
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6.cer
File: b0596e56-daf6-425b-bbe9-bdf27d5ab6d6.cer (raw, json)
Hash identifier: PvDvO4SZxd638HD8qM0JU6nUvlUKdhrUiupPELZ6IwM=
Subject key identifier: 7D:49:DE:07:3E:B8:2D:7D:89:44:7A:63:42:48:A9:02:88:B1:1D:1B
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F5FAC36CCBE245E4EB7EFCA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 03 Oct 2026 00:04:14 +0000
Certificate not after: Fri 05 Jan 2029 01:04:14 +0000
Subordinate resources: AS: 27015
IP: 198.60.228.0/22
IP: 199.38.52.0/22
IP: 2620:d2:4000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:ac:36:cc:be:24:5e:4e:b7:ef:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 3 00:04:14 2026 GMT
Not After : Jan 5 01:04:14 2029 GMT
Subject: CN=b0596e56-daf6-425b-bbe9-bdf27d5ab6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:bf:87:93:cf:89:25:95:20:5c:fb:ef:45:
ac:93:e3:5e:3f:4a:7a:ac:78:11:11:b5:a5:c7:70:
bb:b7:8c:b6:40:f5:4d:44:be:99:bb:da:d9:6c:6d:
d5:5d:bf:76:90:f1:44:10:0a:f1:55:ef:2a:b4:83:
fc:d4:2d:8a:91:56:ba:af:7c:b5:36:a0:58:8b:10:
97:de:7d:20:eb:2c:7f:27:52:4c:15:15:3f:f8:39:
df:e6:e2:a4:80:0f:96:74:aa:95:60:8a:ba:2b:04:
a5:94:6e:f2:97:bd:54:b2:b9:23:73:28:d4:fc:bb:
11:34:29:e9:a3:14:53:d0:18:58:1f:12:f9:34:d1:
d1:00:76:4c:6f:c7:c8:8f:82:8c:a5:72:01:e9:c2:
05:ed:45:ea:e6:9d:7d:8c:e4:40:2d:58:fe:86:7d:
11:98:9b:1e:55:97:a2:6e:a1:2e:aa:f5:8d:c5:1c:
e7:7d:3e:e7:20:2a:5e:02:13:7d:81:ca:45:c1:d7:
99:b2:45:cd:26:59:e1:ec:99:eb:e6:86:1e:f6:bd:
70:7c:bb:95:4a:b5:0f:86:ce:dd:ca:93:58:9d:1a:
dc:c6:02:42:43:d2:b8:49:0d:16:e8:cd:ce:a9:63:
a9:ec:30:b2:0f:fc:08:81:83:01:cf:b9:7f:1d:27:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:DE:07:3E:B8:2D:7D:89:44:7A:63:42:48:A9:02:88:B1:1D:1B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6/b0596e56-daf6-425b-bbe9-bdf27d5ab6d6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.228.0/22
199.38.52.0/22
IPv6:
2620:d2:4000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27015
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:31:7f:c6:1d:c6:ca:75:70:b4:9f:24:59:cf:11:0c:01:17:
e8:1f:55:0e:b2:4a:ca:7b:76:5f:83:a5:ad:37:82:bf:f0:ae:
c5:11:c8:ab:2e:df:e9:c9:8a:72:96:2b:b2:6f:1e:b0:57:64:
5b:69:d1:76:bd:24:b4:10:4d:c8:10:6e:d2:64:a7:e8:f1:34:
13:2d:46:a9:1d:4d:a3:61:9c:1b:5f:96:df:a3:d3:b4:5f:cc:
1d:91:50:b4:9d:40:99:93:1d:71:ba:f0:77:da:3b:ef:61:5d:
20:a1:c1:3e:eb:68:08:81:aa:be:47:43:96:82:18:a7:eb:8a:
c3:9c:0f:d5:7e:bf:57:81:08:c4:b0:bd:7a:c2:f9:6d:c9:82:
5f:61:cf:a1:6a:db:35:6e:82:13:ff:d9:59:8a:a4:8f:17:41:
11:e1:45:ec:cd:d9:95:b1:31:85:3e:a6:09:d0:8c:35:6a:d2:
d1:0f:3e:ee:42:98:9a:45:77:29:63:16:fa:73:49:47:87:47:
35:6f:33:34:6e:14:92:f7:79:39:dc:60:77:98:6c:bc:8c:74:
fc:11:67:3f:37:bd:c7:2d:df:72:ff:bd:b4:bb:a9:ba:54:b5:
42:3d:d3:c4:87:d2:73:02:37:64:68:59:bb:e6:63:a1:2a:cc:
6d:4b:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:20:05 2026 by rpki-client