
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d4efd2af-6c6f-4f52-8f22-24b65881afd9.cer
File: d4efd2af-6c6f-4f52-8f22-24b65881afd9.cer (raw, json)
Hash identifier: uSRodG4+4w423Z0kbz5dlBrpYXlm1z2dPZDgdGrl3NI=
Subject key identifier: 09:8A:E0:3D:A5:35:5C:81:90:0A:9E:7C:A2:5F:E0:BF:65:61:2E:F1
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer: /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial: 010D0C9F4328584FA59E57882BD42593EC7D0440
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d4efd2af-6c6f-4f52-8f22-24b65881afd9/d4efd2af-6c6f-4f52-8f22-24b65881afd9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d4efd2af-6c6f-4f52-8f22-24b65881afd9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 28 Oct 2026 01:22:52 +0000
Certificate not after: Tue 30 Jan 2029 02:22:52 +0000
Subordinate resources: AS: 403106
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a5:9e:57:88:2b:d4:25:93:ec:7d:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Validity
Not Before: Oct 28 01:22:52 2026 GMT
Not After : Jan 30 02:22:52 2029 GMT
Subject: CN=d4efd2af-6c6f-4f52-8f22-24b65881afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:ae:1c:b3:a5:a1:c0:24:6d:94:24:43:6b:
c5:69:7e:fb:cf:38:d9:ab:64:53:49:a0:21:c8:17:
8a:f0:3f:d5:db:23:5d:a5:bf:ea:5e:30:ce:9d:46:
55:f8:f7:70:13:1b:60:0c:82:d2:69:23:c5:1c:05:
b5:28:ef:93:fd:97:35:bd:6a:ca:f5:d2:06:53:a0:
d1:94:47:18:17:f4:1e:09:f3:6f:75:c3:26:ed:ba:
44:72:15:8d:e2:45:7c:89:8f:99:71:df:03:88:36:
fb:ff:b6:0e:74:f1:17:de:08:6e:38:cd:93:f6:0c:
0e:7b:bf:38:eb:c5:ab:51:7c:bb:0f:f2:4c:db:b8:
cf:f0:44:0a:60:71:68:5e:48:f2:59:97:be:55:b5:
66:6c:14:5f:02:32:3e:ef:2e:54:21:34:4d:d6:18:
31:9d:5e:7d:51:26:66:50:74:9e:a4:d2:6b:1b:b2:
74:55:27:cf:6f:22:12:7f:ea:f1:aa:93:dc:22:35:
6c:81:c8:d2:fa:93:6f:bd:c2:3a:d5:96:e7:22:fc:
1b:fa:9f:35:d8:d9:86:ee:92:7c:b6:f2:7c:b8:4b:
1e:79:d0:2d:9f:ee:ff:d0:e9:59:56:4d:26:52:4b:
e3:77:24:1e:8f:a6:c5:c6:4d:ab:df:ad:97:63:7b:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:E0:3D:A5:35:5C:81:90:0A:9E:7C:A2:5F:E0:BF:65:61:2E:F1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d4efd2af-6c6f-4f52-8f22-24b65881afd9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/d4efd2af-6c6f-4f52-8f22-24b65881afd9/d4efd2af-6c6f-4f52-8f22-24b65881afd9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
X509v3 Authority Key Identifier:
keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
403106
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:53:d6:11:72:7a:71:f9:4e:12:84:19:b8:95:0a:de:8b:cc:
47:96:c4:a6:e1:ce:b6:62:42:b8:e0:72:90:31:db:2a:b1:56:
c0:68:a4:ca:96:c8:d9:e7:51:8d:f2:95:5f:fa:29:0e:f7:36:
d6:e7:a2:75:9a:f6:af:4a:bd:7f:2a:bb:ad:37:51:b1:ea:5d:
ee:6f:3b:76:1e:39:33:6b:70:18:d3:5d:51:ed:b5:cb:92:2e:
da:35:1c:da:31:1f:a5:dd:c0:71:44:24:b4:b8:ed:d2:3e:87:
14:57:fb:b0:2d:df:8e:01:b5:21:70:e7:3c:9a:f5:fc:a9:45:
bf:e9:d6:c5:a4:f7:d3:2d:97:7d:23:d9:dd:a6:d2:a1:67:54:
3c:90:7d:5b:8c:a5:d9:fd:25:63:94:48:40:e5:97:d5:b3:3e:
e2:18:62:a8:f2:89:81:55:87:24:10:cb:f0:c9:62:5f:80:bc:
d0:7c:b2:55:40:75:ef:60:18:4a:2f:67:b4:0b:28:e5:ad:25:
b2:06:c4:c8:69:3c:ed:1b:d3:ba:3e:59:50:06:a7:c2:95:4c:
2a:21:50:85:ea:58:51:81:84:8d:b2:5f:e3:dc:57:ec:b6:6b:
57:8b:bf:23:2f:67:7b:ea:0e:34:9b:bd:27:5b:84:b8:05:ed:
96:6d:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:26:32 2026 by rpki-client