
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
File: df942add-d6be-4a15-ae72-38bdca0242c4.cer (raw, json)
Hash identifier: EVyGvBuV05++CWAvCjNuXj/xX9aY2k2iehN5jGaFKMY=
Subject key identifier: 8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD9EF9FF0D96A0ED76DEC0600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 13 Feb 2026 16:47:52 +0000
Certificate not after: Thu 18 May 2028 15:47:52 +0000
Subordinate resources: AS: 393434
IP: 23.164.224.0/24
IP: 45.45.164.0/22
IP: 172.83.206.0/24
IP: 207.32.220.0/22
IP: 2602:fe41::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:ef:9f:f0:d9:6a:0e:d7:6d:ec:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 13 16:47:52 2026 GMT
Not After : May 18 15:47:52 2028 GMT
Subject: CN=df942add-d6be-4a15-ae72-38bdca0242c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:5c:87:bb:4f:b3:f5:2e:b1:78:86:79:9f:
3d:bc:eb:6e:42:ab:a5:04:79:3d:fe:92:fb:27:1a:
23:c8:1c:12:0e:de:a2:9e:2e:70:d0:47:2c:e8:63:
5f:c6:79:b4:56:9b:f1:81:0a:0e:69:a0:8a:53:92:
55:6f:ca:ca:db:40:41:92:d5:99:70:75:d1:85:0f:
dd:af:b3:9a:a1:39:55:1e:53:1e:4b:bb:d2:8c:b2:
70:d2:dc:99:de:4a:47:3d:81:9b:0f:ac:12:62:b2:
30:11:bb:23:2d:0b:2f:4f:e3:29:c7:8b:8e:e9:8f:
68:9c:e2:bd:b4:d3:c4:e8:f0:89:fe:22:40:c9:28:
06:31:bf:b2:c6:dd:4a:1e:bc:2c:8a:fd:8d:87:fd:
f9:1c:a3:ac:f3:fc:d4:d3:e0:6a:9f:27:aa:3a:f0:
ce:3b:76:ca:4d:45:88:e6:b0:ce:55:c0:55:7f:a4:
ee:05:07:6c:b0:a6:a9:b0:9a:c9:bf:e3:be:4f:8c:
62:60:a5:fc:66:94:15:af:c1:bc:fa:79:1d:98:c5:
77:d5:80:34:dd:5b:87:46:0a:1e:71:79:3b:da:fd:
bc:c2:e7:50:a5:a6:15:73:51:53:93:0d:a3:ae:16:
e7:d8:34:6c:27:00:c1:f4:44:24:af:6f:7a:b4:76:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.224.0/24
45.45.164.0/22
172.83.206.0/24
207.32.220.0/22
IPv6:
2602:fe41::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393434
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:10:d1:75:05:11:94:4a:3f:d6:50:6b:55:f5:d4:e0:86:db:
27:60:58:02:19:c0:f2:f5:07:4b:08:2d:b0:90:b4:8e:27:28:
41:c4:78:eb:f0:20:ed:1d:a1:85:f2:c0:3d:cb:7d:6e:73:bd:
e2:13:69:2a:93:44:40:f1:35:a1:c2:77:12:ac:13:7c:62:ad:
a3:c8:41:10:06:ed:4e:a2:4e:c3:23:45:57:3e:79:cb:75:d7:
fb:9b:a0:bc:c3:14:3b:03:0e:c0:5d:89:5f:7d:cf:e2:e4:fa:
e3:92:26:7b:ce:05:17:2a:2f:72:e9:8e:cd:d2:6c:a0:b6:af:
58:f9:34:08:97:43:22:ec:5d:9e:7b:d6:24:68:ec:bc:27:83:
8c:50:8e:c1:23:88:21:81:fb:25:38:92:b9:21:27:c7:73:f8:
b1:ec:87:48:e3:b6:2c:b9:b1:41:15:53:f2:3c:10:96:c4:94:
97:0d:87:e1:ea:a9:63:22:db:1a:9d:6c:e1:e5:0b:eb:08:d2:
46:2e:35:56:e3:e7:4d:8a:4b:b8:e0:e7:3d:54:da:3b:79:6a:
61:f1:dc:7f:d9:b3:47:25:4c:da:04:3f:c9:aa:1f:c5:33:69:
7b:06:ad:c8:00:b5:df:f3:11:08:c7:40:37:f6:9a:ef:62:7b:
97:53:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:18:13 2026 by rpki-client