
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
File: f1fa0620-c80f-4a94-9e95-ead44fb79978.cer (raw, json)
Hash identifier: QqPw1Ebz6C+SKTmE4MU13GKXV178coCojSQbhyIXQzM=
Subject key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E3499B7BE2A101EA9E771AD10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 17 Jun 2026 21:00:16 +0000
Certificate not after: Thu 07 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 4167
AS: 60808
AS: 399358
AS: 400243
AS: 401551
IP: 153.61.0.0/16
IP: 160.79.104.0/21
IP: 2607:6bc0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:34:99:b7:be:2a:10:1e:a9:e7:71:ad:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 17 21:00:16 2026 GMT
Not After : Sep 7 20:45:11 2028 GMT
Subject: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:36:e1:1c:56:98:a4:4a:39:4b:08:2d:2d:
b9:b6:c2:5c:ba:22:9a:fd:08:9b:fb:08:e0:c7:17:
7e:d4:1a:8a:46:2e:dc:a2:0c:91:a6:90:4b:cc:07:
b9:d9:3f:b5:70:c2:3e:d7:9e:d7:89:69:52:b2:86:
cf:fc:c1:a7:bc:69:e4:44:36:0e:14:f6:9f:67:29:
40:0c:c4:24:6c:05:58:52:83:7a:f8:0c:8a:fd:9d:
79:a6:89:78:d7:38:6e:51:6f:a9:4c:8d:4b:92:36:
8e:e9:61:5b:cd:c6:24:00:9b:cf:d8:dd:a8:3a:34:
d0:25:e3:4a:29:e7:e6:86:4a:8c:09:93:c0:e3:8a:
5d:72:5c:fd:38:c6:7d:a3:c2:d1:6d:01:95:6e:c6:
f8:4e:c7:82:bd:8f:cd:9a:95:e6:ac:1a:03:a3:9a:
4b:54:7f:06:e4:99:6d:1e:ac:92:6f:6b:d6:f5:10:
29:1f:66:ae:2d:41:46:31:ec:27:8c:fc:b3:62:e3:
39:44:c0:a2:2c:c1:f4:dc:63:ae:e0:52:62:9b:ca:
4a:46:30:0d:c5:9a:74:71:e7:0e:22:e6:53:0f:7a:
5c:66:91:3a:c1:6e:23:e1:32:da:7e:ce:2a:d4:23:
38:0d:49:5e:08:40:c0:84:cd:fe:b5:f3:b5:01:bd:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
153.61.0.0/16
160.79.104.0/21
IPv6:
2607:6bc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4167
60808
399358
400243
401551
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:87:d4:fc:56:55:f6:45:80:70:31:a4:ab:7c:54:bf:da:dd:
5b:8e:d2:07:66:67:42:41:f3:ca:8f:a5:a9:94:8c:ea:1d:0b:
81:83:6c:7a:5f:1a:4b:69:f9:7f:02:1c:b9:1c:58:09:93:39:
02:e4:63:cd:de:b5:90:4f:60:c8:61:04:a0:cb:48:cc:9e:49:
7d:1f:4a:d3:ad:dc:cf:d0:6d:ba:93:0a:b7:55:c0:42:3c:c0:
98:36:ba:7a:aa:d4:f0:e1:d8:85:dd:a0:a4:21:2c:95:4f:d0:
9f:3d:76:6e:cb:df:62:d7:9b:7e:b9:c7:da:a3:37:0a:25:5b:
f9:fe:bb:0e:6f:f7:72:bb:16:c3:00:b4:13:a8:f0:00:4b:0a:
58:b2:95:5e:f1:44:dd:5b:a7:f8:c9:89:23:75:1a:72:ef:0a:
03:af:71:fe:94:82:62:68:c6:28:5e:41:2a:d1:8e:68:b2:f2:
27:2c:c9:fd:98:63:fe:d2:99:de:b9:7d:13:4a:a2:16:25:0a:
8f:ec:27:8c:ad:41:43:94:16:b8:f4:3e:f3:2d:7d:65:bb:de:
8b:80:96:df:ef:c5:59:f7:23:6f:7b:6c:b6:cc:9a:7c:37:27:
db:70:8e:24:e9:eb:bc:51:36:55:6e:f5:53:23:e7:a1:21:da:
0e:28:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:31 2026 by rpki-client