
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer
File: dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.cer (raw, json)
Hash identifier: A3u21tVV49d9olJFaEeQ2VL5tuemCrZb8OluyDXuTRg=
Subject key identifier: 73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584D2E9D225C3573F324B2311300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Mar 2026 00:45:21 +0000
Certificate not after: Sun 18 Jun 2028 00:45:21 +0000
Subordinate resources: AS: 400465
IP: 23.132.200.0/24
IP: 2602:fbb8::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2e:9d:22:5c:35:73:f3:24:b2:31:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Mar 16 00:45:21 2026 GMT
Not After : Jun 18 00:45:21 2028 GMT
Subject: CN=dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:c1:a1:95:30:6b:4f:3c:2a:c4:2f:25:8a:
1c:00:15:e5:57:64:b9:96:0e:be:11:db:87:66:9a:
ec:dc:62:f2:3e:97:88:86:2a:03:dc:31:cd:51:c1:
78:31:03:2d:84:3e:79:1d:69:44:18:59:a2:90:66:
bd:fc:29:36:70:fd:43:16:95:77:c6:33:8b:64:ba:
14:9d:23:b1:76:45:0f:0e:61:0d:6e:be:cd:ad:44:
b3:5b:13:e4:cf:e5:51:9c:15:f9:d7:a5:5b:cb:a7:
5a:dd:0c:7f:ab:63:07:ae:d7:e5:c1:1f:45:09:34:
7d:46:16:79:a2:c9:e0:a9:c6:f2:01:88:19:7f:28:
bd:21:f4:87:01:82:cd:3a:04:ea:3c:46:8e:1f:75:
f1:0c:ba:63:bf:5b:20:7a:cf:98:0c:a9:f8:72:b4:
c8:e3:34:40:aa:b8:c6:6e:ea:8d:81:cf:be:59:90:
ae:7e:ac:3e:a6:8c:79:1b:51:48:d8:94:95:07:c2:
9f:1e:3c:ef:23:40:22:63:df:dc:b5:42:7e:60:1f:
d2:1d:05:4d:f8:74:9e:19:9d:02:55:d3:fc:7e:d4:
aa:02:77:c4:81:30:f1:7e:82:2d:65:63:97:63:fc:
2b:53:1c:7e:58:e8:f9:2d:5d:49:09:f6:5a:90:a9:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:91:1B:7E:82:61:17:6D:2A:32:3F:97:9E:FB:9C:3C:E9:BA:EC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc/dbdb6c2b-ddc6-4499-a3e7-86c8c08868bc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.200.0/24
IPv6:
2602:fbb8::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400465
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:bd:de:bb:02:95:83:65:0e:d4:37:83:83:89:62:ca:5b:fe:
85:43:8e:b3:7c:c1:20:b3:9c:04:bf:75:44:a4:57:01:c6:ad:
55:51:66:5a:15:cc:4e:9b:3d:db:a5:1a:1c:8d:14:3c:59:cf:
be:8d:19:fd:a5:83:85:24:66:d8:f0:2d:3a:77:3d:54:fd:5c:
d5:5d:27:15:95:34:f5:a0:ea:d0:c8:3c:c1:92:90:64:91:f3:
b5:25:e0:ab:d5:ef:15:97:50:53:9c:d9:92:3f:8f:76:33:fe:
bc:48:7a:e8:93:62:86:e6:d8:4d:1b:db:a1:7a:76:12:ce:74:
65:54:d6:85:79:1a:b7:b5:2d:11:2b:96:09:7e:45:21:2b:76:
59:01:7e:c3:2a:b6:b0:f1:a2:0e:d7:9f:da:d3:2d:33:d2:cf:
97:a7:ec:4e:f1:2b:3a:c3:94:fa:54:cd:f9:97:45:33:a5:c1:
57:ba:a2:9f:3b:a6:4b:3c:28:36:dd:5f:1f:ee:a2:23:0b:99:
87:66:82:e0:c9:35:66:e5:2c:1a:2e:8e:7a:74:02:40:bd:34:
a4:a0:a5:53:69:25:32:c9:d3:f2:61:69:55:0a:12:8d:03:82:
41:8e:a8:66:6f:29:73:38:67:71:77:67:af:fc:07:b3:96:a4:
41:92:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:55:11 2026 by rpki-client