
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
File: 65b4abb1-58ea-4d3f-9703-22438ac9f545.cer (raw, json)
Hash identifier: dpzAHSyF7lldyn0219mZl2qKTGXSwRTJObHLSGyAJSI=
Subject key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584CE08FC452A8AA55E9437DA340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 01:45:22 +0000
Certificate not after: Sun 21 May 2028 00:45:22 +0000
Subordinate resources: IP: 138.73.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:8f:c4:52:a8:aa:55:e9:43:7d:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Feb 16 01:45:22 2026 GMT
Not After : May 21 00:45:22 2028 GMT
Subject: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:3c:36:17:61:50:65:6f:8a:3f:8b:31:21:
41:0d:1d:f2:6c:a6:8c:79:30:43:e8:8b:21:ce:ef:
5c:1e:63:73:b9:4e:ab:13:73:67:db:ca:ac:e5:48:
4a:55:29:21:7d:44:2c:8c:2a:72:c5:ea:2f:b2:22:
a5:38:c5:e6:28:e1:c4:59:54:3d:96:35:df:04:58:
54:4e:6e:c2:67:aa:b7:45:a4:f9:6d:b7:8f:00:37:
f7:ce:0c:d9:73:e2:dd:df:a3:50:c4:98:a3:0f:22:
d8:69:09:52:f2:95:a3:ec:0d:4e:a8:d4:ca:ca:80:
bc:cf:3e:3a:66:3b:7d:1a:33:ff:31:94:ce:2e:d0:
26:29:4f:e2:71:50:c6:0a:88:8f:9d:1a:45:b0:14:
2b:d2:ac:c8:07:2e:4d:5b:54:e1:01:a6:b9:dd:25:
4d:2c:d4:65:45:5c:e1:1e:dc:20:14:ea:95:20:29:
4d:4a:63:71:9c:ee:02:c0:4f:4c:cf:18:ae:f4:42:
89:99:f2:bf:ff:7a:c9:94:97:9d:00:8e:e0:5c:ce:
12:30:dd:8d:1d:b7:72:e4:f9:b7:e5:ec:fe:e3:61:
77:b4:49:16:ce:30:b8:01:7f:72:b3:b3:05:2c:b4:
0c:25:df:ee:9c:d8:72:b0:5b:5a:93:6b:3b:5f:9a:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
138.73.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:56:b4:86:fa:27:25:19:69:35:9f:c6:5f:dd:6d:e4:c4:a0:
53:44:5e:6a:ce:bb:25:ec:d6:e5:0f:5f:02:03:d1:89:24:22:
20:3c:2b:61:5d:c2:46:f5:4d:62:4d:c6:6c:63:a7:90:98:b4:
3a:00:07:df:08:42:2e:7b:62:b7:96:c7:ff:39:f4:ff:fc:66:
3d:c4:03:53:e7:5f:9b:f4:22:4f:29:6e:1a:32:01:66:30:ce:
62:b7:32:dd:3f:04:9c:9d:69:11:b7:09:c1:89:5f:c7:52:79:
02:ea:60:14:75:90:24:fd:01:32:83:d5:01:ad:f8:88:ab:60:
0f:8e:54:5c:37:9f:8b:55:f8:5d:41:63:a6:e8:c1:d4:2f:17:
72:37:f3:ea:99:fb:dd:b2:12:94:e7:28:d5:aa:23:06:0f:36:
83:34:8d:20:cd:25:a3:b0:27:76:5f:28:82:fe:d4:9b:b0:7d:
16:03:5e:97:72:47:c8:fa:f8:c1:9a:13:32:45:0b:15:36:2b:
cb:33:b0:16:d0:90:56:0f:8a:a8:c8:bd:e9:57:80:77:21:c8:
2b:8e:16:20:2b:dd:d9:ec:84:22:51:9e:86:a5:56:0c:2e:44:
9a:c4:23:22:d3:7f:5c:0f:54:2b:d2:3d:5d:3b:b5:39:1d:51:
96:46:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 14:33:03 2026 by rpki-client