
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer
File: 23d0180c-f5ee-4e4e-93f1-dbb120e04d84.cer (raw, json)
Hash identifier: TWlt+d8LBpgqmgCg/0/gsUf7ihdYF22qLLz4cQogrMQ=
Subject key identifier: 79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584F78E0B458E6C530B35FEF8DC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Oct 2026 00:45:12 +0000
Certificate not after: Sun 14 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 401686
IP: 192.104.10.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:78:e0:b4:58:e6:c5:30:b3:5f:ef:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Oct 12 00:45:12 2026 GMT
Not After : Jan 14 01:45:12 2029 GMT
Subject: CN=23d0180c-f5ee-4e4e-93f1-dbb120e04d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:e8:c1:20:78:0b:cb:04:bd:73:61:50:96:
6f:01:c5:02:f6:55:2b:31:dc:07:b7:8e:d1:bb:d4:
b8:5e:6b:f4:99:fb:db:af:f2:04:09:10:7d:3f:b8:
c1:24:e9:60:8b:87:f9:29:6d:e6:a8:c5:64:59:57:
3c:21:7c:01:72:58:2e:68:f6:81:b4:4e:46:a3:82:
f1:cb:30:24:4b:51:8a:cb:22:11:d6:d1:51:0e:78:
b9:56:85:a3:32:c8:5b:c9:75:b8:11:1f:11:a0:54:
a7:69:74:28:61:fd:58:d7:8b:45:2f:b7:2f:97:72:
cc:81:55:58:9f:f0:c7:cd:42:b1:00:8c:bb:26:28:
d7:39:7a:d4:c4:3b:3a:76:fe:a7:fc:ec:1a:63:ef:
62:2c:34:2f:d2:30:f9:e7:c3:c6:37:f7:5a:41:e4:
86:61:f4:d9:f8:90:ce:d9:22:cc:d7:e1:56:94:91:
85:a4:46:63:25:a0:52:25:37:0e:78:cc:9a:02:57:
c9:76:b3:b3:d7:95:62:ea:e3:50:2c:33:41:2c:78:
41:ca:72:ef:73:2c:4e:2c:c9:9c:f6:21:6e:2f:12:
3e:41:12:de:5c:25:e4:24:1f:e4:1a:85:f0:73:e8:
30:b6:25:5d:36:f3:08:2b:0c:d3:08:27:0f:3f:dd:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:93:38:6C:61:41:E3:E4:B8:EA:EB:E0:0E:17:37:62:27:B3:08
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23d0180c-f5ee-4e4e-93f1-dbb120e04d84/23d0180c-f5ee-4e4e-93f1-dbb120e04d84.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.104.10.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401686
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:79:db:00:61:02:3d:43:26:a2:5a:aa:de:f5:f7:33:c9:2d:
a9:a2:9c:fd:78:f9:e3:c4:5a:00:54:bb:1a:d8:cb:b9:eb:1c:
76:b3:ab:8f:e6:7f:10:9e:87:a6:a6:68:f7:94:b6:ba:24:b5:
b3:61:6e:20:15:de:c0:cd:5d:86:54:54:e6:47:e1:2c:03:c0:
54:b0:5e:fb:a9:33:8e:ef:b2:fc:c7:d4:dd:88:07:8c:39:74:
37:42:39:69:9a:8c:34:97:fa:c0:ad:3b:bf:18:02:8a:cf:25:
73:df:dc:ff:09:ae:d8:c9:58:df:72:38:ae:4a:34:77:ac:cb:
90:37:e0:37:a7:80:6d:3b:db:a8:67:c3:d3:63:3c:cd:35:59:
25:30:6d:cc:13:51:d1:4a:fb:5b:c5:90:3a:e9:90:d3:77:9d:
64:28:5b:72:c0:cf:48:dc:39:1e:02:80:fc:67:74:8d:0f:2a:
2b:8e:b0:0c:0b:32:fa:3f:a2:86:a5:fe:2b:55:5d:77:7c:ec:
fc:2d:4a:11:fc:d7:f8:63:2e:e9:47:5b:2f:25:6c:5a:08:84:
7a:11:5a:3b:3e:bf:ca:ca:d8:5a:26:37:e0:2b:41:da:60:1b:
96:47:2c:e7:12:cb:a6:9c:e0:0b:7b:39:90:53:77:74:83:d4:
9c:14:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:26:58 2026 by rpki-client