
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer
File: dec2e862-2539-4fd7-a8e3-0930c1d95215.cer (raw, json)
Hash identifier: M/oEKkJQ7b1VVQc2aFyzha6drL3BoApu6FZ06nI8Z+A=
Subject key identifier: 74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584E5AF0B3102DF24B7CB80DB980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 14:36:15 +0000
Certificate not after: Wed 10 Nov 2027 14:48:32 +0000
Subordinate resources: IP: 23.143.140.0/24
IP: 207.174.112.0/24
IP: 2602:f5ab::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:f0:b3:10:2d:f2:4b:7c:b8:0d:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Jul 1 14:36:15 2026 GMT
Not After : Nov 10 14:48:32 2027 GMT
Subject: CN=dec2e862-2539-4fd7-a8e3-0930c1d95215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:1d:87:87:3d:63:a8:a6:3a:7d:7a:a5:df:
46:96:ef:c3:f0:46:33:d6:77:ea:56:6d:b2:c3:64:
c1:52:36:7d:81:07:77:b8:ac:95:fc:a5:99:b0:e4:
03:c3:a6:22:c1:ec:c5:cb:40:21:63:d4:a9:5b:14:
d9:1a:7c:d4:54:90:31:13:d6:53:1d:cc:00:e8:db:
2e:4d:6a:4c:60:a3:e2:9c:cb:54:51:b8:fd:e3:d2:
b1:3a:30:39:0f:d8:ca:ad:0b:8b:d8:5b:3f:02:88:
9d:a4:f0:1e:28:3e:07:cd:ce:6b:73:3d:94:79:e7:
3a:b1:92:d4:39:bf:af:9d:ad:ec:5b:b1:dd:e3:30:
d5:b0:08:99:70:87:34:90:17:59:f9:5a:b4:a7:f3:
c3:72:8a:52:95:84:95:b8:3e:c7:0a:1f:0b:09:c5:
49:1f:1d:48:4a:7c:87:c9:62:40:43:e8:36:3c:2f:
85:03:21:75:bf:47:f2:ea:82:e6:1d:18:a8:5f:a1:
38:1f:f7:b1:4f:33:c1:37:e4:57:78:e3:cf:25:42:
18:3f:35:a1:52:d3:0b:31:f2:04:57:43:2c:60:f2:
5c:75:de:97:df:ec:6e:8f:9a:76:f1:44:c9:2c:0c:
54:cb:e8:56:83:d4:cd:c3:b0:90:5c:6d:67:50:28:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.140.0/24
207.174.112.0/24
IPv6:
2602:f5ab::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:50:62:6b:20:f4:fd:30:9c:77:13:9f:14:5c:76:72:7e:00:
11:ec:7b:70:01:69:a4:76:36:84:0b:22:06:61:d0:8e:ec:6a:
f4:a1:f2:95:a9:d0:f0:e4:d3:78:91:e8:2e:42:0d:46:2b:5b:
e3:f0:4f:e0:69:84:30:d3:58:e4:7e:cf:99:91:2c:61:45:d4:
16:17:51:97:aa:2b:10:99:94:df:a5:f6:bc:ce:16:22:16:b7:
d5:c6:26:73:e6:10:3a:1c:c9:9a:3b:1f:c9:1b:ee:13:5c:a7:
57:93:5f:2c:7a:03:d3:d9:4e:f9:31:f0:11:4b:1f:7a:a4:2a:
db:da:fd:0b:c7:cc:c0:db:f0:e0:fc:98:01:e7:95:77:d7:ee:
08:80:08:02:c4:8d:e3:f0:30:34:12:58:a6:85:91:80:3b:38:
81:48:4f:8a:e7:ac:24:f2:d2:2d:77:4e:96:6b:ce:8f:00:a1:
8b:ac:fe:8c:ef:6b:ed:a4:51:f6:4d:8e:4c:a8:f7:0e:ea:f7:
98:89:9e:48:02:7a:fd:d8:68:f3:ae:0d:f7:f0:46:a8:23:32:
11:19:44:25:01:15:9c:30:85:79:d7:4c:f3:08:2e:d2:b2:3c:
03:d2:e2:87:6c:73:1d:a5:80:f2:b2:20:4b:40:f4:08:b5:89:
7d:f9:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:43 2026 by rpki-client