
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
File: 2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer (raw, json)
Hash identifier: ssShov9QnRqrSMsk2RABlSrmq6k76/q39tRLIyOeRJE=
Subject key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority key identifier: 86:C7:48:79:64:34:CB:D4:CF:6E:DD:EC:05:EA:20:1E:A9:D2:6D:0F
Certificate issuer: /CN=48f6121a-943c-4c0d-8b87-3fecbe71067d
Certificate serial: 010D0C9F4328584E4453142B0DF0030F3435EDC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
Manifest: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
caRepository: rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Tue 23 Jun 2026 12:10:52 +0000
Certificate not after: Mon 25 Sep 2028 12:10:52 +0000
Subordinate resources: AS: 395841
IP: 64.4.168.0/22
IP: 208.91.188.0/22
IP: 2604:7c0::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:44:53:14:2b:0d:f0:03:0f:34:35:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f6121a-943c-4c0d-8b87-3fecbe71067d
Validity
Not Before: Jun 23 12:10:52 2026 GMT
Not After : Sep 25 12:10:52 2028 GMT
Subject: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:f6:ab:f3:e0:d3:3a:07:c2:9a:49:79:a1:
16:26:76:3f:17:01:07:c4:27:56:28:09:04:0b:b0:
73:3e:92:03:e0:f1:7e:d1:95:ab:04:a5:63:2a:33:
5a:fd:e7:2a:50:f5:70:ed:d3:38:fe:bb:0c:cb:46:
ba:92:9b:f7:de:ae:67:d9:39:f9:67:bf:69:18:78:
61:37:da:ec:04:24:da:3e:5e:65:45:10:d5:01:8c:
78:a1:9b:3e:0d:db:bd:98:9e:eb:2a:17:5f:b3:fa:
f4:3b:f4:e8:f9:a8:3a:c1:7d:c6:34:c1:29:af:98:
e3:e4:b9:51:80:ea:70:c8:08:ef:28:a4:11:fd:28:
fa:09:69:fc:fa:7c:c6:8f:2b:4d:7f:45:3f:aa:08:
f5:44:2c:8d:cd:6c:30:a2:c3:fe:ce:10:1d:97:98:
74:c7:d1:ca:59:cb:36:20:1d:e0:fc:73:6e:32:4b:
65:3d:9f:a9:7d:50:67:d2:c3:40:e7:a5:8d:eb:5e:
6a:9c:4f:d6:33:61:5c:6f:4e:f3:36:ab:72:b4:d8:
91:46:ca:ca:96:c8:9c:4d:8a:8d:03:d2:57:5c:9f:
a3:ac:20:c5:16:1e:a9:d2:0c:32:66:26:cf:7b:56:
75:ef:71:3f:53:6b:bb:8b:0f:bf:b0:58:ed:b9:61:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
X509v3 Authority Key Identifier:
keyid:86:C7:48:79:64:34:CB:D4:CF:6E:DD:EC:05:EA:20:1E:A9:D2:6D:0F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.168.0/22
208.91.188.0/22
IPv6:
2604:7c0::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395841
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:cb:b7:bc:6a:32:9b:6e:b3:23:ae:61:98:38:6f:f2:cf:ce:
68:af:8b:cf:c8:f4:9f:aa:90:99:b4:34:43:e1:5f:ba:32:e3:
98:c0:a2:a3:13:e4:f9:41:e6:34:ec:8c:35:b2:db:e5:4d:47:
30:68:0c:c3:cd:10:f2:3a:48:83:25:ec:f6:9b:4d:ce:3f:25:
7d:42:46:41:3a:9a:5b:17:8b:1d:5d:ac:15:56:97:44:d0:51:
db:3a:06:08:5e:5a:e5:cf:cb:00:92:20:76:20:ec:f2:55:84:
99:1e:1d:ef:36:ea:40:7e:d1:07:c2:d8:e4:42:88:de:50:42:
d7:b9:05:fb:5a:b3:be:58:1c:49:49:1b:f6:92:6d:ae:43:b8:
1c:3c:7b:d3:58:15:ad:8b:93:bf:c4:2d:83:61:f7:0d:9d:a8:
2b:49:77:15:90:a6:56:7a:5e:fa:4d:ed:91:c3:06:76:d1:9c:
99:52:b4:3e:0d:02:c1:58:81:b4:4c:68:69:b1:fb:56:e7:d4:
ea:be:96:67:e3:84:34:16:d1:d1:97:e7:b6:d5:1f:de:a1:07:
c0:08:88:82:c5:b2:ab:e4:e9:51:05:63:2c:8f:24:72:42:b7:
20:01:57:11:36:7c:14:d0:5d:38:af:42:a0:78:84:78:69:0c:
9b:47:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:44 2026 by rpki-client