
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802.cer
File: 947fc2bd-74c8-432b-9285-0869f72e7802.cer (raw, json)
Hash identifier: LT9J0dxUducQGjhXXMVTgjVLO96dj3Mx3RIOQPi7Uu8=
Subject key identifier: 5C:EF:70:85:61:E0:BB:5C:81:32:7B:27:D1:B8:DA:37:24:F3:EC:09
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E42AE639BFE929B9649B0A200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 22 Jun 2026 22:03:14 +0000
Certificate not after: Mon 17 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 402659
IP: 192.26.214.0/24
IP: 204.124.80.0 -- 204.124.82.255
IP: 2602:f37d::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:42:ae:63:9b:fe:92:9b:96:49:b0:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 22 22:03:14 2026 GMT
Not After : Jul 17 00:45:17 2028 GMT
Subject: CN=947fc2bd-74c8-432b-9285-0869f72e7802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:c0:29:70:1c:44:ac:49:d4:8e:26:19:62:
ed:fa:32:06:f7:05:f5:40:38:26:8b:0d:d6:19:72:
e7:43:96:83:67:8e:de:2c:62:d3:a2:95:d2:f7:a2:
c8:79:00:88:f1:95:52:eb:09:0a:bb:a4:65:66:49:
3e:59:8e:c1:2f:10:08:21:a3:f8:0d:51:34:6e:27:
6e:c8:88:b8:53:f4:f9:2e:8c:13:1b:cf:49:11:f3:
2d:cd:f9:af:99:c9:49:42:f7:cf:16:ad:49:f5:bf:
26:a3:9d:84:c8:40:8b:6a:d6:2e:a2:ba:79:f7:5e:
e2:93:64:a7:80:18:a2:db:9d:15:2e:d8:82:ee:27:
10:6b:72:71:c7:82:b6:28:e2:57:80:2b:5b:ee:7d:
18:e5:0e:1d:e9:0a:61:5a:5a:0c:b5:a3:fd:a2:94:
d3:ba:46:fe:2a:92:78:5b:ec:a5:d7:10:95:85:32:
f0:e3:9f:ae:27:d3:a4:e7:54:14:d2:35:93:fe:41:
2b:13:26:72:e7:21:29:0c:7c:f5:0d:ad:29:a2:b6:
dd:bd:fc:33:cf:22:82:9d:cd:cf:f3:e2:10:fb:de:
2d:5f:4a:2e:c7:3a:cf:f8:98:ad:a7:9d:f0:1a:ca:
9d:60:3a:ed:a2:bd:65:cb:71:62:38:3f:82:e2:cd:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:70:85:61:E0:BB:5C:81:32:7B:27:D1:B8:DA:37:24:F3:EC:09
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/947fc2bd-74c8-432b-9285-0869f72e7802/947fc2bd-74c8-432b-9285-0869f72e7802.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.26.214.0/24
204.124.80.0-204.124.82.255
IPv6:
2602:f37d::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402659
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:24:8a:ed:0e:f0:6b:79:48:1b:2c:b0:d1:cd:77:99:b6:c1:
43:b4:86:c2:8e:3e:71:2f:95:75:f1:81:bd:9d:f0:6b:95:16:
de:3c:d0:cd:5d:fe:a4:09:16:65:fa:fc:9b:af:aa:14:19:56:
c5:7a:a2:39:ae:c3:b6:08:b1:18:56:f4:42:06:b3:9f:da:ca:
46:4e:1a:95:27:77:61:3d:3f:04:b1:84:bc:38:1c:77:d4:77:
6d:a5:da:75:4f:c2:d0:3d:5e:6b:f1:3e:10:a3:f2:7a:b2:36:
9a:dc:23:c3:b6:64:9e:f1:20:59:b5:d2:29:1e:81:26:0e:4b:
27:2c:b7:96:a2:b2:5c:4e:5d:15:43:f4:cb:4b:17:39:9b:e1:
f9:90:b6:4d:f2:a0:a0:0f:17:2f:3f:fb:2e:f0:a6:a3:c2:18:
2b:fb:26:78:56:ae:eb:11:e6:f2:5c:00:36:81:0e:5e:74:1b:
59:d9:ae:75:d5:40:16:45:f3:bf:04:30:71:6c:31:fb:8f:48:
b7:e3:1f:61:90:5d:c0:36:f3:cc:9e:d2:0c:ad:98:5b:b6:26:
71:c8:59:8d:87:9c:36:40:b4:bd:8a:be:f4:82:3e:fc:15:51:
84:86:92:54:18:d9:74:b1:8b:fc:31:aa:b2:d9:66:d3:b1:70:
ad:6f:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 19:14:49 2026 by rpki-client