
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer
File: c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer (raw, json)
Hash identifier: wo94viA95TSvC/JOezU+0wu5BW7q2NhcMFHR1a/H7O4=
Subject key identifier: AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584D01721FA55BDD607B318B7200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Feb 2026 20:27:20 +0000
Certificate not after: Tue 27 Jul 2027 13:13:38 +0000
Subordinate resources: AS: 20071
AS: 402244
IP: 23.138.76.0/24
IP: 155.103.64.0/22
IP: 2602:f66f::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:01:72:1f:a5:5b:dd:60:7b:31:8b:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Feb 27 20:27:20 2026 GMT
Not After : Jul 27 13:13:38 2027 GMT
Subject: CN=c281b0a3-3805-4846-a1fe-91a9aacd11a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:16:44:fb:8c:b6:da:be:bd:3d:78:6c:a7:
49:75:a7:14:bb:93:e0:ae:bd:c1:12:c3:6d:b4:57:
c8:3e:38:1b:7f:3b:0c:a2:59:c8:9d:b5:83:65:53:
f4:7a:b4:d1:0f:ba:41:a6:72:c2:03:76:1c:81:52:
73:25:db:99:10:09:56:0d:99:b7:e2:64:01:3e:f5:
dc:e0:fb:8b:0c:9a:2d:0d:45:ff:28:9a:93:9b:48:
57:c3:7c:a2:f6:0e:79:36:fd:77:ad:88:7e:a7:37:
28:2e:3f:3e:e6:ca:ea:cb:eb:7b:ae:8b:ed:40:a6:
dc:62:b0:46:89:a6:25:ac:bb:77:d3:86:46:8c:1c:
be:fa:82:af:ec:48:af:aa:ee:ea:9b:26:b6:29:dc:
2e:3c:d6:58:b0:97:f1:de:66:3d:ca:5b:43:bd:4a:
1a:e1:76:12:3e:b8:e0:7c:4e:aa:01:a1:7c:be:d7:
08:6d:a9:b9:96:3e:01:04:7d:5e:20:57:41:01:69:
a2:d2:8e:75:da:b9:b1:3e:ba:5d:2e:0d:2e:ad:22:
88:11:28:bb:34:41:8c:4e:4a:e0:b7:6d:dc:39:2e:
de:87:69:d0:08:c8:ac:1c:d7:44:d9:ac:21:54:d4:
d0:0a:58:b3:59:d3:85:b2:62:88:74:51:d2:f0:01:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.76.0/24
155.103.64.0/22
IPv6:
2602:f66f::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20071
402244
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c1:9d:30:c5:dd:e4:11:e3:a2:30:b8:b8:9c:80:be:b5:10:
10:5f:48:a8:fa:55:25:a1:07:eb:53:a6:74:41:8a:32:45:f2:
e8:d8:8a:67:f7:40:e2:65:db:bc:b7:fa:71:6b:db:ff:62:e8:
84:b5:36:f6:7c:0a:b8:08:7a:2a:08:f8:2d:3a:3d:ef:ea:b6:
69:3a:bc:23:3b:86:4a:75:8f:35:43:c0:89:63:4b:3c:53:b5:
15:cf:1e:bd:d5:49:2d:09:e2:08:d7:a3:03:3d:cc:03:6a:f5:
ed:2e:d5:44:9c:3f:d3:40:60:38:3d:67:c5:f7:bc:55:58:80:
4c:f5:5a:20:0b:27:ab:ee:23:b0:77:72:c3:ba:7b:e7:35:08:
65:34:e7:78:fa:0f:43:c5:20:08:be:19:11:65:28:cb:68:e0:
a7:61:27:6d:73:70:64:80:f4:60:3b:bf:2e:6d:c0:fe:48:57:
8b:be:3e:10:5b:13:87:b5:d0:1b:65:dd:c6:4a:83:f4:24:5f:
51:ba:05:28:6e:48:a3:25:fc:09:d1:6d:60:79:12:1c:a6:09:
8a:91:2a:5f:58:29:f0:5a:0a:86:47:90:fb:81:7b:d3:2d:89:
e4:c7:b7:99:a6:4e:50:ad:39:75:06:2c:05:88:70:cd:e4:4e:
8d:c4:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:50:16 2026 by rpki-client