
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ae66f530-6be4-4393-b9d8-3050edd53950.cer
File: ae66f530-6be4-4393-b9d8-3050edd53950.cer (raw, json)
Hash identifier: vQ+wGdpLOFMw4V+WRkQPPehRjQzmMsSwS+Qs/2NZQg0=
Subject key identifier: EF:B0:CD:2F:8A:B5:69:57:95:B6:17:06:3D:45:0D:07:F6:AF:97:57
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial: 010D0C9F4328584F17ED36EE3F414E6C8E500330
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ae66f530-6be4-4393-b9d8-3050edd53950/ae66f530-6be4-4393-b9d8-3050edd53950.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ae66f530-6be4-4393-b9d8-3050edd53950/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 07 Sep 2026 07:17:00 +0000
Certificate not after: Sun 10 Dec 2028 08:17:00 +0000
Subordinate resources: AS: 26685
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:17:ed:36:ee:3f:41:4e:6c:8e:50:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Validity
Not Before: Sep 7 07:17:00 2026 GMT
Not After : Dec 10 08:17:00 2028 GMT
Subject: CN=ae66f530-6be4-4393-b9d8-3050edd53950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:85:4b:08:8b:c7:18:6a:20:1c:fe:24:58:
c1:7c:63:5f:ee:13:61:9a:be:3b:68:75:9e:f9:39:
10:9c:53:43:bc:df:43:78:87:72:8e:8e:f8:f0:00:
8d:be:54:4d:35:10:c4:ec:28:d1:45:67:92:80:31:
40:5d:f3:27:24:15:fa:3b:41:c5:08:2b:ac:80:86:
5a:21:87:d5:61:83:62:03:fe:1d:4a:e5:1d:35:0a:
c2:09:21:25:6c:21:49:32:5f:2c:5e:64:90:4f:ec:
53:8a:19:65:64:7e:44:18:5e:2a:33:a1:d2:de:2e:
60:68:1d:de:39:89:73:33:29:cc:af:23:43:c7:ff:
dd:99:ce:4d:e1:aa:6c:cc:5b:42:a6:12:76:c0:9d:
be:ca:4d:3f:12:ae:ef:39:47:1c:68:39:46:54:75:
0e:7a:1c:80:4b:b1:66:76:1f:b9:6d:10:e8:cb:c4:
a2:af:93:fd:4e:e6:d6:30:89:79:ae:fb:86:a6:4a:
cc:5a:be:e4:7f:49:7f:48:2e:5b:06:e5:e6:bb:e5:
c2:ce:19:71:73:b7:d7:ba:5b:27:ce:dc:d6:4b:4c:
ee:57:e0:31:50:7f:97:3a:ab:d7:a8:95:dd:e9:4f:
06:43:00:16:6a:17:79:20:17:be:91:3f:38:6e:41:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B0:CD:2F:8A:B5:69:57:95:B6:17:06:3D:45:0D:07:F6:AF:97:57
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ae66f530-6be4-4393-b9d8-3050edd53950/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ae66f530-6be4-4393-b9d8-3050edd53950/ae66f530-6be4-4393-b9d8-3050edd53950.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
X509v3 Authority Key Identifier:
keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26685
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:be:e7:8b:81:86:5c:46:a4:a8:0f:f1:00:f5:66:5a:01:8a:
3e:be:1c:6f:4b:b1:96:9c:dd:05:e8:86:17:48:04:d8:5f:ee:
2a:02:76:3d:2d:e6:1a:ad:16:fb:59:ce:bf:5d:ee:47:88:09:
e2:65:a4:5b:fd:af:7d:e5:73:61:d1:01:8b:52:15:b0:ca:d8:
da:cf:a6:0f:69:47:31:26:df:b6:11:fc:54:37:c2:02:16:3b:
f2:47:49:4c:0f:ff:b1:9a:7d:66:4a:20:ff:0f:a3:f8:15:77:
55:e2:28:34:17:9a:cf:15:20:d3:01:a6:b4:20:00:1f:22:39:
c5:02:88:2e:cb:ae:10:b1:37:bc:0b:ca:10:01:72:6b:14:7f:
1d:f8:20:20:9d:71:cb:63:75:9f:98:9d:1a:b8:1f:7f:07:c7:
c8:c0:99:13:14:c0:31:ac:70:bd:51:6b:c5:88:c3:ca:a9:e0:
66:bd:ce:29:59:84:f5:cf:3b:ee:08:49:3c:71:ca:b9:b1:e8:
e2:d5:e2:f9:c2:b3:cc:ad:f6:1a:40:60:66:df:c0:79:94:cf:
f5:64:1b:35:c8:fd:08:b4:fc:dc:20:8f:67:b3:d0:9f:fd:49:
28:7a:4f:28:39:61:70:09:9d:be:2d:2c:21:c7:f0:60:42:95:
36:61:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:32 2026 by rpki-client