
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdf690e7-d315-4934-99ff-dd40404aa14e.cer
File: cdf690e7-d315-4934-99ff-dd40404aa14e.cer (raw, json)
Hash identifier: Q1c8/v047fzWCo5pKxoaRP3whufGBOzNKem2wCKj30M=
Subject key identifier: EA:C9:5C:B7:B9:4E:22:7B:76:6E:8B:1B:4D:CC:D7:7E:30:BA:EA:F3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E41224F418AE69E15B6755EC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdf690e7-d315-4934-99ff-dd40404aa14e/cdf690e7-d315-4934-99ff-dd40404aa14e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdf690e7-d315-4934-99ff-dd40404aa14e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 22 Jun 2026 08:45:11 +0000
Certificate not after: Sun 24 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 17016
IP: 209.126.74.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:41:22:4f:41:8a:e6:9e:15:b6:75:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 22 08:45:11 2026 GMT
Not After : Sep 24 08:45:11 2028 GMT
Subject: CN=cdf690e7-d315-4934-99ff-dd40404aa14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:81:f1:d0:66:2e:e6:5e:c7:6f:9f:cd:18:
70:1b:51:5b:43:ed:b3:d2:26:25:62:92:a0:47:f8:
d9:80:66:8b:80:f8:e4:88:04:3a:fb:da:92:73:dd:
ee:7d:e0:27:6d:56:db:0e:7d:fd:6f:52:0f:0f:3a:
6a:69:ae:0d:04:3a:0a:62:a9:dc:2b:78:9f:b2:88:
42:41:a7:dd:06:93:3d:c3:77:c1:93:26:fc:43:04:
52:46:35:39:a6:db:a3:e3:62:93:d4:5f:d4:1e:f3:
6d:68:97:66:24:4f:e0:9e:20:3c:54:15:e3:7c:17:
22:78:4b:8f:0b:9a:92:fe:e2:35:39:99:d1:e8:3d:
f4:cc:8e:81:0d:08:e2:93:84:62:c7:da:fe:fd:c2:
d6:58:96:67:5a:48:37:2a:f7:c2:3a:d2:05:ed:db:
a2:02:08:db:9c:46:3f:85:3e:d4:63:62:38:5f:c0:
9a:83:ba:dc:f6:99:fa:81:b3:b2:30:ae:b1:45:d2:
84:35:8c:59:fc:9b:a0:c9:f3:8d:53:32:62:4c:70:
eb:5a:55:70:db:ca:99:33:24:80:fc:56:d2:2f:45:
28:3c:a7:18:c7:e2:d5:9d:b7:d2:ad:07:a6:b5:f8:
3d:d8:2f:d1:b5:55:96:48:39:e7:00:12:5b:79:06:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:5C:B7:B9:4E:22:7B:76:6E:8B:1B:4D:CC:D7:7E:30:BA:EA:F3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdf690e7-d315-4934-99ff-dd40404aa14e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdf690e7-d315-4934-99ff-dd40404aa14e/cdf690e7-d315-4934-99ff-dd40404aa14e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
209.126.74.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17016
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d6:e8:73:2e:47:41:d8:5f:8b:e5:c5:d7:ca:16:c7:fc:5b:
11:42:90:fb:5b:2e:7d:62:91:bd:56:09:a6:6d:bf:eb:49:37:
5d:bd:87:32:4a:e1:a3:50:cd:a5:07:e3:41:20:80:76:fe:4b:
82:20:ce:27:e0:ef:99:17:75:e5:b1:1b:18:2c:72:df:ce:2d:
d8:26:2b:a2:ac:c9:26:78:00:c1:98:39:66:f7:67:3a:3e:60:
69:aa:b4:ce:55:d3:70:4b:a5:6c:f7:43:29:34:f1:32:a0:a1:
d1:d5:d7:92:a6:37:27:4c:45:12:6f:9d:dc:09:96:2d:34:aa:
70:2a:f6:22:8b:53:7d:d6:42:92:16:ae:46:93:e3:70:df:b2:
ea:18:d8:41:d7:3b:11:68:77:6e:d5:5b:de:ec:40:c1:51:5a:
41:a4:50:f6:a2:5b:f1:9b:23:0b:00:44:42:0a:64:4a:66:03:
29:d8:75:00:3b:a9:23:69:89:4f:ac:df:a0:b5:72:f2:42:c6:
62:2a:7a:9f:da:2c:b5:49:39:56:3a:0d:ae:64:98:d2:1e:49:
7c:9e:8b:91:a8:b2:40:2c:31:cd:3b:1b:51:a9:09:c9:11:98:
82:4f:11:fe:80:7a:9d:9f:e0:d7:2e:dd:55:63:3c:07:72:41:
22:6a:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:11:08 2026 by rpki-client