
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer
File: dfc88768-1b58-474d-a340-376827992098.cer (raw, json)
Hash identifier: eZHmmZG72z8reb48Vnjkjx6r5vI3tXNrJ4+xzcLC/v4=
Subject key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CACEA1AE0E2412D463ED24800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 28 Jan 2026 13:45:22 +0000
Certificate not after: Tue 02 May 2028 12:45:22 +0000
Subordinate resources: AS: 21629
AS: 401387
IP: 23.134.140.0/24
IP: 192.149.83.0/24
IP: 2602:f773::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ac:ea:1a:e0:e2:41:2d:46:3e:d2:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Jan 28 13:45:22 2026 GMT
Not After : May 2 12:45:22 2028 GMT
Subject: CN=dfc88768-1b58-474d-a340-376827992098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:eb:c7:4a:09:5c:07:7f:ef:28:5c:14:6b:
ca:38:3a:0b:80:01:12:37:44:a7:6e:97:08:4e:79:
7f:78:ab:9a:9b:5a:dc:e4:2d:28:37:2a:03:19:ae:
ed:9b:89:9b:c1:a5:20:7c:87:42:e3:a5:a2:c0:cc:
3d:d4:fb:bf:6b:cd:68:2b:00:e9:3c:ec:3c:66:a8:
3a:c0:29:84:6b:f8:1a:e7:d4:79:6c:2d:e9:79:96:
b6:32:72:41:56:a1:7c:27:44:f5:01:0b:53:db:f0:
84:9a:bf:60:05:c1:b8:c5:dd:60:7b:d1:73:80:4e:
21:60:b5:9e:d8:7b:b8:51:1b:d4:42:d9:01:73:79:
61:21:02:b2:16:6a:07:01:04:43:a9:c5:8d:08:50:
0f:5b:a4:88:eb:65:53:89:dd:cc:8a:1b:5a:54:c7:
e4:2d:e3:8d:32:7e:a0:ac:7f:17:12:bb:7f:23:1b:
17:a2:4a:be:39:29:ae:77:5c:20:6a:9b:4a:6b:ce:
2a:9e:a0:05:49:fd:0b:45:26:00:2d:14:ff:30:33:
f1:05:ae:8f:97:26:d6:22:55:1b:92:4b:b3:f6:7f:
a0:e7:a4:99:80:cf:ce:c7:3f:65:a0:3c:3b:9a:79:
c4:cf:21:e0:ee:40:4a:4c:37:d8:e8:04:14:8a:34:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.140.0/24
192.149.83.0/24
IPv6:
2602:f773::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21629
401387
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:28:09:7d:24:2a:95:16:e6:29:61:4a:c9:f2:da:de:c9:87:
35:a2:44:13:50:76:6b:5a:2c:54:1d:21:38:09:3e:6e:09:1e:
fa:b7:e0:28:74:a9:03:55:0c:70:e8:0d:2d:eb:ae:1c:78:ad:
41:0f:20:00:22:a2:f4:b5:bf:3a:89:33:7e:ad:83:a2:67:8b:
1c:f0:b8:63:e9:2d:fb:1b:89:31:2e:3b:d5:5e:c3:28:72:d1:
a9:13:67:6a:7e:ec:16:40:22:88:27:2d:0e:87:ef:9d:69:c5:
34:db:88:dc:7b:73:b6:b8:e7:80:e8:9a:c0:fd:9b:35:3d:5f:
89:f6:00:5c:b8:b5:78:46:77:0e:51:62:b5:30:e0:c8:4c:06:
fb:ac:f8:17:66:8e:13:ab:ba:ac:30:8e:52:20:a8:82:c4:06:
ca:ff:89:a3:0d:b7:f4:14:53:3f:c5:d6:a9:f3:70:86:97:d8:
59:51:2c:8b:a5:62:b2:ad:31:f1:74:9f:cd:64:d6:e1:ba:07:
68:41:52:2f:0c:77:87:8e:a6:e1:50:9f:3b:4b:f6:6a:f6:49:
38:79:6d:95:74:f6:fe:86:39:d5:f9:df:51:1c:83:6b:3c:2f:
c7:4a:80:c8:8f:1f:da:4a:5e:59:50:02:cc:e4:44:38:d2:ed:
dc:24:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 16:42:19 2026 by rpki-client