
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
File: 7245cdbf-97d7-4376-9d8d-298cda5d3854.cer (raw, json)
Hash identifier: Ql1l2gPW4f5un65qgathMVlnMohMXn7Vtb0p0GDAnho=
Subject key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584ECA64F1CA0292BDF21926E700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 10 Aug 2026 12:45:11 +0000
Certificate not after: Sun 12 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 32726
IP: 208.95.48.0/22
IP: 2620:12f:2000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ca:64:f1:ca:02:92:bd:f2:19:26:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 10 12:45:11 2026 GMT
Not After : Nov 12 13:45:11 2028 GMT
Subject: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:d6:90:ca:fa:46:1b:61:ff:b6:2f:8a:5a:
1c:33:95:ee:d6:d0:2c:1f:0a:11:1b:09:e9:03:d4:
0e:f8:f5:a6:16:ab:6b:a9:89:05:87:be:5d:7b:0e:
2e:1a:ee:4c:94:bf:ba:82:03:62:4c:71:a1:7b:cb:
7c:06:25:d7:a9:2f:ad:e2:67:0b:7e:df:15:67:68:
23:91:2d:17:b4:e5:5e:44:b0:a2:d2:4f:65:2b:2d:
93:04:fc:e2:77:f4:ea:f8:54:e8:31:d8:57:3f:8f:
b3:b9:06:ba:c6:31:3f:67:77:6e:fd:ae:40:17:06:
1d:74:76:3b:f9:ef:85:e2:7a:ce:ce:d2:f4:b6:72:
d2:3a:dc:fd:63:8d:14:23:52:13:cb:bf:5c:9a:6a:
13:2a:a9:5b:75:fd:b9:10:b9:8b:e2:70:6e:a0:34:
0f:69:f8:2e:12:f6:9c:36:8f:55:1c:6a:b1:db:97:
a9:73:f7:28:5a:67:0b:8f:37:5a:9b:d0:a4:e9:50:
65:21:c4:47:a0:24:70:67:8a:52:45:51:8a:5f:d6:
ef:f0:9a:1c:99:69:86:37:0b:16:12:fa:24:9d:a4:
13:c0:69:eb:be:f5:9f:84:9b:6d:42:e8:b0:eb:9d:
8e:15:64:4c:31:be:f5:1e:c6:d0:16:17:ba:59:86:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.95.48.0/22
IPv6:
2620:12f:2000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32726
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:ee:a7:b3:70:12:cd:29:b6:3a:b2:49:e9:81:18:b5:53:92:
de:76:db:84:b3:65:b8:09:55:cb:86:91:65:a9:ee:33:30:15:
f8:8f:e6:dc:2c:5a:bf:3c:6c:f7:a0:5d:fa:1c:67:8b:96:60:
14:a5:4b:c4:1b:81:08:2b:1a:18:5a:8e:db:ed:76:2b:09:a1:
00:e2:ef:74:5a:59:a2:b2:8d:1d:47:f8:06:d4:ff:ba:2d:ae:
51:27:f9:12:30:26:74:07:7c:51:7a:35:50:ca:3d:a1:8f:ff:
12:ef:8f:9a:52:0d:75:85:5b:d7:91:ab:e1:48:bd:39:36:85:
2c:3d:50:98:e2:13:99:4d:b0:a1:22:c4:26:25:38:02:60:49:
5d:04:13:3d:4d:9e:20:e1:2f:0e:f1:23:98:ab:ad:b1:02:48:
be:4f:e5:d9:e9:61:99:42:76:c2:68:5c:31:5b:0b:55:6c:a8:
af:04:f9:d3:ba:fe:66:fe:d6:5c:92:1c:9b:13:b8:81:ad:28:
e2:2d:79:32:c8:fd:e2:75:f0:00:ae:73:c5:0e:c0:bf:f0:54:
f3:d7:31:d2:5a:26:c7:76:d7:e2:b6:0d:17:7b:49:22:98:24:
2b:c8:fd:d0:59:a4:67:29:53:ab:6e:a5:e2:df:08:2f:84:6c:
f5:2b:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 21:52:56 2026 by rpki-client