
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer
File: 957017f9-0b2d-451e-bee3-85f42c50dde4.cer (raw, json)
Hash identifier: KgfywRdwmnlkv9c7fNcqWZdzYa400BZ6YE5+JWFIqWQ=
Subject key identifier: 9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D5245CF6815A855A8A9F73F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 28 Mar 2026 19:18:31 +0000
Certificate not after: Fri 30 Jun 2028 19:18:31 +0000
Subordinate resources: AS: 26065
IP: 64.7.34.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:45:cf:68:15:a8:55:a8:a9:f7:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 28 19:18:31 2026 GMT
Not After : Jun 30 19:18:31 2028 GMT
Subject: CN=957017f9-0b2d-451e-bee3-85f42c50dde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:54:d2:e7:07:90:07:25:b1:61:09:a2:d2:
72:88:c4:de:fd:c0:d1:23:00:98:2e:4d:3f:61:84:
e5:ca:7a:6e:bb:9c:ad:47:e7:50:46:7a:e0:09:ce:
09:9a:d8:e2:06:2e:60:5b:e2:ba:97:4e:54:a5:5e:
fd:2d:1d:6a:15:f0:cc:bb:40:90:f9:ef:02:2a:c9:
da:6d:e3:75:e8:1d:c2:a6:09:98:65:c0:9e:b2:55:
1f:91:23:b1:e7:99:5a:03:c5:97:ae:35:14:a9:b1:
a4:44:12:c8:5a:6a:42:9b:41:65:29:1b:f2:6d:5c:
97:30:74:c0:82:c5:24:09:15:f6:8b:21:10:f3:86:
23:70:41:57:ee:68:73:af:0f:8f:f2:cf:e3:7d:17:
94:df:cb:d2:fd:c5:44:50:e0:63:04:f5:f4:b7:bb:
c6:7b:0f:c0:4a:f8:4c:93:75:51:15:64:17:17:60:
44:62:c7:03:13:e7:24:85:7e:ed:8e:a6:39:6d:d7:
27:1a:70:80:76:a6:7c:96:7a:35:11:e6:69:f5:03:
10:73:94:0e:27:f2:8d:36:9a:62:d5:40:48:d3:7c:
94:9a:df:6f:1c:e6:b5:fb:c5:21:04:da:42:a1:02:
da:9d:8e:1b:3a:6f:af:57:49:61:72:9d:8f:f5:37:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.7.34.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26065
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:23:01:74:be:33:4a:8d:f2:93:17:30:ac:19:e0:fc:a9:a1:
08:27:df:aa:73:8e:3e:bd:e4:54:1d:00:82:22:e1:0e:50:3c:
76:44:85:6b:af:f9:0c:5e:67:d7:39:a2:2d:82:73:b0:29:7f:
ab:e3:74:ca:33:0f:d1:a5:b4:1b:8e:27:a8:90:15:fa:cd:c2:
44:e6:9a:d8:11:da:22:f1:26:39:91:e4:07:f0:63:4a:3c:d7:
12:a8:14:32:73:05:78:eb:f3:70:5b:29:83:9c:85:e5:55:72:
e5:76:1c:ad:ad:44:ad:f7:cb:cd:12:84:56:ad:41:44:43:ee:
a1:62:d9:b5:08:5e:8c:a3:05:ee:b6:8c:7e:a5:88:73:ed:d8:
63:6a:ce:2d:8d:b6:b0:90:f0:98:e6:d4:25:7a:8f:f8:88:a1:
96:ac:0e:3c:1d:3f:25:de:4a:1d:fd:17:de:0e:c8:d4:25:e6:
56:98:79:0e:6a:2f:0b:11:8d:1a:7f:a6:01:ef:3b:7f:e7:75:
b2:c3:74:15:0b:d1:79:f9:3a:03:20:62:2b:1b:e9:4d:d8:b9:
ce:fa:2c:7e:60:3b:1a:63:d7:88:fc:2e:07:dc:4d:7e:ec:46:
4f:19:9f:e9:43:da:83:ab:22:03:49:ae:1b:05:29:18:b2:ea:
a6:15:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:34:18 2026 by rpki-client