
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a62c2ce-96d4-4972-acdf-879b567f91ab.cer
File: 7a62c2ce-96d4-4972-acdf-879b567f91ab.cer (raw, json)
Hash identifier: Eu43hEmHgBMBrIuQE/M/raiUUSCI9yWdWPgWkzhpRw0=
Subject key identifier: 27:B5:D2:04:8B:4E:72:F8:B9:A3:70:67:BC:62:3F:80:13:57:61:7A
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F1E2577C8E9FF67AEAA182280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a62c2ce-96d4-4972-acdf-879b567f91ab/7a62c2ce-96d4-4972-acdf-879b567f91ab.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a62c2ce-96d4-4972-acdf-879b567f91ab/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 09 Sep 2026 12:45:11 +0000
Certificate not after: Tue 12 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 397656
IP: 23.137.144.0/24
IP: 2602:fdc8::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1e:25:77:c8:e9:ff:67:ae:aa:18:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 9 12:45:11 2026 GMT
Not After : Dec 12 13:45:11 2028 GMT
Subject: CN=7a62c2ce-96d4-4972-acdf-879b567f91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:83:73:02:5c:62:b1:17:40:18:ed:5b:7b:
09:5e:9a:8b:49:03:15:11:4a:7e:93:c3:13:0f:0f:
d1:97:24:d8:65:cc:3f:8f:c3:c0:54:e9:7d:0d:2a:
8b:c4:22:61:af:cc:5b:8d:db:87:75:e8:32:36:c6:
2a:36:33:ff:c3:90:af:18:8e:28:36:01:14:94:ec:
ca:33:cc:7b:e9:cc:cf:11:dc:eb:85:e6:3f:ef:76:
ca:90:33:c6:c1:02:6c:fc:44:ae:d9:ca:2e:d4:a5:
a5:31:48:c7:0c:c8:24:c9:07:42:6d:22:23:7e:ed:
11:da:b6:06:4d:be:1f:fb:f2:75:76:b1:25:a4:f0:
f4:f8:de:e4:e4:ce:c8:51:04:fa:70:40:3f:d9:5b:
e6:81:41:71:d8:50:e7:02:94:05:8c:ee:c6:c1:43:
02:e3:5a:0b:a3:1d:3e:25:a2:6a:5c:39:b4:57:91:
eb:ee:a9:82:25:ce:87:3e:57:bf:48:46:80:ac:57:
b2:17:f2:cd:13:45:70:96:ef:88:7f:20:57:94:9c:
f0:e3:43:9d:c2:c4:b5:e7:17:ed:cc:7e:39:52:50:
33:13:70:1a:0c:a6:98:64:18:b5:12:80:8d:03:37:
49:1c:2e:42:a1:aa:b6:27:48:c2:30:e8:f2:05:39:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B5:D2:04:8B:4E:72:F8:B9:A3:70:67:BC:62:3F:80:13:57:61:7A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a62c2ce-96d4-4972-acdf-879b567f91ab/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7a62c2ce-96d4-4972-acdf-879b567f91ab/7a62c2ce-96d4-4972-acdf-879b567f91ab.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.144.0/24
IPv6:
2602:fdc8::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397656
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ca:02:1a:e4:af:4b:93:d4:17:bf:b2:41:67:ca:4e:72:cb:
31:47:c2:c5:d9:0b:92:53:d4:1f:e1:ef:ea:74:49:97:24:50:
57:87:92:d2:36:f8:e8:a8:85:73:72:19:e1:25:80:b6:3e:56:
11:dc:ef:96:68:0d:8f:e6:82:9f:e8:f4:90:37:d5:73:36:00:
06:11:bc:d0:2d:bf:2d:47:6b:4a:0f:54:07:72:16:95:94:b3:
47:18:aa:bc:94:cb:2b:e2:8f:db:a4:ab:60:1a:7f:11:50:90:
a0:fd:a5:7b:7d:46:b9:04:03:14:3b:b1:a7:7f:32:a2:b6:22:
80:fd:8c:ea:95:b9:4f:8b:44:00:d2:b5:e2:d7:e8:eb:ed:12:
c7:b7:eb:81:6e:79:cd:b8:7e:32:3d:06:19:56:c8:18:02:fe:
d3:40:95:c0:da:16:e6:70:01:ba:92:62:bc:c8:b3:b4:3a:2f:
c0:e4:b8:7a:81:d5:f6:a8:d7:d1:3e:d3:9f:f9:51:6f:d3:e4:
e4:03:a4:75:2f:55:99:cd:bb:b2:f9:cc:b3:6e:61:96:c5:ac:
ae:8b:d7:2f:ef:a6:e3:9d:ae:ef:0c:d0:e1:d2:69:97:ca:2b:
98:cb:0a:ee:e4:f7:85:89:37:30:0c:e3:74:a2:bd:5b:f8:32:
5a:28:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:54:54 2026 by rpki-client