
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer
File: 4dc07ba6-d360-4ca5-a860-62e4e5476f84.cer (raw, json)
Hash identifier: EiQeAm5oXgfokPv/jeA7SmWqGv04B23mmq6Wf4K+YjQ=
Subject key identifier: ED:EF:C0:A4:DC:8A:AA:B8:61:09:78:58:E0:A1:96:08:1A:13:B6:9A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584EBC6F85F803006C9BC85F7080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 05 Aug 2026 12:45:11 +0000
Certificate not after: Tue 07 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 35916
IP: 204.13.152.0/22
IP: 2607:f130::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bc:6f:85:f8:03:00:6c:9b:c8:5f:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 5 12:45:11 2026 GMT
Not After : Nov 7 13:45:11 2028 GMT
Subject: CN=4dc07ba6-d360-4ca5-a860-62e4e5476f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:f1:8f:ee:80:1d:b9:21:42:45:e3:26:7d:
8b:59:3b:54:89:8c:da:f2:bc:05:8d:f5:87:1f:4d:
93:27:44:51:30:81:38:76:a9:ee:7c:9f:f5:27:0f:
a2:fd:82:14:cc:cb:7a:68:cb:ef:09:0c:d7:22:81:
70:4d:34:44:f1:73:d4:f1:96:92:73:6f:52:b7:8b:
6d:3b:47:2e:43:a8:f8:b2:55:1b:ca:cf:b7:4b:5a:
6c:c4:80:2a:a0:aa:03:87:71:d5:8a:85:08:ad:29:
5c:dd:5b:17:53:18:47:f9:e5:41:50:ff:67:8b:dc:
fa:35:80:db:0b:17:81:34:a8:d0:37:11:01:ef:a6:
af:7d:75:9d:2f:21:3d:43:25:26:62:22:c0:4e:f7:
9c:b0:43:05:b6:99:ff:fa:d8:0f:35:4b:8a:41:4f:
c0:3a:f2:d1:39:fd:df:bb:b7:91:57:8f:c5:f3:25:
78:af:be:df:4f:89:0a:7e:4a:1d:5c:61:0a:67:27:
4d:5b:ca:bf:ad:ea:da:50:15:2a:df:a5:7c:6b:e2:
9c:b9:5c:4d:61:48:11:67:6c:81:7d:de:b0:4e:46:
89:f9:66:13:d1:06:8d:ee:f6:ae:92:3a:70:3e:8d:
a7:df:8f:0c:d6:37:9f:b2:17:8e:b9:fe:fa:69:da:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:C0:A4:DC:8A:AA:B8:61:09:78:58:E0:A1:96:08:1A:13:B6:9A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/4dc07ba6-d360-4ca5-a860-62e4e5476f84.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.152.0/22
IPv6:
2607:f130::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35916
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:07:34:0c:f4:e2:f7:6e:1d:55:ce:10:1a:36:40:eb:af:83:
18:8e:9a:03:bc:8d:ad:88:d2:35:c6:00:74:00:6d:fe:71:0f:
9a:2f:bc:30:ed:bb:90:bb:85:25:a2:5d:e6:6e:42:0d:02:3c:
e1:99:f0:19:36:8a:6d:c2:ff:5d:88:27:e2:72:33:e9:8b:50:
12:ba:ff:73:8a:96:76:0e:d2:2d:4f:73:b5:f9:ff:1f:e5:92:
7f:f0:9e:a3:0f:61:f8:9d:b1:af:28:01:fe:2b:71:4c:fe:07:
d8:eb:90:36:60:f7:0a:06:41:28:da:74:be:a3:ca:29:e9:ce:
8b:20:da:45:9a:4e:7a:a3:6e:5b:e1:93:3b:25:79:eb:97:05:
69:3a:fa:3d:e0:04:40:cb:0f:54:ce:71:16:9d:16:56:2e:76:
b2:69:c4:3a:01:9f:8b:25:a0:44:e9:9b:19:8b:04:67:27:3c:
ce:db:36:1b:63:d4:64:02:61:d9:63:bc:ac:45:6f:c7:8c:23:
77:f0:77:79:8e:f0:f5:d4:01:f5:98:15:d5:50:e7:f4:38:9b:
c3:5e:be:2f:be:5d:97:c3:62:79:4d:e5:46:54:f8:7a:e2:0a:
b8:e8:cc:9f:04:3e:85:cf:d4:59:ba:bf:b3:9b:76:27:3c:0b:
db:9a:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:27 2026 by rpki-client