
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer
File: 47ebfec0-de9f-4253-8391-0bb6095c8f7c.cer (raw, json)
Hash identifier: OHYqyzErLoPua36SXFx9FpzlPcPq6/h3HjAMkjp3zhs=
Subject key identifier: 14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E5B2AC9820D289D4BC5F5BA80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 16:33:17 +0000
Certificate not after: Sat 09 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 7356
IP: 23.133.44.0/24
IP: 169.128.88.0/22
IP: 2602:f716::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5b:2a:c9:82:0d:28:9d:4b:c5:f5:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jul 1 16:33:17 2026 GMT
Not After : Sep 9 08:45:11 2028 GMT
Subject: CN=47ebfec0-de9f-4253-8391-0bb6095c8f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:79:35:7f:6c:f0:6a:5f:df:75:7b:6d:61:
eb:9a:06:43:c2:41:50:95:8d:ad:46:1e:91:0f:79:
05:da:93:60:39:dc:85:3d:65:04:27:b0:d9:c2:c3:
ce:2b:f2:83:99:51:63:d7:af:50:08:8a:c2:92:e0:
67:42:c2:7b:ce:60:d9:a5:b8:17:c9:13:62:c8:66:
ba:58:5a:4c:20:b3:4d:8c:fa:f6:db:f7:d3:56:28:
19:67:2e:0c:0f:dc:84:55:be:42:d2:51:3f:40:c5:
43:7e:fc:03:cf:db:ab:3c:c7:72:ec:3f:c0:b6:95:
8f:21:a8:45:64:9b:54:72:20:0d:8c:13:0d:19:21:
6f:4f:5a:a6:8a:c2:e6:1d:90:cb:cf:0e:36:d2:cd:
c9:9c:47:aa:0a:9a:42:54:de:24:d3:06:ae:3e:25:
aa:5f:28:7a:66:82:ab:cb:ec:6f:d3:29:3f:c8:be:
33:9c:6d:df:98:c8:17:85:30:63:16:3f:80:28:a2:
86:1c:7e:af:08:b9:f3:09:b1:a5:32:0e:72:0e:c9:
10:a4:16:7f:53:0e:4f:85:84:29:f9:8f:40:3a:56:
8b:d3:2d:40:85:38:06:e6:7a:94:fa:d4:fa:48:fd:
ac:20:80:3a:ed:b2:e4:24:ba:ab:a8:26:3f:b7:18:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:65:46:D5:84:9B:8E:BC:81:4C:47:84:7B:83:03:B9:4C:46:E5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/47ebfec0-de9f-4253-8391-0bb6095c8f7c/47ebfec0-de9f-4253-8391-0bb6095c8f7c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.44.0/24
169.128.88.0/22
IPv6:
2602:f716::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7356
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:78:75:d5:e0:ea:7e:d2:9b:15:e8:a2:f0:6e:f5:5a:f2:33:
5a:20:1a:9c:f3:70:4a:0d:59:f2:b0:e1:35:00:25:f7:fc:5b:
6b:d4:de:32:11:4e:da:b6:3b:53:c9:42:15:37:7f:97:33:b4:
f4:5b:8f:3b:24:60:a2:01:a1:38:9f:32:25:5e:94:c6:43:94:
0b:58:d5:3c:35:0e:17:83:98:fd:e8:95:7a:f4:7f:09:3f:0e:
1b:81:1b:d5:a5:ab:59:dc:aa:8e:02:18:2f:3a:2c:0f:68:3a:
0a:44:44:89:81:08:e6:2c:db:3c:c2:c0:10:48:97:8e:97:70:
00:e0:2d:9e:14:ec:5d:d4:cb:c0:dc:6c:c1:5f:56:43:95:d0:
2a:0b:34:fb:7b:73:a6:47:24:dd:35:20:b0:ec:84:83:b0:40:
3b:9a:38:4e:d4:42:25:cc:49:0c:e4:93:ac:4f:88:21:fa:49:
04:08:7e:47:47:2d:94:d2:33:96:bb:65:7f:64:be:e1:7f:8f:
9d:cb:b8:3f:0e:44:73:13:ec:93:8b:6f:74:77:3d:40:7a:21:
09:6f:37:d3:4b:d3:a7:5b:66:64:a7:31:e2:51:db:79:0c:86:
bc:51:12:eb:5e:55:94:d8:9f:50:b4:40:aa:9d:63:b3:67:3b:
d4:78:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 19:13:00 2026 by rpki-client