
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/eb1b508d-7654-4c9a-b691-39ec6c9aaa17.cer
File: eb1b508d-7654-4c9a-b691-39ec6c9aaa17.cer (raw, json)
Hash identifier: Re8Q32mNGfU9P+zKqgQpuX5PgnLIrwr+YSfmu1YSQm0=
Subject key identifier: 01:48:FB:E2:33:CA:12:61:20:B7:B4:CC:71:D7:CC:8B:34:7D:15:1E
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D89B7F443AD078A69A0EC8530
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/eb1b508d-7654-4c9a-b691-39ec6c9aaa17/eb1b508d-7654-4c9a-b691-39ec6c9aaa17.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/eb1b508d-7654-4c9a-b691-39ec6c9aaa17/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Apr 2026 15:57:58 +0000
Certificate not after: Thu 20 Jul 2028 15:57:58 +0000
Subordinate resources: AS: 10485
IP: 144.13.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:b7:f4:43:ad:07:8a:69:a0:ec:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 17 15:57:58 2026 GMT
Not After : Jul 20 15:57:58 2028 GMT
Subject: CN=eb1b508d-7654-4c9a-b691-39ec6c9aaa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:14:d6:26:50:7b:94:00:ea:e3:50:29:2c:
74:33:df:93:57:58:05:c3:fc:26:ec:3e:66:e5:7a:
ae:d8:cd:05:98:e4:42:c0:a5:8e:ae:9a:bd:70:ea:
17:89:ee:f3:24:38:c3:c1:06:b3:27:64:a4:61:5d:
3d:bd:ed:71:60:e5:a8:21:bc:b9:22:1d:d9:84:07:
2e:45:58:5c:58:69:63:2f:b6:45:86:91:49:cc:e4:
ff:03:f1:c3:b1:41:59:f1:3e:c8:c5:57:a1:bb:4a:
22:44:9f:5c:87:bc:c0:24:96:4d:3d:7a:98:3e:9f:
61:5b:cc:ed:d4:bd:19:fe:ba:95:67:7f:38:ab:e7:
28:b1:e2:f6:1b:5f:74:70:c4:6c:05:71:d3:76:c9:
a1:51:ab:dd:e9:bb:b5:50:fa:96:6a:57:27:05:6a:
45:4a:04:77:4e:50:73:3e:d6:d7:bb:44:c2:8e:8e:
91:a7:35:4d:66:81:bb:ff:c4:7c:f8:70:d2:d2:2b:
7a:59:a4:3f:9a:18:73:76:df:33:c8:b4:03:c1:4d:
b4:5f:5b:fb:9c:ac:6c:16:de:03:b8:d4:82:7b:66:
db:43:44:89:97:71:69:cc:a7:9b:09:57:72:e2:28:
75:b6:38:fb:9e:cb:73:4d:f1:8c:a7:71:93:a6:51:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:FB:E2:33:CA:12:61:20:B7:B4:CC:71:D7:CC:8B:34:7D:15:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/eb1b508d-7654-4c9a-b691-39ec6c9aaa17/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/eb1b508d-7654-4c9a-b691-39ec6c9aaa17/eb1b508d-7654-4c9a-b691-39ec6c9aaa17.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
144.13.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:0b:82:8f:36:42:5c:50:24:c4:27:7a:7b:d7:af:e8:45:f7:
c9:10:37:0d:e6:5f:b3:86:76:61:92:aa:1d:11:2c:57:3e:82:
7b:dd:40:7e:13:a3:0e:72:53:02:b5:33:6c:fa:78:e9:05:be:
54:2c:de:7a:94:35:c2:a5:e7:63:b8:4c:f9:13:8d:2a:29:d0:
ae:4b:e5:71:f4:bd:37:59:29:72:d9:f4:23:e8:53:00:4b:4d:
91:10:ae:16:7d:e8:21:b8:17:48:71:2a:f7:4a:8b:9a:bb:6d:
bc:a3:8c:bc:c3:7e:11:1b:48:94:dd:1c:2c:7c:b7:44:ee:14:
4e:f6:29:84:ca:a0:3c:49:66:6d:f1:eb:6e:48:d1:13:54:e9:
28:6a:0a:3f:7d:79:58:5a:7a:73:4f:e8:c4:c2:e4:f9:ef:32:
a5:cf:4f:82:5a:31:72:6d:28:df:e3:72:20:40:e0:19:ff:6f:
b3:5e:c2:9f:f8:37:8c:ba:e9:27:0f:00:e8:d3:31:f5:d9:af:
43:3a:8e:7c:ac:b2:15:21:51:e8:8c:3f:0b:d7:2a:b5:12:65:
c1:e8:8f:4e:b1:db:44:2e:55:f8:fe:c5:5f:74:31:93:82:4f:
4e:79:56:cc:4d:db:89:5e:39:c7:9a:85:56:ee:1d:1d:36:d1:
f0:57:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:13:12 2026 by rpki-client