
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer
File: 1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer (raw, json)
Hash identifier: rLskCUuPkU1exNz8i/k3WpHqv295lxYHe79pZa9uwnY=
Subject key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584E35F7939AD7B6592791108A60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 18 Jun 2026 08:45:11 +0000
Certificate not after: Wed 20 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 4460
IP: 192.231.207.0/24
IP: 207.200.160.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:f7:93:9a:d7:b6:59:27:91:10:8a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jun 18 08:45:11 2026 GMT
Not After : Sep 20 08:45:11 2028 GMT
Subject: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:b8:63:a4:40:9f:18:fa:86:40:1a:50:68:
b1:ef:67:b3:dd:bc:35:8c:7f:9e:f9:51:19:14:ca:
8d:94:9a:79:91:85:76:a3:2b:bf:5f:22:e2:5a:3f:
ee:a7:e3:ab:82:23:34:87:83:49:5f:ab:d1:05:38:
4d:11:eb:32:b8:e8:1d:b1:fe:83:33:ec:9b:1f:ae:
bd:d1:42:ce:80:39:c9:2b:73:c2:ed:ab:f2:f1:cc:
03:2f:b4:d8:12:cb:31:95:1a:2b:be:ec:ec:2b:78:
a5:08:13:31:b8:f6:56:59:ab:07:d8:6f:02:3a:43:
a8:96:2c:e7:31:2d:73:49:2b:42:cd:0c:8f:6a:39:
a7:37:a0:73:93:30:eb:7c:80:3a:9e:cf:3a:ee:18:
90:8b:9b:cf:8f:0e:c3:28:06:51:6d:82:51:99:6c:
60:77:67:87:7e:0a:47:44:c3:42:63:e5:b6:82:76:
a6:24:95:5e:ea:2e:b2:39:ec:89:0d:48:16:d0:60:
b5:59:b6:6e:cd:8c:e0:bd:94:54:05:cf:ef:7d:31:
a5:6d:e0:49:2c:dd:65:5c:b3:34:01:a7:93:13:7e:
94:6e:21:f0:1a:95:4c:16:56:31:81:8f:4b:e0:96:
bc:e5:8e:0e:8a:f0:d1:86:60:10:ca:3c:2d:d6:e3:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
192.231.207.0/24
207.200.160.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4460
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:83:07:4b:f5:0c:63:69:54:0b:bf:d5:0c:13:60:93:17:e1:
53:2a:ed:48:b7:e9:53:ba:a9:5c:b3:26:c1:3b:29:e7:01:c1:
5b:56:5e:2c:f9:a3:c4:2e:06:da:84:a1:c2:34:fe:ba:08:7f:
cc:6c:85:2b:8f:9f:df:b2:97:ad:50:7f:7f:58:61:32:97:c1:
f8:2b:10:b6:28:73:c6:5d:8a:9b:7b:09:ee:f4:e1:bc:fb:aa:
77:0f:4b:ec:29:f0:06:70:b8:96:fa:29:a9:8b:7f:dd:ba:95:
b3:30:20:8a:7e:1d:ac:8f:e7:8b:84:34:72:ee:b7:e4:ca:61:
f5:54:e3:fe:df:32:11:84:dd:a6:81:c0:1d:58:35:a7:67:6c:
b6:6e:7d:5e:1b:e1:a8:6f:34:f8:1e:3a:b3:55:f6:36:36:03:
ea:08:f3:e6:be:f7:ff:c0:b5:a7:3e:67:d8:c2:de:74:82:f5:
c9:e4:62:a9:ac:c8:99:f6:3f:34:50:b1:7b:de:fd:f1:44:b7:
34:2e:a9:be:14:a3:c6:64:73:48:96:29:45:b8:37:7c:a5:ed:
b0:fb:94:73:f2:6f:f2:aa:4c:05:72:6c:fa:61:50:99:e7:e0:
e6:d0:f7:2e:22:92:2e:85:c1:a8:82:d5:51:3b:4a:dc:10:90:
84:3a:b7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 19:05:40 2026 by rpki-client