
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01.cer
File: 3f21d6d0-2d09-4711-b420-9646c9d81c01.cer (raw, json)
Hash identifier: 35vdGktKE1/ozS3g1WvahOSlT135565t/J9icNK5dDM=
Subject key identifier: C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CEABD5BFD037B7F5023E30700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 19 Feb 2026 17:15:20 +0000
Certificate not after: Wed 03 May 2028 02:05:03 +0000
Subordinate resources: AS: 16871
IP: 206.130.65.0/24
IP: 2602:f451::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:bd:5b:fd:03:7b:7f:50:23:e3:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 19 17:15:20 2026 GMT
Not After : May 3 02:05:03 2028 GMT
Subject: CN=3f21d6d0-2d09-4711-b420-9646c9d81c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:4f:6d:7f:a1:24:a3:df:13:ee:f3:25:ef:
7b:79:9c:76:95:13:2c:84:e5:5f:b9:2d:8e:3b:96:
c3:8f:ba:a3:2b:c9:68:6e:17:b9:dd:5f:52:8e:d8:
ac:58:13:cb:d7:c5:21:1a:b2:7c:bb:5f:c4:ab:a6:
9a:c0:7b:78:58:df:1d:57:1c:86:91:8a:92:6a:16:
45:db:61:85:d4:df:92:f3:82:ad:7f:cb:c3:42:11:
95:8b:e2:92:df:0d:33:1d:09:38:e5:bc:3a:22:fb:
05:3f:a4:b6:fa:da:c9:05:7c:dd:4e:74:3f:d2:52:
a6:77:67:d9:c3:1d:41:67:4f:23:40:5b:fb:e4:7e:
b3:21:7d:52:5f:22:40:69:b7:fc:a3:78:77:f0:39:
60:71:a4:ec:3b:04:92:b8:00:0f:51:e6:64:81:8e:
b3:97:9b:e2:25:49:4d:d3:cb:e2:d0:aa:d6:b3:9b:
f4:6a:c2:42:e3:f4:88:c8:46:b1:bb:7a:8c:a3:9b:
6f:d3:5b:68:f1:2d:f4:ea:68:47:69:b9:2d:da:4a:
09:7f:fe:19:83:14:89:50:0d:e4:73:ee:2a:df:bd:
88:ed:8e:72:83:fa:1b:57:b5:61:f0:92:20:dc:8f:
fe:b1:7d:36:0b:85:b8:e0:12:f1:2c:c2:75:1c:6f:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:B2:A7:41:26:3A:24:AD:6E:04:29:07:3B:66:E5:2C:8C:93:B2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3f21d6d0-2d09-4711-b420-9646c9d81c01/3f21d6d0-2d09-4711-b420-9646c9d81c01.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.65.0/24
IPv6:
2602:f451::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16871
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:bf:2d:9c:90:a9:bd:fc:45:66:49:10:44:eb:8a:a8:d8:6f:
24:9f:ea:48:67:5e:06:c6:a5:0c:77:39:f8:cc:a7:bf:10:ae:
c6:cf:7f:df:7f:82:a7:ea:f2:71:1c:b8:ef:0d:8b:c6:94:5b:
5c:5e:39:22:f0:27:eb:07:c2:d1:da:4e:d8:7a:0d:67:05:ca:
23:20:41:cc:6b:75:7b:1a:49:7a:5c:9c:af:77:f1:f5:23:9a:
4c:a9:5f:df:e3:80:b4:21:e3:9e:a6:b3:4f:cb:72:b1:4b:d9:
c7:37:32:1b:28:1f:48:1c:9c:73:a9:c6:fb:8b:75:46:b8:34:
ed:7b:f4:d7:94:45:2a:ac:74:3e:c7:92:93:05:5e:3c:14:7b:
41:2a:a3:bd:71:fd:5f:2d:75:c3:44:d4:d9:6d:c9:0f:7b:8c:
c8:40:02:dc:d5:fc:6a:93:b7:bf:4e:3a:ac:d4:8b:07:59:22:
2b:3b:c6:1c:3e:4c:e5:8a:18:a5:57:56:50:52:e6:b0:4e:a9:
c0:ac:81:4f:e8:b9:fc:23:29:d6:f1:8a:5a:26:3e:85:33:87:
93:53:79:d6:69:42:f1:3f:4e:3e:44:e0:cf:da:66:38:0b:7f:
e0:d8:e9:59:36:e2:e4:93:ac:13:f2:86:b5:3b:ca:d3:b4:e9:
c6:64:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:21:07 2026 by rpki-client