
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.cer
File: ccea9ef3-18b8-4cea-8252-4728b9bd8c88.cer (raw, json)
Hash identifier: A43/mrPcZ0Mz8i76RAoKTFssLK/cBBfuUn5j3XM8MPc=
Subject key identifier: 1E:DE:FF:22:12:E2:DD:F6:8B:44:1D:C5:E9:1A:E6:5D:6F:28:DA:99
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F3B75A5D346C68AEE46DD8980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 20 Sep 2026 00:45:11 +0000
Certificate not after: Sat 23 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 397303
IP: 50.20.112.0/20
IP: 147.160.7.0/24
IP: 2605:c840::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3b:75:a5:d3:46:c6:8a:ee:46:dd:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 20 00:45:11 2026 GMT
Not After : Dec 23 01:45:11 2028 GMT
Subject: CN=ccea9ef3-18b8-4cea-8252-4728b9bd8c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:38:6a:29:a1:62:5e:60:5b:d0:c1:dc:03:
08:52:da:a2:86:fd:ac:1b:25:4d:e4:5e:5b:75:ad:
f6:8b:0a:05:88:b6:ff:7f:1a:2b:1c:ae:d2:e5:e5:
27:69:93:07:a8:bc:a3:66:3c:88:14:3e:32:0d:d8:
be:e1:b4:6d:fb:dc:45:3e:72:17:3b:93:a3:94:89:
ee:8b:d9:be:15:25:2b:12:23:02:57:79:77:57:aa:
57:b9:12:a7:97:51:5c:e6:62:f1:d2:ff:66:73:75:
27:bf:4a:4e:03:a5:2e:bf:33:45:f5:f1:1e:c2:89:
14:47:35:c1:cd:fe:d3:47:4a:0b:af:d8:2a:21:af:
19:28:87:0f:0e:09:71:78:8e:5e:c6:10:97:42:c5:
b3:e1:e9:45:4a:d4:be:e1:fd:2f:d3:d1:42:83:28:
36:af:00:a1:0d:98:76:fd:33:c9:ee:52:ea:ee:78:
d9:83:0a:d5:49:0f:70:1c:7a:13:87:7c:e8:ce:4c:
f7:83:02:5d:25:4a:43:1d:8e:36:3f:60:53:f3:ab:
d0:57:b6:80:cf:33:b2:39:5e:4d:a7:f5:5f:fa:91:
ae:94:6e:66:76:5a:cd:53:67:de:84:b8:fd:36:5c:
36:a2:bb:bf:e3:4c:50:06:22:5a:62:d7:f1:3b:f5:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DE:FF:22:12:E2:DD:F6:8B:44:1D:C5:E9:1A:E6:5D:6F:28:DA:99
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ccea9ef3-18b8-4cea-8252-4728b9bd8c88/ccea9ef3-18b8-4cea-8252-4728b9bd8c88.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.112.0/20
147.160.7.0/24
IPv6:
2605:c840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397303
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:9d:b4:3a:38:ac:26:45:76:42:b6:f8:fe:5b:82:41:3f:a8:
6e:2e:e8:9b:21:6e:88:6d:7b:34:13:50:9e:86:98:84:65:9d:
88:18:32:a8:2b:2c:41:0d:aa:99:98:4d:77:a4:fc:46:fd:1a:
b1:42:54:dc:25:68:05:96:73:65:47:15:b2:21:f4:90:5e:f1:
c3:62:79:82:3f:d4:33:ca:ea:f8:8e:c6:03:9e:d6:47:ad:c8:
e9:b3:69:06:7d:47:04:6d:d3:31:7c:05:5b:84:bd:00:24:49:
65:a5:91:b3:df:d3:ec:1a:a3:46:44:a3:a7:7f:a3:29:ed:ff:
71:bf:e1:c0:ee:23:1c:ff:4f:ef:f6:c3:37:a4:40:1c:3d:a3:
5a:cc:e9:ee:a9:cc:f5:d0:41:5a:1b:48:76:08:5d:85:69:5b:
36:fa:62:6a:4f:cd:6f:69:6d:01:2c:b0:1a:79:31:f6:1f:9f:
a7:28:52:3f:ba:b7:ed:e4:69:c4:15:fc:54:f6:96:b0:ee:67:
6d:35:13:68:8e:50:40:f5:83:af:b1:ee:b5:f9:5a:8d:7a:33:
46:b1:54:f2:21:06:53:35:2b:93:69:52:67:df:70:62:9c:ee:
3c:e2:76:28:83:72:d6:d3:08:58:f7:40:7d:85:9e:d6:f5:16:
0a:c3:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:50:11 2026 by rpki-client