
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer
File: 30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer (raw, json)
Hash identifier: maLptsiiPm6tqyUpbcZ7QfGaUKmoy2mXak54yDq+LzE=
Subject key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584D9483115D4AEC8B86EE884F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 21 Apr 2026 12:45:17 +0000
Certificate not after: Mon 24 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 20381
IP: 192.160.73.0/24
IP: 2620:0:2b10::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 09 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:83:11:5d:4a:ec:8b:86:ee:88:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Apr 21 12:45:17 2026 GMT
Not After : Jul 24 12:45:17 2028 GMT
Subject: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:12:50:c4:7c:4e:12:bd:75:ee:e2:be:ab:
aa:75:87:b3:f0:80:44:65:c9:e1:28:cb:aa:67:4c:
5a:9d:7a:53:17:3d:b5:65:3e:6d:ed:9d:5d:0a:49:
9b:84:ae:52:37:00:77:9f:90:62:cc:34:66:9d:27:
73:02:96:db:fd:07:26:ad:50:86:f5:76:51:41:b6:
af:78:9d:3d:15:7d:e0:69:76:b5:8f:b2:b3:0e:eb:
71:48:61:5c:a2:fd:dd:0e:5b:c0:43:d6:23:54:35:
94:b2:dd:e9:61:3b:70:da:ce:e0:3b:74:01:da:4c:
84:80:1a:2f:0a:12:f5:f6:7a:d0:11:b2:b8:e7:8f:
57:87:82:a4:cd:45:e9:be:bd:24:f8:4b:7d:33:0b:
42:74:60:5e:d7:45:d2:02:e2:fd:e3:af:1c:9f:81:
f1:77:61:9b:fa:63:b1:e0:1e:ae:6e:c4:c0:14:fc:
54:1a:ee:af:b5:c2:9e:f1:b0:b3:8a:bd:76:5c:08:
1b:61:b9:bc:e5:a0:19:8e:53:bc:5d:fd:28:5e:ab:
41:c8:da:09:d2:95:f4:23:22:7b:e5:be:21:e1:c6:
5c:17:d3:26:0b:9a:74:53:35:69:8a:62:90:b1:17:
cf:8f:f3:03:a5:cf:68:70:a6:fb:45:1e:fb:ab:be:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.160.73.0/24
IPv6:
2620:0:2b10::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20381
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:88:3d:bf:d1:b7:da:5a:7a:b9:70:ca:0d:c0:fe:b8:bd:fa:
92:8b:cd:00:43:7d:fc:12:de:24:4c:3b:7d:e2:1c:ee:8d:b1:
d4:54:82:47:ad:f6:35:cb:d5:18:dc:fa:8e:34:59:d5:53:c3:
9f:fd:a7:f5:27:44:45:10:73:82:94:df:a5:2c:15:a7:f3:61:
a7:11:22:1f:e6:f8:36:74:34:83:d6:15:1f:1e:06:5d:13:b7:
e7:f7:ca:57:c4:9f:36:48:a6:17:83:90:ba:04:d7:05:84:05:
cb:67:f7:d9:24:f3:67:44:2b:25:3c:1a:d2:73:76:d9:37:fa:
f9:26:43:67:14:0e:17:25:08:63:93:4e:39:d1:08:0f:f7:ae:
ed:98:63:c1:25:9f:5b:5d:27:9d:c3:19:df:8f:62:db:46:2f:
0d:b3:8f:49:c1:df:b3:f5:9a:1c:cc:26:93:00:f4:d1:f7:39:
4b:fe:00:2d:d0:73:91:b4:45:bc:2d:36:31:74:80:35:94:99:
48:91:b6:15:f0:0a:75:85:6b:86:32:0e:82:74:35:65:3e:cc:
a6:d7:fc:0f:05:13:be:20:45:2f:6b:63:d5:fd:f3:11:17:28:
e9:e0:76:48:b2:7b:57:f9:99:f5:65:7d:22:84:1c:bd:14:dc:
36:15:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 23:39:15 2026 by rpki-client