
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82.cer
File: 9030418a-18ab-40d5-a327-337add5a0b82.cer (raw, json)
Hash identifier: TXH37gqNP9lNB2sfaTl9gC8fa1JF3G/iZKIZCJvBxGo=
Subject key identifier: 7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F909B86FA250C1D63FE937520
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 20 Oct 2026 12:45:13 +0000
Certificate not after: Mon 22 Jan 2029 13:45:13 +0000
Subordinate resources: IP: 23.141.156.0/24
IP: 2602:f5e1::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:9b:86:fa:25:0c:1d:63:fe:93:75:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 20 12:45:13 2026 GMT
Not After : Jan 22 13:45:13 2029 GMT
Subject: CN=9030418a-18ab-40d5-a327-337add5a0b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:43:13:f6:94:cb:50:0a:5b:e6:24:a0:a8:
b1:e3:ed:33:12:bd:fd:a0:24:b4:20:9c:02:2e:9d:
a1:a9:f0:51:11:8f:3a:c1:73:f5:9f:f2:74:16:a8:
c5:7f:ba:d6:bb:4a:20:a0:6b:0c:6c:33:b4:5c:89:
d0:11:8f:52:4f:0d:f5:d8:43:28:da:97:ea:b4:3b:
c5:1e:cd:6e:00:6e:a6:7d:34:dc:cc:b1:40:99:33:
69:75:0a:fc:d1:d3:09:ee:bd:bf:03:ee:ac:25:98:
10:ba:90:e3:ff:8e:13:3f:e2:9b:b0:81:c0:fc:59:
f5:9a:d4:89:46:89:af:9a:8a:4d:23:d5:fc:4e:b0:
5f:c1:9a:de:7f:b1:0d:18:64:d5:7d:c5:1f:b4:47:
32:a9:7f:db:60:55:14:4c:32:e3:d4:1e:98:d4:d2:
de:79:c4:f9:37:99:8b:ef:db:33:30:d8:fc:a7:da:
bf:3d:7a:01:3d:f7:74:ae:bc:0c:d5:39:8a:19:b9:
8c:ef:e5:74:90:4b:53:8f:06:f9:6d:b4:e3:fd:2e:
d2:52:2d:dc:ce:e1:39:92:58:c5:50:81:f5:54:bd:
a3:1e:3a:f4:96:17:30:11:27:e6:3f:59:31:f3:20:
55:b2:4f:aa:83:cf:27:91:09:53:55:a1:3e:a8:d2:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.156.0/24
IPv6:
2602:f5e1::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:43:bf:63:72:60:eb:a7:5a:a2:83:cc:5d:2d:c3:58:10:fb:
c1:a6:8b:37:d7:55:e5:09:34:01:57:65:f3:96:96:a6:17:ed:
04:bb:00:8d:71:22:b0:8c:f8:11:38:64:ca:be:f8:d2:7e:a8:
e3:98:71:46:56:07:cb:3d:6d:fd:c1:5d:b8:87:d8:b8:86:21:
89:2b:e9:fc:78:27:7a:0c:f6:5e:54:8a:a2:11:31:ed:d4:95:
57:a9:d5:b4:6e:13:79:40:b6:b5:89:84:13:82:96:ae:3d:fc:
03:7a:f5:49:21:63:47:88:07:5f:12:20:95:de:66:ea:af:4d:
32:79:cb:b6:cb:20:77:6c:a0:0d:8f:4c:81:5c:85:c8:57:c8:
2b:fd:11:61:c1:1e:1f:82:a9:89:dc:ab:1c:ce:6d:4c:e8:30:
4e:4f:8a:3d:0d:b2:e6:c5:85:ca:87:42:52:94:9f:49:a1:96:
fa:57:33:51:fc:f7:16:61:32:1e:23:57:c6:68:df:0b:78:0b:
35:2f:df:ad:b7:e7:58:4e:d8:aa:97:a3:d9:37:32:fa:57:8f:
b0:98:8b:70:41:24:e1:7a:2b:66:78:8a:bc:50:bf:64:7b:63:
37:01:18:57:4d:22:e2:b7:ff:df:07:fc:bc:b8:d8:75:ed:23:
ed:83:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:42:18 2026 by rpki-client