
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer
File: d648fae7-947d-4ab0-9d26-c1da38e440ef.cer (raw, json)
Hash identifier: O6UmH7nnCz2j5pwrZRGS7blTgl25gZX9S8/QAqoKIFs=
Subject key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E34923C2AD0E593BE8D6A9340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 17 Jun 2026 20:45:11 +0000
Certificate not after: Tue 19 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 400033
IP: 172.82.104.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:34:92:3c:2a:d0:e5:93:be:8d:6a:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 17 20:45:11 2026 GMT
Not After : Sep 19 20:45:11 2028 GMT
Subject: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:1b:e5:67:ad:36:1d:e2:ef:39:e3:d9:47:
97:c9:3d:fe:6c:19:32:27:27:84:82:ac:b4:08:6a:
2f:01:bb:ed:40:5d:69:22:95:87:75:09:48:9d:7b:
c7:0c:ec:c7:62:72:69:4c:86:57:f2:12:25:45:67:
05:cf:65:e7:67:84:92:b0:88:b1:3b:5a:d0:bf:37:
e2:0b:f1:01:5e:43:9d:55:5b:00:5c:6a:33:f3:ad:
41:a0:44:5c:dc:c0:3b:d7:48:ee:e5:5e:c2:76:57:
fa:44:50:d7:39:f9:ad:93:fe:74:ec:2d:63:01:fb:
78:a9:38:0f:55:9e:75:0e:84:e3:fd:a8:47:28:eb:
81:99:e4:bd:48:de:f8:30:fc:2d:43:b1:1c:0a:bf:
0e:dd:d0:d2:af:f2:9c:1a:48:69:b6:96:26:05:cc:
23:68:fb:55:32:98:07:af:07:62:01:31:e0:e5:59:
16:7d:e8:43:d0:af:89:7c:85:38:3c:a4:84:dd:1e:
82:6d:d1:2c:76:7c:c7:d3:64:4f:08:27:b7:b2:9a:
3b:88:1e:6f:17:3b:41:c7:41:df:86:ef:5e:fc:39:
1b:c8:94:c3:29:28:69:38:52:f5:02:4d:a1:37:4f:
2c:ca:de:dc:f5:c4:38:a6:b0:4c:0e:9b:e2:11:21:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.104.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400033
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:99:50:a0:27:14:26:cf:c3:86:a8:8a:50:98:85:d5:bb:21:
48:de:7b:63:2d:3d:bf:9d:1f:42:3d:00:a2:74:1e:c8:99:0f:
5a:f2:93:1e:27:b4:3d:fe:51:39:bc:f4:b1:b5:49:df:17:0b:
23:6c:25:13:91:77:54:55:66:aa:8d:35:03:9c:e8:40:52:07:
67:37:cf:01:7f:10:35:cd:bf:88:0e:85:a7:7e:86:d7:c4:b6:
12:b5:ae:d9:d3:cd:f7:07:d9:7b:93:7e:c7:a1:35:90:5d:d6:
28:f0:21:fa:27:1b:4c:f2:74:9e:24:3c:60:bc:6f:ea:9b:3b:
1c:c2:8e:ac:c5:4f:25:e3:64:80:38:68:f5:93:ea:b6:64:0c:
25:a9:ec:79:85:01:ed:fb:8e:1f:7a:cb:4d:e7:90:94:08:a2:
dd:4c:7e:56:b7:d1:5f:f7:84:8b:32:23:f9:42:bf:ea:f4:c3:
8d:e4:32:c4:8a:6a:f4:8d:e4:94:12:cd:85:61:0d:f5:eb:0b:
af:80:26:c8:3f:fa:e1:4a:f3:2e:07:de:4a:53:ae:e0:b8:b1:
ba:92:45:93:19:6c:49:56:91:7f:91:39:93:02:2f:4c:f6:dd:
fc:6c:ec:d7:12:57:1c:89:82:e7:1d:77:5e:dc:da:cb:ac:51:
70:4e:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:22:52 2026 by rpki-client