
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
File: 11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer (raw, json)
Hash identifier: lFEexn8J1XWQC+xvGZjnyREv+XoNzkBNtTK+YpNHWd0=
Subject key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584E3FBCF8B986767E9025CCFCB0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 21 Jun 2026 20:45:11 +0000
Certificate not after: Sat 23 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 401450
IP: 23.162.104.0/24
IP: 162.211.248.0/22
IP: 2602:fa1c::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3f:bc:f8:b9:86:76:7e:90:25:cc:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 21 20:45:11 2026 GMT
Not After : Sep 23 20:45:11 2028 GMT
Subject: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:82:ee:68:3c:30:d1:eb:3d:70:5c:7f:e3:
29:d1:da:56:24:20:49:86:eb:a9:22:ef:eb:52:09:
94:bf:63:df:cc:e1:ec:4e:a5:ca:ea:39:43:79:98:
3e:97:73:9f:fe:2f:57:c9:60:77:6c:a2:ce:a9:9e:
66:82:0c:a5:ef:b6:8c:39:c5:ab:cc:f6:dd:b0:ed:
71:2c:61:20:9f:4d:9c:2d:d2:2c:c2:cb:c6:7f:b7:
ac:93:fa:94:a2:59:11:c2:c5:84:47:bd:c0:1d:36:
e9:ff:5b:61:87:f4:79:b4:39:88:72:2a:4e:6b:01:
2c:80:52:2a:7a:04:46:a3:51:e8:02:a1:d3:1d:67:
ac:3f:9a:ac:3e:7b:b7:d5:3e:93:40:b2:27:43:33:
1e:e0:06:df:d3:ac:06:c5:c9:14:14:cd:3e:ea:4d:
20:e0:71:4d:34:6c:5d:3c:0c:97:7f:cd:f8:9b:de:
64:f6:18:23:ad:1e:08:49:38:b2:74:27:c9:3b:a7:
5b:62:2d:b4:3f:93:1e:db:4b:78:3f:c0:fe:5a:fb:
a6:d4:62:11:a0:dc:c9:d9:e5:52:15:f7:06:91:fb:
a3:bf:bc:b8:5a:1b:0a:88:b0:af:79:61:d8:ac:2d:
37:50:c6:d2:fc:78:f6:4b:f6:f7:19:a8:b1:4f:75:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.162.104.0/24
162.211.248.0/22
IPv6:
2602:fa1c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401450
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:a2:db:92:3b:4d:ab:27:c3:6e:5d:c2:98:65:8f:5f:14:7c:
89:4e:05:a5:4e:ae:95:0f:8c:6e:e8:25:1d:2d:1c:50:c1:29:
b9:80:1a:eb:9a:ad:fc:94:2f:48:aa:2d:6a:34:41:27:cf:48:
ca:13:ab:76:bc:b2:65:e2:a0:c2:cc:90:da:34:79:49:90:e0:
57:47:a8:ab:05:ca:f3:aa:3b:7e:65:12:10:7a:a7:75:40:4a:
28:45:8c:87:a5:ee:ce:87:29:1d:52:9c:29:3d:7f:f5:41:71:
f7:31:08:95:97:e8:23:57:93:cb:ca:6c:c1:ab:0a:3a:71:4e:
67:1a:d3:49:d1:b3:49:e1:43:ad:2c:4d:07:da:4c:ed:61:e2:
0e:26:cb:a5:04:e8:90:fa:fb:da:cd:fe:57:b6:69:87:3a:29:
c2:a4:f2:e7:a5:e1:5f:4b:59:ef:ef:90:0a:9e:37:b7:dc:64:
8e:0d:39:24:c8:99:64:58:77:43:7a:6e:0c:bd:6e:26:61:d2:
6b:f6:e6:e1:9a:6c:e6:75:ee:f4:5f:21:94:66:ad:24:8d:52:
85:53:69:30:8a:0f:35:27:d6:3c:69:f1:18:63:ab:85:3e:e3:
a3:eb:ff:78:fb:bf:d9:36:f5:58:8e:9a:5c:35:f3:69:36:9f:
df:f2:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 10:02:36 2026 by rpki-client