
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651.cer
File: edc22fcb-2cab-42b3-9bab-80acf203c651.cer (raw, json)
Hash identifier: BIYlZU2tAlPqRCs5l3c8fFiXIlsobpl7vLEH82fIyQ4=
Subject key identifier: 1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E507D13CAF65EA3C6E1B28B40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 27 Jun 2026 20:45:12 +0000
Certificate not after: Fri 29 Sep 2028 20:45:12 +0000
Subordinate resources: IP: 66.6.56.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:50:7d:13:ca:f6:5e:a3:c6:e1:b2:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 27 20:45:12 2026 GMT
Not After : Sep 29 20:45:12 2028 GMT
Subject: CN=edc22fcb-2cab-42b3-9bab-80acf203c651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:bd:c8:9e:44:01:33:47:90:84:6c:61:45:
0a:3c:66:b3:cc:7a:53:95:f7:51:97:81:69:00:28:
17:88:ba:e8:d9:67:ba:0d:cd:15:62:87:75:9d:90:
bd:c5:81:2f:1b:59:4a:aa:f9:9d:93:95:06:48:2f:
84:a8:6b:d4:7e:ca:a2:b3:f4:5f:34:00:82:b3:87:
2c:7c:06:9a:b6:1b:64:92:04:7a:05:fb:42:2f:d2:
48:2b:a5:44:ca:36:dd:f6:31:20:ed:d0:55:d8:4f:
ca:e3:57:52:a8:ba:d0:4d:fb:58:25:44:c3:21:12:
8e:f4:e9:2b:8c:a1:c4:e8:44:42:f6:12:b8:cb:0a:
80:c0:b1:14:45:8a:92:22:03:9a:a8:45:0c:b1:75:
af:dd:ce:6b:ef:a4:db:69:19:9c:98:cd:05:79:1a:
e1:f2:7f:44:bb:ac:31:59:17:77:0d:22:35:5d:79:
f2:02:e0:bc:17:7b:2c:21:3b:3d:1b:3a:42:01:f7:
04:b0:90:4c:29:a6:13:8e:7b:41:27:68:86:b9:de:
6d:80:c9:c2:cb:22:28:e5:ee:d5:c2:e5:b0:22:cd:
9a:c2:ef:94:df:6f:6b:23:16:03:89:1e:42:12:a5:
1b:7e:3d:b2:82:00:f2:c8:3d:da:f9:df:45:0c:38:
9e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:D7:95:EA:09:62:1A:66:A6:BC:DB:0F:57:FA:45:3C:97:B5:80
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc22fcb-2cab-42b3-9bab-80acf203c651/edc22fcb-2cab-42b3-9bab-80acf203c651.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
66.6.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:02:41:e8:3e:75:e0:60:6c:cf:b6:a7:ac:32:43:66:0e:50:
e4:19:29:ee:d1:ad:5f:09:c6:18:7b:60:e4:44:59:46:ca:1b:
ae:d0:69:d4:31:81:81:ee:9c:da:dd:fb:a7:43:12:ff:05:45:
ca:13:24:31:f3:df:52:a8:5c:96:1b:e6:95:d6:58:75:5a:67:
bb:ae:9c:e5:33:02:f5:bf:85:98:23:d3:40:46:79:a1:b8:7b:
c4:c2:74:24:b8:79:5f:b3:94:cd:7c:04:f6:02:c2:e8:cd:0d:
85:b3:d7:b2:d3:70:b5:8a:e0:d2:05:7b:93:75:48:73:66:13:
ca:49:0e:0a:06:94:9c:0b:9e:77:25:76:58:ff:30:02:e9:96:
2d:09:d1:27:7d:f1:41:56:db:e8:23:67:f4:59:a6:54:f4:78:
a7:e9:f7:ac:4a:80:89:67:4c:c7:fb:8e:2c:5d:71:d2:c8:81:
39:28:dc:15:cf:e7:a9:ed:b9:4e:50:e5:65:6b:14:f2:97:6d:
c5:55:27:d4:df:33:0f:6c:1a:a0:98:03:59:3e:90:3c:ed:94:
32:5f:08:ab:02:b1:48:1f:83:e5:b0:a0:e2:90:96:b8:cd:7b:
26:da:3b:0f:e1:23:68:e1:3c:54:08:4d:36:ea:14:3b:73:e5:
50:3c:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:10:40 2026 by rpki-client