
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d.cer
File: da80f8e0-21bf-4151-8b5e-162c4aa7ac4d.cer (raw, json)
Hash identifier: LHecd6kgf1i88Gv+svhXSNf8OW1ebOsHEhnH/8hlmWc=
Subject key identifier: B3:22:94:48:C3:73:8D:81:CE:9C:96:15:B5:32:FD:B7:5B:DD:47:37
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E22BBBE08B7EFAABAA4003300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 11 Jun 2026 11:24:16 +0000
Certificate not after: Sun 05 Sep 2027 20:56:52 +0000
Subordinate resources: AS: 19126
IP: 204.89.238.0/24
IP: 2602:f394::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:22:bb:be:08:b7:ef:aa:ba:a4:00:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 11 11:24:16 2026 GMT
Not After : Sep 5 20:56:52 2027 GMT
Subject: CN=da80f8e0-21bf-4151-8b5e-162c4aa7ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:83:09:10:09:a9:0a:73:35:b5:20:ab:86:
12:75:93:37:ac:0e:a8:45:c9:b8:7f:1f:cb:5d:ff:
ae:10:c2:41:11:56:59:33:75:d0:d6:e5:7d:df:ca:
32:c6:b7:d8:14:93:ab:d0:6d:5d:44:e0:f7:a0:b2:
4f:71:aa:36:ea:c4:a5:7d:c6:2f:44:70:20:e9:46:
a3:25:68:24:e4:56:31:99:a9:5c:32:a9:e0:84:c8:
00:78:ee:ec:1e:77:cf:08:d9:28:9f:03:79:33:47:
0e:87:a6:8f:d6:d3:8a:0f:2b:50:34:cb:38:62:59:
54:66:7e:c1:18:be:d7:72:d3:ca:08:6c:78:22:e9:
cf:4f:ee:ae:39:c4:78:68:08:b4:a2:47:5c:3b:20:
b0:2f:2b:8d:4e:d4:3f:04:7a:d0:5e:84:a0:c3:8b:
9d:71:c1:3f:74:1a:4a:66:be:36:df:a3:dc:6f:19:
25:c0:f5:de:4a:61:a5:20:48:b9:a4:57:00:ee:6a:
d2:a4:2a:ac:91:8b:42:c3:95:41:ba:cf:ce:c4:97:
dc:ae:e0:1f:84:0d:16:04:29:33:43:43:49:66:97:
b6:a6:6e:1e:a5:be:a6:35:60:ee:99:77:89:a1:db:
e4:07:ec:f6:11:23:39:4e:2e:dc:00:a5:ef:32:12:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:94:48:C3:73:8D:81:CE:9C:96:15:B5:32:FD:B7:5B:DD:47:37
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d/da80f8e0-21bf-4151-8b5e-162c4aa7ac4d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.89.238.0/24
IPv6:
2602:f394::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19126
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ed:77:80:1d:ce:40:d0:ce:7a:fe:62:e1:06:25:e2:a2:01:
b3:d9:e4:f4:d5:8f:4a:2b:ad:cf:c0:03:9e:e0:c7:4d:2f:5c:
97:c7:17:0e:5e:d0:f0:0e:e8:db:4d:bb:70:c3:c9:c8:34:6c:
8b:67:f1:b5:3b:87:42:9e:ae:0d:cf:e4:d7:fd:14:03:7f:9c:
9a:6c:dd:a6:1d:41:e6:7e:5e:19:55:c1:95:e0:98:0a:b3:9a:
b7:6d:f1:a7:bd:0a:1e:dd:3e:6f:1f:74:ed:88:d2:5c:db:eb:
81:61:00:bc:1e:7b:bc:91:90:ff:cc:ca:7f:f3:8e:65:df:45:
58:b7:00:40:6f:fc:66:12:36:de:e5:4b:f4:26:73:eb:08:58:
32:b8:1b:26:55:b7:16:65:d7:9a:74:32:f1:49:50:2e:41:4c:
f5:95:8b:62:c5:ae:00:d2:f4:42:3d:3d:ca:6b:9f:31:a0:3b:
56:6e:b3:5b:57:a0:0d:45:15:c6:1a:1f:f8:35:41:1f:3b:13:
ac:5a:ed:55:ea:2f:38:3c:de:8a:8b:e9:ea:ab:92:2b:8f:9e:
dc:e0:c6:a9:10:b2:e9:a3:21:b3:32:b7:8a:ae:d4:3f:a1:53:
12:ab:75:ca:5d:46:52:db:7d:0c:5c:89:4c:05:b2:94:08:69:
94:19:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:42 2026 by rpki-client