
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer
File: f01c98d6-0a7e-47d2-9b33-584d06920624.cer (raw, json)
Hash identifier: iBd2wwYWZqAc2tCv1JwSrJPbuaMv5/94AVmvu6cSef0=
Subject key identifier: 92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584F8C6B7DA623F3F25709DA5580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 19 Oct 2026 00:45:12 +0000
Certificate not after: Sun 21 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 401610
IP: 206.168.104.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8c:6b:7d:a6:23:f3:f2:57:09:da:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Oct 19 00:45:12 2026 GMT
Not After : Jan 21 01:45:12 2029 GMT
Subject: CN=f01c98d6-0a7e-47d2-9b33-584d06920624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:de:ab:a7:2a:6b:76:46:0d:cd:52:ff:ba:
e2:b8:8d:41:35:85:e2:3a:24:24:50:c1:c0:90:9c:
8b:4f:e3:88:7f:db:02:6a:a5:17:ee:ea:08:4d:0f:
52:1b:b0:eb:ed:8f:b7:be:1c:d1:a3:9e:e7:cd:67:
4a:5e:e7:bb:5a:aa:55:1b:07:f1:6c:80:dd:34:78:
d8:a6:73:89:b4:10:63:5b:3b:8b:d4:de:8b:cd:29:
b6:eb:29:90:2a:8d:bd:5d:ee:26:f2:90:7a:73:42:
10:26:1d:18:33:ff:8c:b8:72:15:bd:18:6e:ac:a8:
09:c6:00:48:d2:53:ac:f7:34:e9:fc:79:29:cd:66:
88:6a:38:e2:a7:ac:bd:84:a2:b5:c6:32:e2:1b:5b:
dc:ea:00:a4:21:48:84:f6:6e:1f:f8:61:44:e1:aa:
e3:0a:35:92:67:39:80:8e:b8:cd:3d:88:d3:47:f7:
db:b3:8f:68:b0:d4:32:c8:a9:9d:2b:b3:9b:3b:92:
73:2d:b4:07:97:10:d5:0b:32:07:0c:04:0d:20:3f:
72:ca:a5:2e:fa:3c:b8:8a:a3:c1:d3:4f:ab:0a:4d:
94:c1:13:c2:86:52:64:47:72:b4:4b:ad:80:fa:ac:
8b:a5:b7:22:a8:1c:a3:7e:f9:eb:22:06:35:3b:04:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.104.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401610
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:30:75:2d:50:82:70:02:15:ea:8b:0f:e7:7b:1a:2b:31:dd:
2b:03:e9:98:0b:82:eb:a4:c7:ed:87:81:e9:ec:8c:dc:79:ff:
36:ab:55:1d:33:3b:b1:34:ec:c7:b1:38:5c:f0:2c:37:a5:ea:
7e:4d:cf:8c:ba:f6:fd:45:05:54:f5:55:2f:52:72:5d:ae:af:
88:a1:f9:71:de:4d:15:de:ab:9f:e9:c3:6b:28:3a:24:1e:80:
d3:6e:8d:0c:b9:eb:bb:6c:d5:ef:53:63:f0:25:2c:64:12:bb:
4c:85:8c:c4:dd:fc:cc:6d:5b:51:07:57:f3:03:72:b6:36:71:
e9:d8:d8:52:80:12:49:bf:a5:78:bf:c0:1d:46:16:e1:66:47:
41:41:04:81:59:e9:ac:e1:d3:75:9d:85:1a:44:7f:77:5f:91:
fe:6b:f9:16:4c:46:f8:f6:8b:3c:9b:27:7e:8e:6c:32:69:77:
d2:c1:dd:6d:7f:18:f1:1c:37:ec:b7:19:b5:50:5d:bb:f3:ba:
63:1b:81:19:df:54:ea:32:57:e8:85:82:53:3d:5a:cb:d7:d0:
94:53:4a:aa:ab:3a:a7:0e:07:c1:71:be:17:f3:83:f3:fd:1f:
9e:17:2e:6b:4f:57:cf:6a:c1:23:11:7d:9c:16:8f:a3:21:e4:
00:07:ea:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:51 2026 by rpki-client