:c0:89:
fa:f2:3f:a6:62:30:99:d0:25:6f:7e:a9:37:df:a1:
0a:30:e7:ee:d7:54:d8:26:98:13:ce:0e:0b:05:f8:
73:57:8c:6c:ea:76:3f:8b:90:b5:dd:de:23:e9:4b:
61:6b:28:9b:0a:e1:4b:ff:67:84:1e:aa:b8:de:d1:
d7:fd:af:70:9b:44:3a:79:49:fe:9d:8f:4f:2f:3f:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
198.140.140.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
403078
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:a6:12:24:ee:ab:24:2f:75:97:f6:21:65:d7:23:5a:16:d8:
7e:00:e8:ad:3d:35:5c:31:8c:75:89:45:99:36:bc:7e:13:97:
21:00:89:c6:ac:db:2f:97:bb:ae:86:26:f4:b8:c6:09:36:e5:
ed:57:c1:0f:1e:c6:40:c6:e5:86:d2:42:8e:0c:38:e2:8c:4e:
d3:04:43:40:1c:33:48:f1:79:83:b4:f6:cd:f5:a5:58:1e:6e:
0b:85:7d:16:e1:8e:28:39:6b:7c:2c:99:10:32:4f:ae:83:a2:
bf:d6:f4:4c:c1:f5:e8:41:49:fe:5f:71:ff:8d:c6:4e:05:90:
0b:a8:6b:b0:54:28:10:44:2b:c1:00:47:81:73:7c:da:bd:91:
42:73:bc:03:e7:d2:07:64:51:19:45:4a:a3:71:e1:52:35:b5:
ae:8f:f6:23:b5:4f:75:5a:45:f3:e9:a2:25:49:47:ad:bb:b4:
71:9b:20:58:28:6b:25:d9:b2:4b:e1:86:bb:5a:b7:36:e1:2d:
c0:45:8a:64:50:0c:03:af:df:ab:be:06:fe:c4:a7:24:cb:92:
f7:8a:b9:cb:b9:4c:1f:15:0a:2d:00:8e:1c:11:25:9d:71:9f:
bb:2f:b7:b1:3c:1b:33:1f:fe:fc:7a:09:90:1c:ce:b7:82:3a:
2c:e1:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:33:48 2026 by rpki-client