
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer
File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.cer (raw, json)
Hash identifier: ZQcreVN5ollTgE+p0IbKWNIfPq9V6+OaPEB13uF7Axw=
Subject key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584F71E5FF0DB359F323CD046D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 09 Oct 2026 12:45:12 +0000
Certificate not after: Thu 11 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 64272
IP: 23.134.64.0/24
IP: 2602:fecb::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:71:e5:ff:0d:b3:59:f3:23:cd:04:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Oct 9 12:45:12 2026 GMT
Not After : Jan 11 13:45:12 2029 GMT
Subject: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:f8:2d:2e:fb:63:3d:ed:73:41:46:7f:ef:
34:cc:64:26:da:67:4b:2e:52:33:a3:72:d0:08:65:
60:ea:0a:5d:f7:5b:da:6b:f3:76:3d:7e:21:6c:ec:
6a:26:b5:54:11:c2:33:2e:79:40:85:41:67:81:c2:
69:3c:d5:83:95:f6:bd:9a:b3:c2:c2:ae:40:43:f5:
47:5f:63:60:8d:f0:77:6e:83:32:93:cf:09:d6:bd:
0f:b2:91:ae:69:36:55:d0:78:9a:8f:c1:6c:2a:d5:
92:04:ee:b7:9f:5a:1d:7b:e2:de:5f:16:58:73:0b:
c3:8d:18:73:5b:5a:99:e5:78:d7:eb:98:2c:ac:74:
6f:1d:a7:39:66:d0:27:d4:3f:75:8c:84:91:d2:ec:
0c:78:ba:58:d5:7a:2e:6a:f7:d1:44:88:f4:c5:f4:
5d:5c:d1:21:bf:21:4c:a1:f9:97:53:70:de:e6:72:
87:b7:81:85:9a:aa:78:04:e4:46:ee:f5:3f:d1:9b:
3c:ab:f0:c0:1b:c4:b0:d4:9b:51:d5:32:61:25:e1:
c3:a6:19:82:12:56:fe:95:34:07:a1:52:e2:0d:b2:
4c:b8:2a:38:3f:0c:d1:45:72:84:60:6d:97:de:d9:
9a:ff:36:90:ad:ad:5d:f5:69:4b:f6:9c:0c:37:24:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.64.0/24
IPv6:
2602:fecb::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64272
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:59:a1:b6:24:f8:a3:8b:09:81:dc:3f:bf:c2:35:bd:d6:5a:
37:03:01:28:68:10:c0:08:59:bc:63:99:b0:b9:9b:62:3c:85:
86:0b:73:55:b7:77:44:ae:0b:7c:af:8d:52:4c:8f:37:53:1a:
26:d3:62:f6:1a:1d:4a:35:76:58:8a:f4:b1:50:6c:9b:a9:e7:
83:cc:5f:d1:c1:e0:41:dd:42:ad:47:66:bb:5a:2c:b8:d4:86:
f4:13:89:17:e4:12:86:6b:a3:62:3f:d9:ac:99:3a:66:fe:d4:
14:bd:34:db:01:dc:3e:47:c0:83:23:96:ed:9a:5a:cd:50:dc:
ef:de:92:a5:3c:ce:89:d0:6a:94:3c:cc:ab:d9:18:06:76:a0:
5a:db:53:5e:4e:ed:76:75:5e:64:65:1d:3c:7e:89:a3:49:fb:
21:b3:a5:67:2f:8b:ef:5a:18:db:dd:68:9a:2a:17:eb:a7:8f:
58:5a:60:75:42:2f:bc:f2:69:6f:fa:35:e0:c8:44:78:53:0a:
52:c0:ae:99:e1:68:cd:a6:62:de:91:fe:06:d1:16:1f:3f:c2:
20:ad:13:b2:87:2d:3f:f8:a1:81:d7:ab:2c:ed:d0:dc:06:be:
cc:d7:ec:c6:78:c9:bd:af:34:fe:21:fb:24:b7:b4:23:a1:61:
7e:0d:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:51 2026 by rpki-client