
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer
File: c281b0a3-3805-4846-a1fe-91a9aacd11a8.cer (raw, json)
Hash identifier: 5XBltYIBQdStqHgmlHCM/ynNYxoOGNZwhlRVneTJdIA=
Subject key identifier: AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EA43D98B70C5B5EE05A5676A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Jul 2026 20:45:11 +0000
Certificate not after: Sun 29 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 20071
AS: 402244
IP: 23.138.76.0/24
IP: 155.103.64.0/22
IP: 2602:f66f::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:3d:98:b7:0c:5b:5e:e0:5a:56:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 27 20:45:11 2026 GMT
Not After : Oct 29 20:45:11 2028 GMT
Subject: CN=c281b0a3-3805-4846-a1fe-91a9aacd11a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:16:44:fb:8c:b6:da:be:bd:3d:78:6c:a7:
49:75:a7:14:bb:93:e0:ae:bd:c1:12:c3:6d:b4:57:
c8:3e:38:1b:7f:3b:0c:a2:59:c8:9d:b5:83:65:53:
f4:7a:b4:d1:0f:ba:41:a6:72:c2:03:76:1c:81:52:
73:25:db:99:10:09:56:0d:99:b7:e2:64:01:3e:f5:
dc:e0:fb:8b:0c:9a:2d:0d:45:ff:28:9a:93:9b:48:
57:c3:7c:a2:f6:0e:79:36:fd:77:ad:88:7e:a7:37:
28:2e:3f:3e:e6:ca:ea:cb:eb:7b:ae:8b:ed:40:a6:
dc:62:b0:46:89:a6:25:ac:bb:77:d3:86:46:8c:1c:
be:fa:82:af:ec:48:af:aa:ee:ea:9b:26:b6:29:dc:
2e:3c:d6:58:b0:97:f1:de:66:3d:ca:5b:43:bd:4a:
1a:e1:76:12:3e:b8:e0:7c:4e:aa:01:a1:7c:be:d7:
08:6d:a9:b9:96:3e:01:04:7d:5e:20:57:41:01:69:
a2:d2:8e:75:da:b9:b1:3e:ba:5d:2e:0d:2e:ad:22:
88:11:28:bb:34:41:8c:4e:4a:e0:b7:6d:dc:39:2e:
de:87:69:d0:08:c8:ac:1c:d7:44:d9:ac:21:54:d4:
d0:0a:58:b3:59:d3:85:b2:62:88:74:51:d2:f0:01:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:68:44:B7:7B:5E:CA:7D:7A:55:AC:7D:9E:F4:69:26:48:0D:92
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c281b0a3-3805-4846-a1fe-91a9aacd11a8/c281b0a3-3805-4846-a1fe-91a9aacd11a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.76.0/24
155.103.64.0/22
IPv6:
2602:f66f::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20071
402244
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7e:0c:ec:f5:a4:ef:9d:c1:24:7a:a1:29:8c:8f:f7:72:07:
0b:8f:ef:cf:59:ca:fd:df:93:ee:48:a8:b1:bc:6f:6a:9b:55:
48:96:ee:36:e6:f5:b5:e1:6d:65:67:04:57:17:6b:4c:60:04:
ae:78:a6:49:f4:92:f6:08:38:7d:39:81:1e:22:05:ba:d2:4b:
41:af:d4:93:07:a8:8a:db:19:f0:aa:1d:e7:53:5f:d3:18:55:
5e:a9:da:57:8c:be:eb:6c:4e:6a:f4:98:65:a8:aa:c6:41:4b:
3f:3d:5e:2d:40:10:25:0c:7a:e6:e2:bb:93:67:74:4c:2a:aa:
a1:49:57:e1:23:b7:5b:44:e0:d2:99:05:49:be:69:67:8b:d5:
a8:a9:87:51:6f:4d:e5:bb:ff:29:d1:4e:a2:b8:94:8e:f5:22:
29:6d:bc:a0:05:06:a2:aa:f5:bd:12:38:b0:ad:a4:2f:49:3c:
e4:9b:54:d3:15:4d:52:b0:77:0a:f9:51:41:a5:88:c8:17:65:
ae:e5:87:8a:f7:71:37:a0:3f:a4:93:18:08:43:c7:31:78:0d:
c8:09:e9:db:00:b2:ff:d1:12:d7:9d:9a:6b:85:67:27:26:d8:
cf:44:01:46:40:ad:da:35:3d:88:f3:9c:a6:53:de:a1:e5:18:
53:94:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:08:16 2026 by rpki-client