
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
File: 4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer (raw, json)
Hash identifier: lIlCoGBYFP3BqgjhmrLfgALYcUNWHGJIzn6fpZOhc6M=
Subject key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584DE3597314FDB19237695AAE40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 19 May 2026 18:30:18 +0000
Certificate not after: Fri 16 Jul 2027 02:48:44 +0000
Subordinate resources: AS: 395176
IP: 167.104.56.0/21
IP: 208.92.68.0/22
IP: 2602:ff41::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e3:59:73:14:fd:b1:92:37:69:5a:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: May 19 18:30:18 2026 GMT
Not After : Jul 16 02:48:44 2027 GMT
Subject: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:de:a8:63:a4:d4:0c:7b:93:a0:06:d6:7e:
90:c5:17:a3:b8:e6:58:e9:17:86:c1:dd:e6:9e:67:
8f:48:f9:0d:57:d7:26:6d:3d:b5:32:05:43:05:74:
9c:3c:9f:ab:e8:e3:21:c3:9c:2e:8b:d6:02:e8:f2:
50:2d:fb:d5:c7:36:18:3a:0c:ac:24:8d:d7:fe:f2:
2c:91:bd:2c:6b:fd:fa:50:2b:62:58:5b:87:aa:f6:
13:37:26:9d:66:06:83:73:e0:6f:38:2a:50:46:e5:
09:88:4b:4d:17:da:67:a6:56:ea:49:3d:71:f1:c9:
ca:7c:2e:b2:21:8e:60:85:b6:aa:95:ad:a1:0d:36:
57:c5:4d:d9:6a:10:83:a2:54:fe:b0:85:0c:61:34:
9c:5f:bb:06:60:b1:20:d4:76:b5:9e:74:b9:da:3b:
a7:d9:5e:37:49:88:5d:11:12:41:9f:90:0f:c2:7d:
41:ab:50:4d:f4:9d:08:14:85:85:f9:b8:4f:cb:69:
f4:1d:a8:ee:04:e8:6c:61:92:8f:1a:dd:69:b9:8f:
10:d1:e4:98:35:8f:6d:0b:a5:ed:10:14:17:42:3f:
72:68:dd:d9:1f:2f:d2:ce:10:d1:06:37:c9:b9:f1:
28:b1:f7:d3:23:70:56:97:8f:f0:1b:07:dc:07:86:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
167.104.56.0/21
208.92.68.0/22
IPv6:
2602:ff41::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395176
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:33:e9:a1:52:b1:98:17:82:51:44:13:06:02:53:e6:e3:6b:
b7:f8:d4:75:4f:b1:e9:d3:47:50:72:a1:31:fb:6b:43:a6:e2:
f6:a4:22:eb:66:3f:a9:71:ef:81:bf:b5:f0:db:02:ae:f5:d2:
0c:9b:84:89:67:ff:e3:bc:9f:8f:98:45:ed:5b:2e:0c:ba:e5:
f3:41:4c:b9:ab:57:1f:80:a9:e1:fb:20:9a:36:42:18:89:be:
7c:00:c6:84:24:dc:e5:97:3b:b9:7f:ab:48:60:5a:ed:ad:b6:
d8:04:69:a0:65:bf:bd:f0:bd:03:b4:48:dc:b9:2b:35:1a:73:
2a:8e:e9:93:a0:b9:b8:03:c4:73:62:29:55:76:a4:6d:91:b3:
47:fd:2c:86:c7:53:73:cd:cb:72:10:8c:de:c7:3b:93:f8:ea:
a9:2f:59:94:01:f9:23:3b:fa:12:fc:d4:55:f5:0c:e4:d1:b2:
0a:95:67:2c:52:48:eb:58:44:2e:b5:ae:c8:f2:16:a7:68:1e:
a3:97:da:57:86:be:60:b7:4c:ba:4f:1d:8f:67:83:4d:7b:f2:
d7:94:4d:b8:bb:38:8a:4c:7a:19:aa:61:f9:a7:05:fc:0a:d8:
97:41:4a:47:0c:a0:cd:7e:e0:67:a8:fd:44:59:8f:cc:a1:31:
6a:d6:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:21 2026 by rpki-client