
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51.cer
File: 68875259-2927-45e7-be12-9528b42e0e51.cer (raw, json)
Hash identifier: zfXWXJiaB18hkJOYvQrTWOH/GLIBXOBu2y8c7aFcI0A=
Subject key identifier: 9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EA43D9874622E193606C19D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Jul 2026 20:45:11 +0000
Certificate not after: Sun 29 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 19614
IP: 64.190.186.0/24
IP: 192.190.25.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:3d:98:74:62:2e:19:36:06:c1:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 27 20:45:11 2026 GMT
Not After : Oct 29 20:45:11 2028 GMT
Subject: CN=68875259-2927-45e7-be12-9528b42e0e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:23:af:68:42:43:90:f3:c2:45:d3:0b:30:2b:
a7:c9:54:40:bd:8b:65:92:b0:e4:49:27:a9:bb:9c:
a5:ef:b5:93:d6:bc:63:47:cd:05:58:e5:d0:90:c0:
00:ed:76:6c:7f:eb:d3:27:94:47:aa:00:87:27:5c:
62:43:08:1e:f6:c2:69:47:92:07:54:52:3b:95:ed:
b7:32:40:03:1c:f9:8f:73:83:98:53:ca:95:52:4e:
c9:a8:35:28:50:7c:21:30:88:d7:42:11:03:dc:27:
bb:3e:a7:1b:39:67:f7:13:12:4a:58:9e:45:22:0d:
9e:e5:85:8c:dc:ec:1d:35:55:6e:5e:17:1b:2d:d9:
41:e0:63:e2:22:54:95:c6:63:63:dd:f0:a1:6e:9c:
c6:47:c1:ec:25:6f:31:4b:60:55:d4:c1:60:ab:c6:
f2:a2:eb:38:6a:f4:f5:e8:84:16:5b:d8:d8:15:f5:
9e:9a:97:f9:ba:69:a7:1f:ae:8f:19:f2:28:b0:4d:
9e:25:23:37:1e:e0:63:fb:1c:37:c5:e9:23:e5:ff:
16:14:4d:14:8b:41:91:4b:7c:54:6a:e0:3d:59:2a:
8f:93:2e:bc:98:27:bc:21:04:f4:99:92:26:bc:5c:
96:30:5b:20:15:c9:7b:56:f5:87:fa:a0:e3:86:b2:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DF:D2:47:04:17:22:BF:C7:BC:08:88:92:96:83:12:FF:22:CF:FB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68875259-2927-45e7-be12-9528b42e0e51/68875259-2927-45e7-be12-9528b42e0e51.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.186.0/24
192.190.25.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19614
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:3c:8b:a3:5b:de:bd:21:fe:90:54:3a:84:ea:65:d7:b8:49:
3f:e7:0c:e2:70:68:99:80:10:b4:f1:4e:90:37:47:3c:43:02:
fc:39:b2:af:6b:d0:b0:26:0f:c9:4c:c3:f2:1f:95:17:f9:9c:
3e:d3:f6:9e:d6:71:88:51:7a:1f:91:c5:66:71:03:c3:49:cf:
48:48:4a:1e:9d:56:2b:0b:3a:68:eb:ce:b2:ca:0f:70:b9:f6:
94:2b:e4:25:23:fb:9e:d2:5d:97:d0:51:39:fb:27:09:53:35:
70:6f:da:09:df:db:51:af:8e:9f:dd:04:46:ba:df:8e:39:d4:
c5:a1:7c:d0:58:65:05:ad:cb:84:4e:c3:be:76:41:2b:d7:0b:
bc:6c:31:47:e1:f7:d2:b2:c0:5f:fe:fd:d0:42:f0:fb:d9:3d:
88:4a:13:4f:7b:a3:6f:88:3e:bc:25:cf:87:67:95:6a:96:5f:
68:cf:2a:3a:cd:5a:78:2e:6c:ea:0e:2e:7a:11:d9:05:cf:ed:
5b:5e:83:3c:28:83:5c:0b:73:2b:53:e7:45:2c:d4:11:74:1c:
c3:af:ce:ac:cf:84:33:03:d2:4b:4c:df:09:d0:75:6c:8a:c2:
fe:a7:5a:b2:bb:a5:a6:16:77:fd:50:ca:52:4c:9d:6d:f5:e6:
e9:e6:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:37 2026 by rpki-client