
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
File: ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer (raw, json)
Hash identifier: Tj+n4GDt/qrIAt1YeW2kn/Rrca1PDlnMr9iVaztRzbs=
Subject key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EA172E96CC37B841A24938E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 26 Jul 2026 20:45:11 +0000
Certificate not after: Sat 28 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 54223
IP: 192.12.18.0/24
IP: 204.145.210.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a1:72:e9:6c:c3:7b:84:1a:24:93:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 26 20:45:11 2026 GMT
Not After : Oct 28 20:45:11 2028 GMT
Subject: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:ca:0e:d9:91:92:9c:07:9c:76:32:04:a5:
13:c4:c6:0b:81:cb:8c:56:42:d2:43:3a:1f:1f:6a:
23:0c:0f:81:09:fc:23:72:97:53:f3:af:b0:11:30:
d2:c0:7f:03:6b:1e:83:6c:49:c7:ee:e9:8a:d9:ca:
53:92:35:5f:23:79:91:3c:83:de:03:90:49:6e:bf:
15:d0:b9:dc:44:17:02:ff:f5:14:68:d5:2e:c1:bf:
e1:87:eb:22:40:d0:e1:86:6d:42:16:32:e1:fd:7b:
65:d3:9b:2f:61:dc:f6:a3:e2:a5:0c:2b:ad:54:73:
68:3a:f7:c3:13:5c:61:46:b4:bc:0d:94:65:0c:a6:
c9:d7:a6:36:49:3b:be:0a:3c:56:a0:2b:d7:66:94:
52:cd:05:d3:8d:9d:d3:ae:68:84:0c:c6:81:be:5a:
4e:84:d1:6c:a7:40:97:24:fd:62:92:4c:f1:5b:bb:
f2:ce:10:ed:d8:65:c4:f5:a2:dc:c6:bc:81:a3:b4:
85:ee:18:78:57:20:e2:64:0d:68:c0:5f:8f:54:70:
23:a1:2a:14:df:c4:69:c6:24:a1:7c:8f:63:3d:3d:
b9:da:b0:04:ac:71:a0:b3:03:ab:f7:9d:ef:36:48:
3f:8c:ed:ec:2c:3a:81:6c:d9:07:d9:e9:cc:b0:51:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.18.0/24
204.145.210.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54223
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a0:87:de:c0:69:0e:3e:ba:b5:13:ed:5f:c5:9c:cb:5a:02:
da:11:c8:96:b6:7a:48:fa:c5:97:72:eb:b9:d5:6a:47:40:d7:
1c:3b:0a:76:4c:3b:d8:9e:cb:0f:b0:94:d1:1a:35:3f:48:0f:
64:ac:5e:0a:ec:6e:89:67:34:09:e8:f6:fd:d1:12:68:b0:4e:
2c:ef:d8:30:f0:fc:17:8a:90:60:d7:20:82:a8:85:c2:ec:ac:
97:6d:c2:de:da:4d:4f:8d:72:cb:47:7e:4b:1a:be:a0:12:d2:
44:01:3b:86:a4:3f:2a:42:58:32:e4:f1:c2:e5:ac:10:da:03:
3f:3c:7b:f1:fb:52:e4:99:7b:0b:b7:a4:ee:1c:fc:9d:bb:f0:
6f:70:6b:e3:68:a0:44:72:aa:63:e7:62:c1:c8:fe:f4:b0:d6:
1d:57:14:34:97:c9:b1:fc:e8:6d:8b:a5:3b:ea:1c:b4:d9:e3:
67:68:9b:80:ca:23:33:a6:f0:9f:13:7c:dc:d8:ca:2d:46:40:
6d:f2:df:6b:8e:55:e8:cd:30:00:5f:93:f9:4e:19:36:2e:09:
12:60:82:8b:59:15:9d:99:0f:e7:5e:65:b2:34:31:ea:39:0b:
76:31:0e:c4:87:62:57:dc:d3:e2:76:7d:54:94:95:cf:81:49:
f2:48:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:27 2026 by rpki-client