
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer
File: 381d91d1-0a3a-48b2-aca2-5a6f28e3b324.cer (raw, json)
Hash identifier: J0FfLC544+ptkgeYE4ThShQP5AJ8l9pv4sROgwuQ5I8=
Subject key identifier: A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EB144CA985BD6063620C43500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 01 Aug 2026 12:45:11 +0000
Certificate not after: Fri 03 Nov 2028 12:45:11 +0000
Subordinate resources: AS: 394281
IP: 66.212.56.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b1:44:ca:98:5b:d6:06:36:20:c4:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 1 12:45:11 2026 GMT
Not After : Nov 3 12:45:11 2028 GMT
Subject: CN=381d91d1-0a3a-48b2-aca2-5a6f28e3b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:ad:99:e7:10:41:0d:64:f2:52:93:ba:67:
31:8b:a7:da:f5:d1:ec:43:f3:e2:60:44:a7:58:56:
72:d5:6e:c4:08:80:01:34:a1:6f:74:76:c8:3a:ca:
23:55:d4:93:dc:ab:13:f1:8d:65:c4:e3:f5:66:b6:
90:23:c3:4f:2f:1c:66:a2:da:22:2c:ee:7a:3a:e5:
06:78:41:2d:19:d6:0a:f3:c8:87:f1:bd:11:ea:bf:
e6:af:3d:c6:5c:09:ff:8e:1d:db:ac:de:df:cc:40:
8b:f1:6b:40:ae:ce:0f:c7:c9:11:36:0c:17:db:b6:
08:8c:52:ef:a7:15:54:fd:fc:38:83:2b:53:a4:7a:
fe:61:e9:9d:38:39:42:2a:16:aa:f4:39:69:20:97:
3d:df:04:58:8f:45:a7:4b:49:45:96:c2:05:6e:50:
07:12:93:31:55:8e:88:fa:39:0e:0d:05:fb:3c:12:
88:d2:a7:4b:21:1d:c5:01:c0:62:d0:96:8a:33:3e:
cb:30:79:ca:25:76:80:f3:02:fd:f6:6d:08:28:7d:
d4:8f:95:00:aa:47:e0:1c:aa:ca:a4:24:a8:6a:37:
45:d0:ac:6b:4f:6a:a2:5f:d9:01:aa:c1:95:2d:c5:
a6:c1:1a:c9:d2:2d:05:ae:0b:33:4b:35:74:c7:bd:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:0E:1F:9F:31:99:62:E7:42:A5:0C:BB:90:93:D0:46:66:92:F7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/381d91d1-0a3a-48b2-aca2-5a6f28e3b324/381d91d1-0a3a-48b2-aca2-5a6f28e3b324.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.212.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394281
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:a6:a5:e5:85:6b:84:a8:8f:8a:c4:0b:0a:ac:02:f8:f7:c8:
ec:14:be:2e:98:46:7d:86:48:01:6d:4b:21:85:bf:4b:73:2b:
f1:af:38:3f:04:d3:9e:03:8d:c1:e6:d5:6d:2c:a9:f9:29:2d:
f7:1a:61:e4:bc:05:7e:15:8f:78:94:9d:d8:ab:29:97:1c:a7:
95:e2:07:36:3d:41:0f:21:e7:a1:f6:6d:7f:9a:24:38:40:9b:
fb:11:05:37:df:92:d4:a8:c4:e3:3e:65:b4:a2:17:e3:33:e8:
e0:66:5a:1c:89:68:e5:38:e0:4c:34:78:78:03:37:ad:04:f2:
fc:e4:6e:82:c9:31:35:63:62:d3:4b:7b:59:d2:d9:45:2e:f2:
30:84:bb:df:70:95:0e:06:d2:6c:73:1f:76:3d:7d:5d:f1:9d:
0b:23:72:1a:78:eb:c8:c2:c3:5a:60:a2:99:99:58:8c:a9:cf:
46:a4:4a:19:65:57:bf:a2:fe:4a:ea:ca:2d:1a:6f:b9:7b:49:
40:42:1e:ab:5f:aa:43:8e:55:2a:cd:db:2e:c7:1e:b5:a9:63:
6a:8b:a3:2f:af:a0:da:0d:bc:d1:8e:5e:ce:3b:f6:3e:20:82:
c9:36:b9:9c:5e:b6:ee:18:ac:6c:44:be:dc:2e:b8:58:d5:08:
9a:1f:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:15:53 2026 by rpki-client