
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
File: ecb94057-71c7-417c-9140-1014219048c5.cer (raw, json)
Hash identifier: 0MztvkIWYkSapIUPJkes6bBnSNmuZ1zRYjVAXBLrEjw=
Subject key identifier: 59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584D91EC01D08CF17352279D4A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 20 Apr 2026 14:29:19 +0000
Certificate not after: Sun 23 Jul 2028 14:29:19 +0000
Subordinate resources: AS: 402386
IP: 23.156.212.0/24
IP: 2602:f3ee::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:ec:01:d0:8c:f1:73:52:27:9d:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Apr 20 14:29:19 2026 GMT
Not After : Jul 23 14:29:19 2028 GMT
Subject: CN=ecb94057-71c7-417c-9140-1014219048c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:cf:4f:7f:33:cd:e1:b4:e0:88:8e:12:db:
47:07:db:c5:2d:71:a5:25:db:0b:d8:59:72:81:8b:
08:4e:fb:af:f4:fd:58:7c:3f:86:11:56:65:a0:ed:
be:ce:a5:61:24:20:5b:5d:84:48:68:40:1e:9e:e8:
4e:f0:88:c3:2e:ca:df:42:07:28:b5:d6:c3:22:26:
ae:54:d2:a5:f8:fc:b4:11:78:34:85:57:17:c8:cf:
ee:ad:22:5f:97:07:af:a0:d6:ba:11:d9:e2:73:0d:
ad:3d:fa:79:c4:e1:cf:69:52:d7:b3:7a:4c:f3:d8:
51:e5:c1:1d:4c:15:85:55:01:2a:0e:8e:0a:75:c3:
50:8c:48:51:25:2f:7c:bb:70:3b:cd:a2:b0:d1:c4:
ee:51:81:cb:24:05:4c:df:eb:ec:2e:4c:17:01:19:
ac:d4:0f:04:a7:44:46:cb:1e:de:e2:0f:33:4b:a9:
f1:58:59:60:de:17:24:33:62:71:06:ec:a9:49:13:
1a:f5:2a:04:46:57:1b:b0:ed:cd:3a:3c:5a:8a:aa:
15:8e:a0:50:9c:76:c5:09:49:74:2e:49:ef:6b:18:
3e:80:5b:b6:ca:05:d9:15:6d:d8:d5:4c:a3:b7:5c:
06:21:03:fc:18:34:d5:9b:a4:6b:b8:29:3b:3a:f1:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.212.0/24
IPv6:
2602:f3ee::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402386
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:6a:1b:0f:01:22:97:bb:08:ee:d9:25:1f:0f:14:ec:8c:fa:
04:cd:d7:2b:45:ca:27:b1:50:14:ab:4e:bf:b9:f4:fd:b9:c2:
6c:08:0d:64:7d:a7:0a:a3:df:28:1f:18:21:31:9d:8f:9f:1d:
52:2b:bd:8c:87:0a:15:a6:c9:dc:ed:91:fb:16:34:7d:5c:8c:
3f:b6:73:e1:d8:64:73:52:64:44:6b:5a:14:93:2f:14:c3:e2:
38:2f:53:00:28:35:5f:d0:84:f1:f9:52:33:68:43:ce:ed:84:
c2:b8:c3:e9:68:35:49:0e:74:55:ff:5f:10:8f:5b:64:04:50:
4c:3d:10:80:18:9a:58:c1:2c:ab:e9:bf:3b:53:06:ad:cf:e8:
2e:32:ad:b2:57:61:50:e8:9a:7c:9b:12:9b:6c:97:72:31:ff:
ba:58:4e:2f:17:e7:98:e0:11:14:cb:eb:79:05:4d:39:72:9f:
ea:63:6f:46:23:7a:74:48:eb:80:80:17:9e:bb:4e:88:98:5c:
56:a3:3d:2c:91:f8:b2:eb:d9:d6:70:ec:80:b1:09:f5:3d:61:
57:1b:45:bc:d1:8f:0f:b5:a6:77:a1:47:57:84:14:87:6f:57:
58:49:92:df:2c:ad:44:94:5d:2f:b6:93:e0:e5:85:85:50:1f:
87:21:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:03:53 2026 by rpki-client