
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
File: d7a960e2-9fa8-4b77-8609-5ee424f44087.cer (raw, json)
Hash identifier: hW5uDZ7DZ7UyN9on6ZKuavoiw/4cEP7amgOk2IMSMVU=
Subject key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D1005659DCFAFAA5803BACE50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 05 Mar 2026 01:45:23 +0000
Certificate not after: Wed 07 Jun 2028 00:45:23 +0000
Subordinate resources: IP: 67.217.48.0/20
IP: 69.164.240.0/20
IP: 74.50.64.0/19
IP: 205.209.96.0/19
IP: 216.219.80.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:10:05:65:9d:cf:af:aa:58:03:ba:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 5 01:45:23 2026 GMT
Not After : Jun 7 00:45:23 2028 GMT
Subject: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:be:84:23:86:24:95:82:93:ef:22:2c:7e:
ce:7f:81:b7:03:0c:e9:56:e8:ae:18:19:c2:1e:77:
e6:62:9e:bd:6c:e3:70:3f:14:62:b2:12:de:d7:a7:
c7:7a:27:ad:6b:e8:f7:71:33:af:12:08:91:8e:5a:
ba:64:5f:4f:d3:84:9d:63:ea:20:61:81:5a:8d:d5:
38:83:da:82:45:90:c0:d6:6e:2e:88:43:b8:e6:1c:
72:7b:f4:31:ae:b2:ce:5b:c0:97:3a:19:93:8c:bd:
c4:30:6d:47:6e:2d:84:f7:c6:f4:03:38:94:45:46:
81:9f:c0:52:4b:e6:f8:da:1c:33:88:ae:52:c2:20:
aa:e3:89:06:f9:77:b6:89:1a:df:58:27:14:e9:85:
22:ce:cb:13:5e:48:a1:ff:69:aa:c0:91:1a:fa:ae:
53:1c:bf:46:af:98:00:7a:20:b9:ba:2c:dc:9a:ef:
c2:c2:e5:d9:c0:fc:91:64:06:35:32:84:ed:d0:4b:
14:42:bb:69:f2:1d:c8:51:3b:80:6e:a9:e1:2f:4f:
ab:9a:e3:3c:d4:58:5c:bb:7c:d1:b3:cd:80:61:1d:
dc:a8:f9:e6:47:7c:e4:39:c6:a6:e6:dd:04:2b:e2:
1e:82:7b:a3:bf:de:ca:bf:30:01:fe:52:81:26:64:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.48.0/20
69.164.240.0/20
74.50.64.0/19
205.209.96.0/19
216.219.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:dd:20:db:98:c4:66:0b:d3:bf:ae:01:f1:81:d1:55:d0:24:
31:2c:16:74:97:cd:84:10:5c:5d:86:ee:4e:ca:1a:f1:02:9e:
44:15:a5:9a:71:da:48:92:b9:43:7d:e2:88:dc:08:db:47:44:
12:0e:0e:88:c1:a4:74:3f:1d:a5:19:44:c4:7f:f5:da:dd:4b:
57:9a:45:15:1a:fa:ac:62:75:e0:f8:54:ef:93:67:e9:97:1e:
64:78:ba:a1:01:e4:8a:1a:82:2c:e3:d3:13:2e:c9:cc:08:3f:
e9:df:6b:ba:5d:50:f4:c7:40:c7:4f:97:5f:19:cd:03:82:e4:
f9:2b:b9:37:05:28:97:cf:89:0d:29:b8:9d:04:3d:42:3c:31:
72:99:a9:f6:6e:b4:de:98:65:3e:c8:02:28:65:8b:18:42:c7:
bd:a4:59:93:7b:96:a3:2a:67:4d:18:19:a8:22:64:d7:1a:d1:
a5:16:ed:d4:c7:53:69:52:d1:9e:9b:c3:a4:9d:f5:aa:3c:ae:
81:e9:cc:ab:b6:df:69:80:fc:37:02:1a:3d:2d:ff:ba:24:f5:
82:07:f2:04:e5:52:a1:c6:09:76:44:c8:51:9c:3b:12:68:f8:
93:47:e5:94:e6:95:90:bb:70:5f:ca:33:7b:07:13:37:cf:3d:
a4:75:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:37 2026 by rpki-client