
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd.cer
File: 036ec135-26c9-463e-9dac-65b2c44082cd.cer (raw, json)
Hash identifier: QHRBBCkdUky2wA2AejDxs5XdJgxdN6IMDIyxyrPCTvs=
Subject key identifier: C1:22:08:8D:54:FF:DA:C4:AF:B3:2D:4D:C1:43:D5:F6:22:30:DD:AD
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584E1E4670710BBDDFEF84DD7FC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/036ec135-26c9-463e-9dac-65b2c44082cd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 09 Jun 2026 21:04:41 +0000
Certificate not after: Mon 11 Sep 2028 21:04:41 +0000
Subordinate resources: IP: 198.246.176.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:46:70:71:0b:bd:df:ef:84:dd:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jun 9 21:04:41 2026 GMT
Not After : Sep 11 21:04:41 2028 GMT
Subject: CN=036ec135-26c9-463e-9dac-65b2c44082cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8f:79:7c:21:2c:56:bb:9d:ed:b0:ac:60:2c:
01:0f:02:a4:76:e1:60:42:b0:ac:58:71:b5:b1:af:
17:23:b6:e9:5e:2b:2e:23:64:5f:bb:01:dd:22:9a:
fd:14:37:72:f4:a8:97:bc:36:a8:b7:f6:37:0f:61:
7d:1f:34:47:30:b3:91:3e:1c:d5:7f:02:51:57:22:
60:59:98:52:33:80:49:7e:ce:a6:71:7c:15:8c:df:
b6:9f:62:d2:2e:97:5a:0a:bc:f6:12:c6:a9:7f:e2:
22:0e:42:73:ca:72:e1:02:8e:21:01:15:44:1f:7b:
f7:e0:43:61:4f:5a:13:43:6c:bc:3b:b1:26:d1:ae:
cc:1f:27:f0:82:b9:61:d2:75:11:83:80:ca:8c:2c:
af:57:8c:7c:f0:d1:b2:41:d8:f3:d6:e2:b7:eb:44:
c6:8b:f1:78:8a:f0:46:b9:61:7a:f8:a8:55:31:2e:
01:b9:46:55:be:5f:73:68:89:cd:c8:86:89:03:ec:
88:33:1d:59:03:0d:42:d3:02:54:c5:77:17:e9:4a:
5c:e1:29:c3:fa:14:4b:73:1d:ca:6b:97:8b:d8:60:
b4:a5:00:4d:15:21:70:84:b0:55:43:62:3b:c7:47:
e1:c4:18:75:10:f6:2c:10:dd:7b:1f:ea:c5:b3:cd:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:08:8D:54:FF:DA:C4:AF:B3:2D:4D:C1:43:D5:F6:22:30:DD:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/036ec135-26c9-463e-9dac-65b2c44082cd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.246.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:93:2c:67:52:24:09:32:5b:b8:a2:e5:96:bb:0d:1f:85:82:
1b:b6:42:33:1b:a3:5e:67:5c:23:ef:d2:c2:4f:f6:4b:45:b0:
f9:20:4f:a4:38:e2:7e:ba:f0:cb:0d:56:7c:67:1b:18:7f:3a:
a4:3a:22:74:02:eb:6b:90:e5:e3:9e:3e:cb:9c:96:05:57:de:
07:dc:83:16:b4:24:df:aa:f9:0d:c0:01:66:3b:77:3c:04:b8:
16:6c:87:c1:7f:a2:2d:3b:e7:ba:fa:ac:3c:85:bb:4e:cf:5c:
e3:20:1c:e5:82:a2:25:0d:42:5d:5e:dd:78:38:61:49:84:71:
6c:9b:8c:7c:57:5e:80:73:94:af:18:cc:e2:ab:f5:da:04:6f:
8e:47:6c:56:88:b6:13:a6:1a:a4:e4:9f:88:87:70:c7:df:ba:
0c:bf:82:d2:af:44:b1:47:99:3a:c2:3b:21:a3:b3:88:46:65:
84:bc:df:ed:16:f7:3e:d7:8a:db:7a:23:46:60:7b:8b:22:5c:
47:c1:70:3c:01:25:97:7e:f5:0c:14:41:fb:68:4d:29:eb:e5:
f3:1c:31:73:a3:53:60:b9:a2:ea:ba:6a:c2:56:05:53:69:ce:
24:5f:94:a8:dd:9a:4a:1d:0a:25:7d:5e:4a:16:f0:3e:68:75:
15:dd:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:34 2026 by rpki-client