
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
File: 7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer (raw, json)
Hash identifier: mJUkOOVCtimEcucw3GgAgbvoC8WPGEU8LYRnjYZDL2U=
Subject key identifier: DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D8EEDB156FA79FB15F9A6CE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 19 Apr 2026 12:45:17 +0000
Certificate not after: Sat 22 Jul 2028 12:45:17 +0000
Subordinate resources: IP: 50.112.0.0/16
IP: 2620:108:7000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:ed:b1:56:fa:79:fb:15:f9:a6:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Apr 19 12:45:17 2026 GMT
Not After : Jul 22 12:45:17 2028 GMT
Subject: CN=7188ac24-09cc-4f20-9dbd-cd9005d2797e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:e6:6f:47:7a:7f:fb:ef:f4:d9:98:38:5e:
92:a9:ae:80:c1:54:74:74:23:c8:f2:ee:11:0f:ed:
a5:eb:d2:d7:a9:10:89:31:e3:fb:d8:6c:4c:3a:55:
70:78:c0:59:ac:75:02:a5:fc:74:e2:99:3c:fd:7a:
91:33:61:d8:fd:8f:e8:4a:f6:91:80:ed:4a:29:02:
81:38:34:da:4b:e2:38:30:e9:8c:6d:8e:ed:06:63:
22:81:f1:af:fa:c6:4c:d5:0e:e9:b6:23:1b:ae:35:
c4:91:18:ba:b1:37:08:95:6e:26:1f:58:62:af:f1:
8c:7b:86:86:90:77:92:a0:24:a3:2d:80:e6:00:18:
3d:06:12:0c:9e:18:d7:de:65:82:09:58:85:f0:b8:
cd:56:ac:4c:53:81:e5:a5:5b:6b:cb:6a:8c:71:6a:
07:9c:94:c6:40:b4:1f:0b:7e:6d:98:3d:a0:6c:0b:
1a:2a:96:16:d0:12:21:4f:bf:12:f2:0f:69:fa:b2:
5d:1f:9b:20:a9:bf:18:d4:95:1f:d4:ae:09:b0:f3:
6b:73:ee:24:8f:1f:4b:cf:4c:b6:45:96:96:89:59:
fb:67:f0:d9:0a:b1:3a:1d:68:db:97:00:2e:58:27:
47:3f:f2:41:ba:0b:ec:42:2b:a8:32:6f:c6:2b:72:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
50.112.0.0/16
IPv6:
2620:108:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:1d:87:c5:0f:94:a0:78:fa:d6:94:95:c8:60:93:65:5a:e0:
bd:58:08:c5:6a:dc:7d:48:1f:ed:ff:3b:4e:c2:26:f1:0f:92:
d5:4a:e0:cf:b7:49:b2:a8:ab:76:f7:53:e2:ed:15:f0:b8:86:
03:b8:1f:d8:7f:22:5e:6f:bd:0f:66:8b:bd:36:77:7c:6e:ab:
f9:7b:c0:b3:57:6c:9b:6d:bd:fd:ac:5d:9c:38:2e:88:bc:f7:
da:f7:91:3e:12:a8:25:23:83:c1:90:9b:da:00:db:59:a4:4d:
55:fc:b4:bf:4b:36:35:c2:b6:c2:b8:cd:3c:89:ce:6d:ff:c3:
78:52:0f:4b:b1:eb:cc:2f:24:5f:f1:9b:ac:4d:bb:44:bd:73:
9a:8b:1f:3c:23:27:83:c6:1c:5d:9b:f4:f2:37:b2:cd:6b:33:
56:55:9a:64:00:80:95:c6:04:c6:68:9c:19:56:48:49:2a:b1:
ac:5e:20:2e:8e:60:91:d3:91:e8:1b:35:c1:f0:b9:d1:c7:fb:
33:9b:6f:04:83:91:1e:c8:8f:72:9b:98:88:03:e2:8b:90:0e:
7f:76:9f:2b:ea:6c:3a:ac:89:ad:b5:3d:cf:98:e6:03:6e:7c:
77:b0:ae:02:59:bc:b2:00:32:94:dd:2c:5c:57:f8:9a:a6:67:
55:24:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 15:45:26 2026 by rpki-client