
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer
File: 58256eb6-85b9-455c-a9f6-3b446c5688f3.cer (raw, json)
Hash identifier: 6I2XqjacBKE0qi8XtGsQIarKhksw8VfyZ2kfy8GShoU=
Subject key identifier: 3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F23BAD6015CB7EBF1CD595F04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 11 Sep 2026 12:45:11 +0000
Certificate not after: Thu 14 Dec 2028 13:45:11 +0000
Subordinate resources: IP: 23.139.220.0/24
IP: 2602:f624::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:ba:d6:01:5c:b7:eb:f1:cd:59:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 11 12:45:11 2026 GMT
Not After : Dec 14 13:45:11 2028 GMT
Subject: CN=58256eb6-85b9-455c-a9f6-3b446c5688f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:2e:3b:81:0d:5b:01:7b:35:5a:6f:95:e1:
9d:c2:46:63:d3:41:21:63:c9:2b:8f:ea:8d:a3:d6:
2a:96:5d:0b:9a:0e:61:12:2c:11:31:a2:73:7f:b1:
42:64:1c:36:68:fc:9f:fd:64:a9:71:5b:ea:f1:55:
c3:21:77:59:f4:91:fa:18:e3:a0:58:f9:74:16:bc:
b7:7e:4a:5d:5c:30:20:59:43:73:92:11:ae:39:3b:
35:1d:31:61:4b:6b:21:e4:95:66:a6:38:a7:3a:31:
af:8b:7d:13:9b:a6:c8:8e:30:ad:9d:ab:6a:b2:8a:
a7:53:18:90:21:e4:60:c2:21:e9:92:23:0d:14:ac:
49:a4:8a:49:1e:be:aa:fa:9a:85:10:d9:97:f7:79:
1d:bf:30:1b:65:67:19:e8:9c:95:3d:64:67:87:73:
3c:71:17:1b:ef:00:59:1e:10:9c:40:54:38:e6:a4:
69:84:b7:9d:bc:89:7c:6a:9f:a4:c9:66:ef:36:e6:
ec:25:53:ad:71:36:c5:94:90:71:b1:69:37:94:9f:
4b:5c:f6:91:74:e5:e0:bd:c6:cf:dc:1d:31:9a:9e:
8c:8d:ec:b5:c1:cf:eb:71:55:da:0e:80:74:a4:f2:
d3:d2:c3:6a:74:53:3d:59:95:71:43:5a:8a:9d:a3:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.220.0/24
IPv6:
2602:f624::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:30:2e:83:b8:a3:50:51:64:14:0e:15:3e:5f:8d:b5:c0:4f:
ff:28:bd:2c:2b:fe:62:7a:77:f7:27:4a:b4:25:e7:ea:0b:2e:
ba:c2:39:c7:fb:d2:ae:33:66:55:dc:a3:aa:95:de:9b:d5:3d:
59:54:23:37:8a:38:28:81:1c:2d:2d:37:60:ca:13:43:1e:62:
97:35:bc:47:57:8f:5a:b0:fe:21:fb:c5:de:bf:ed:6c:6d:bb:
e9:87:d2:7b:33:c1:52:f8:a9:3e:36:e2:a2:6e:d5:32:c3:08:
d8:38:57:78:77:1e:d1:31:ab:71:78:5e:72:01:c3:34:1f:9d:
44:19:dd:f4:b8:0e:9c:b3:54:00:9b:1c:13:2f:77:a2:69:fc:
12:34:8b:30:dc:60:c0:15:08:66:af:f2:ea:49:96:41:e2:ec:
18:f3:4e:81:90:28:94:ab:ce:0a:70:8e:e9:57:e0:42:b3:68:
2a:48:89:81:50:ce:78:37:81:b1:ed:bc:63:3e:ff:31:f1:2c:
c4:cf:08:9c:94:90:bb:26:ff:1c:9c:14:68:a9:9a:ed:5e:da:
29:53:17:48:69:b2:d7:a3:f4:af:1c:18:82:ec:28:1f:49:d3:
1f:0c:ae:07:e7:ae:d2:cc:5f:70:6d:08:bf:63:6a:91:f5:c9:
2a:fa:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:53:51 2026 by rpki-client