
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer
File: 5144f613-8a75-4802-bb71-45eaf8220874.cer (raw, json)
Hash identifier: ruN96dee40N6Xh2cFy1iVO2RNX8qjycYqYIHVZncMnY=
Subject key identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584EAD14C39707737FDB19E11C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 31 Jul 2026 00:45:12 +0000
Certificate not after: Thu 02 Nov 2028 00:45:12 +0000
Subordinate resources: IP: 23.169.184.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:14:c3:97:07:73:7f:db:19:e1:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Jul 31 00:45:12 2026 GMT
Not After : Nov 2 00:45:12 2028 GMT
Subject: CN=5144f613-8a75-4802-bb71-45eaf8220874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:62:19:90:cc:74:ec:b5:8f:2a:91:e6:9d:
73:0e:2f:f9:f1:e2:e3:3c:44:8a:98:af:4d:5d:75:
cc:94:24:83:28:b5:fb:f4:2c:aa:83:49:80:b9:2c:
51:5e:fc:2d:36:29:74:d2:9e:8c:d9:15:23:62:a4:
8c:b5:25:40:c6:b3:1e:e0:e4:24:ee:e6:12:c1:5b:
28:2d:3e:3c:f2:53:03:b3:d0:ec:e2:f2:68:17:50:
ba:98:df:c3:99:80:e5:08:9d:1f:72:04:1e:da:f2:
c4:9a:b0:f9:9d:5c:0b:2b:24:35:ef:53:69:85:c2:
87:1e:73:96:cb:6b:2e:5c:ff:1a:4c:34:ea:c6:e3:
9c:9c:14:de:07:d4:6b:c3:ab:de:57:fe:4e:8a:3d:
78:f4:90:23:eb:ed:bf:3b:0f:3c:c6:21:88:04:cf:
5e:a3:3a:61:db:f4:6b:fc:f3:a4:18:d2:40:04:15:
6f:22:6d:2f:af:02:50:b2:4c:53:e1:e7:07:a9:24:
3c:8a:de:79:8e:7f:13:d4:e7:29:e5:8d:20:87:b5:
ad:9c:80:89:51:29:1b:6c:e8:05:d7:c7:ac:0c:0c:
21:7e:ae:f2:35:34:e8:1d:0f:7c:66:45:04:94:6f:
fb:90:1f:ac:94:86:d5:0f:8e:48:57:c7:ee:c7:c1:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:47:54:ed:22:f7:c6:fc:0e:5c:d3:e7:f4:40:84:a8:43:3a:
15:d3:e6:dc:46:ca:08:4c:20:57:f2:5b:c2:86:48:55:0c:67:
1a:66:94:b5:19:f8:e9:65:4d:1d:3a:a3:11:59:e6:fb:c0:63:
38:8d:5b:b5:7a:48:96:09:f5:10:6d:86:28:3d:98:3b:0a:0c:
fd:b2:7e:2c:2f:ef:38:a0:d8:9c:42:21:ec:43:a0:7c:cc:99:
5a:17:99:a1:c8:93:9a:0b:bf:25:12:32:52:11:88:28:81:7d:
75:8e:f4:48:8a:52:02:69:b2:66:6b:5f:36:fb:7f:dc:8c:75:
9b:44:26:3d:b1:3f:41:3a:50:d1:bb:d7:92:00:70:ce:85:38:
cc:3e:08:52:ca:2c:11:0e:eb:75:b7:f7:14:a6:71:d5:aa:fd:
4a:a9:b7:4c:e5:15:57:a3:e4:f2:f0:d4:a7:0e:69:58:96:84:
0a:9c:dd:ac:7c:33:60:fa:5a:f3:7e:aa:48:92:31:30:74:49:
bb:3c:36:63:6b:d1:68:da:7d:f2:97:e6:53:25:1c:2f:07:62:
61:04:e8:b9:d6:ba:a2:d8:71:3d:d1:59:bb:22:8f:11:64:c7:
2c:5c:78:89:1f:ed:46:78:f5:cc:84:f7:4e:ba:4f:c3:bd:81:
2f:90:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:04 2026 by rpki-client