
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer
File: 36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer (raw, json)
Hash identifier: iA1EBD05mbK+vplYrJKiPogmgjqw7XH5VsRmN5WM178=
Subject key identifier: 4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584EE0BA6AB3E8DE12785AA81E54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Aug 2026 12:45:11 +0000
Certificate not after: Mon 20 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 398876
IP: 2602:f5d9::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:ba:6a:b3:e8:de:12:78:5a:a8:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Aug 18 12:45:11 2026 GMT
Not After : Nov 20 13:45:11 2028 GMT
Subject: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:c7:76:1c:01:a2:de:f2:7c:7e:03:8d:76:
02:d1:07:17:b8:8c:c2:f2:91:31:87:76:8a:09:89:
94:db:39:ab:ee:d1:cd:9f:88:e6:57:27:b9:00:48:
19:30:ae:ea:50:43:d7:75:c9:01:15:2a:79:5e:1e:
e4:49:18:f7:a7:d8:01:c9:20:e1:e1:79:6a:a0:d9:
b7:43:ff:40:8e:0b:38:63:6b:d6:57:77:24:6f:3e:
ee:12:38:80:c8:25:c3:ad:de:70:c7:b8:9d:11:df:
58:3d:4c:b0:16:05:dd:c8:fe:48:6c:39:dc:14:8e:
85:1f:04:74:d6:aa:77:32:bf:fb:1b:c7:1b:1c:db:
0b:de:89:4a:19:0d:27:0d:7f:0a:4b:ff:d4:37:8a:
26:4e:b1:a0:74:91:c0:70:9d:1c:e3:42:36:4e:7b:
51:42:62:0b:6d:46:c5:5b:c7:63:19:b2:ef:5e:38:
3a:e5:f0:3b:20:17:26:ae:4b:94:e2:1f:0a:0f:df:
ee:f2:e9:01:46:0f:23:f7:dd:c1:61:f4:42:b1:d1:
bc:77:af:fa:01:d5:d0:ae:41:40:14:97:e0:e0:76:
20:78:40:e0:51:03:09:9f:f1:92:22:d3:82:e0:7a:
38:9e:e5:26:2d:d3:08:35:e7:a9:db:88:51:dc:fa:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f5d9::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398876
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:ca:e4:6d:aa:54:58:07:3a:97:2a:4f:a5:55:b2:9a:4f:5c:
25:93:77:e5:19:ea:a4:00:e9:40:fe:5d:36:79:7a:78:0d:f6:
8f:ad:37:18:46:df:bf:92:91:05:a9:81:a9:84:6a:0f:ed:24:
52:d7:a9:d7:58:7a:e6:a9:d7:c9:ae:1b:c4:93:04:0b:c2:63:
87:51:75:e8:96:fc:9c:b3:30:9a:b0:3e:11:48:f5:64:6d:48:
6d:81:50:ce:01:b5:15:6d:6a:1d:39:1e:dc:fd:ca:92:c6:45:
0a:77:0c:b5:e0:72:65:aa:9d:8a:b0:0a:f0:8f:c1:d8:fc:5a:
a0:e0:ac:91:6a:77:5e:36:95:df:cf:5a:0e:3b:f4:46:8f:e0:
ed:88:83:0d:c6:77:43:26:cc:15:bf:2e:6f:53:f2:90:b2:12:
32:a9:0b:c8:6f:b0:d9:e4:58:67:3e:f1:1a:61:7d:72:c8:96:
03:9e:b9:e0:5c:90:f6:f0:e1:31:f3:23:0c:28:c3:12:39:5c:
9c:51:7e:85:90:28:1b:b6:62:d3:87:b7:e1:af:57:1d:3e:b9:
6d:c8:a9:41:6c:87:f1:38:1a:69:3e:51:2c:2a:7e:e8:af:4b:
c8:5b:aa:1c:f0:51:44:b9:63:82:d9:a6:24:46:ba:3d:a2:67:
d8:2a:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:33:46 2026 by rpki-client