
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
File: 8b973e20-42b5-497e-831b-66d353f928d7.cer (raw, json)
Hash identifier: PcjKsdTECVEqIqoBT9DPf0Ia6/C2QhzVz0a5vQW6Cqo=
Subject key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F039FF883004CF4703A30D4C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 31 Aug 2026 00:45:12 +0000
Certificate not after: Sun 03 Dec 2028 01:45:12 +0000
Subordinate resources: AS: 6341
AS: 18788
IP: 156.76.0.0/16
IP: 192.189.178.0/24
IP: 204.126.92.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:9f:f8:83:00:4c:f4:70:3a:30:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 31 00:45:12 2026 GMT
Not After : Dec 3 01:45:12 2028 GMT
Subject: CN=8b973e20-42b5-497e-831b-66d353f928d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:15:34:ae:e2:bc:9d:69:49:48:df:2f:05:
04:af:5b:38:50:3c:e1:ce:19:b8:fb:2e:69:c6:9f:
d0:5c:d6:79:a0:85:6a:07:7c:83:29:2c:08:12:ca:
b5:92:69:15:b1:c5:12:38:bc:dc:08:1d:2f:ea:2c:
2a:db:2b:a5:ba:36:d4:02:d1:92:07:97:65:81:e2:
d2:c5:a8:2f:50:82:61:78:81:75:5b:38:e2:47:fb:
e3:9e:3a:a9:63:53:e4:bb:e1:30:16:fc:4c:71:f3:
ab:f0:12:97:7f:6e:0b:c9:e7:88:bd:98:70:ea:68:
7d:6b:c5:12:9f:30:4f:5a:39:38:f3:34:f6:a2:56:
e1:22:0e:80:6e:fa:9d:8a:b1:8d:14:5d:48:91:23:
d0:05:05:68:11:1d:78:8b:f1:2e:34:ce:99:eb:1f:
d4:68:49:c9:ee:1a:79:09:75:7e:8c:a3:e6:04:6e:
2c:f5:69:44:62:d6:7d:fb:aa:06:25:90:42:9c:39:
c3:f2:5c:af:e5:e7:c0:c8:ca:2a:80:a5:cf:b6:e2:
0f:3e:46:b3:b6:23:6e:09:6d:a7:b2:c1:26:b7:44:
d7:56:56:3e:11:07:e2:f1:7f:3e:9d:44:1c:bb:d9:
f5:91:eb:41:0a:2e:06:0b:40:54:f3:02:de:62:e5:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
156.76.0.0/16
192.189.178.0/24
204.126.92.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6341
18788
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:56:33:f2:2d:38:bd:87:b9:08:de:5e:b5:9f:20:08:b8:63:
ce:9f:d2:10:fc:e4:8d:27:6a:62:ca:31:ea:29:0f:43:b4:37:
fc:21:b5:42:e0:29:b7:a9:a5:b8:c7:84:72:54:df:eb:15:ff:
f6:8d:a0:fb:9e:2e:8d:b1:45:8d:a0:0b:cd:3e:6e:bd:f0:8d:
b7:69:d1:fb:6d:dd:27:43:41:e3:e4:4e:1f:66:71:0e:4a:a9:
f9:2a:00:0f:d4:4d:d1:e2:9c:67:25:a6:8a:cc:c8:bc:fd:19:
33:ca:86:0e:da:1d:08:66:cd:c9:91:d7:1a:e8:1f:83:e0:05:
69:09:4b:a1:56:72:4f:cd:06:d3:b1:d2:98:01:58:49:55:05:
9d:51:e0:94:6f:ca:d9:da:79:96:dd:da:aa:c5:cf:4c:24:76:
6c:67:bc:93:dc:05:5e:e2:aa:f3:ca:68:c5:af:ee:3b:cc:03:
09:df:54:3d:49:c1:1c:51:d1:35:e3:85:2f:a7:e3:51:29:bb:
19:71:ac:bb:80:45:5d:14:e4:60:a7:6e:df:1d:2c:1e:3d:1c:
0c:e8:aa:54:22:a9:aa:ec:1a:30:6d:74:1e:cc:25:09:4b:c8:
c3:76:8d:1f:3a:a2:d1:9c:54:1b:cd:a1:61:97:72:91:87:c7:
4c:37:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:09:06 2026 by rpki-client