
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
File: f95a39d1-400d-423a-89c4-37f7f1a145f2.cer (raw, json)
Hash identifier: piRKbd+uhInifHP+fNPAaWtoKjE2EG8ohMkmBm9s68g=
Subject key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CD29A56F7265EEC0D27122F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Feb 2026 01:45:22 +0000
Certificate not after: Tue 16 May 2028 00:45:22 +0000
Subordinate resources: AS: 397335
IP: 2620:68:2000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d2:9a:56:f7:26:5e:ec:0d:27:12:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 11 01:45:22 2026 GMT
Not After : May 16 00:45:22 2028 GMT
Subject: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:ee:df:63:c9:3b:ec:68:67:61:4d:d1:48:
11:61:25:8c:4f:06:c6:e4:04:78:ee:49:6a:6d:e6:
35:52:41:aa:e3:dc:99:42:ff:90:0a:5c:f9:fb:c8:
16:35:39:80:cd:82:68:3a:65:bc:e9:3c:ab:78:7c:
7d:49:38:f5:65:5d:0a:61:44:8d:b3:ac:cb:2d:81:
bd:c5:4a:76:9c:26:d2:ca:20:0c:65:2c:df:ce:fc:
8a:fe:da:da:3b:1c:94:5e:ca:40:90:b0:57:1f:b7:
8a:0a:67:95:76:ca:03:c5:f4:be:6f:63:a1:af:93:
fe:b3:71:18:6d:66:c6:0d:79:5c:1d:5a:94:0b:ce:
c8:dd:ac:f7:af:53:4c:06:08:c7:d4:73:5e:0b:71:
bc:c3:44:21:01:79:07:b6:14:eb:29:fd:4a:d1:73:
4c:93:68:d6:76:a5:69:14:2b:db:35:e1:6e:1b:8f:
2a:c4:7d:0e:42:e0:a6:7b:89:d6:2f:7f:8a:a0:b9:
60:8c:b2:eb:93:1f:c2:4d:a7:d5:9a:61:68:69:9f:
61:5e:c8:bc:12:a4:44:c2:0a:b7:5a:e9:6f:4d:0e:
c0:18:00:40:2a:48:da:92:16:8e:f5:cf:bb:91:ac:
f5:92:41:1b:94:3b:1f:76:93:bd:21:0c:a2:40:e0:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:68:2000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397335
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:d2:29:fb:a8:7b:c0:a3:50:c7:7c:70:86:d7:79:ce:5e:c0:
6f:30:63:eb:ca:6f:0c:d9:d5:c3:a7:ca:98:a1:fe:85:d2:49:
7f:ac:d1:80:43:b8:14:93:b5:37:c7:ff:b0:f0:a1:2f:75:c3:
df:26:97:b1:24:e7:ca:7c:02:a5:b2:07:53:82:9c:2e:e8:1b:
03:ea:32:7c:0f:2e:d7:79:36:8c:12:1b:3f:51:18:8c:d7:1a:
86:e1:ff:fd:7e:6c:34:6f:47:d2:e7:e5:24:47:c8:96:25:e5:
c4:65:b3:23:66:05:6d:b5:bd:a0:fa:1a:2c:7d:c8:89:4c:51:
16:6a:d4:2c:89:a1:1c:b5:ea:ba:dc:38:70:53:f4:e4:63:ab:
be:64:a3:34:39:5a:e6:06:9e:25:f6:5a:6b:cd:03:e2:57:1a:
74:4b:19:3e:53:77:0d:56:17:8f:c0:c1:55:59:d9:13:f7:7b:
e5:65:04:6f:3b:2f:a9:4e:0e:fc:91:27:6c:07:61:2e:06:c4:
83:54:a8:00:2b:3b:82:00:e2:7b:f1:9d:3d:80:75:8a:09:c0:
97:8f:87:cd:c3:f2:ec:20:f9:bc:1a:8b:e0:a5:ff:64:de:cc:
5a:38:af:54:75:5f:08:f4:78:5b:3e:cb:e8:9c:b3:3a:56:5d:
7f:ea:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 16:37:56 2026 by rpki-client