
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f9b2f626-d921-4b5d-aaaa-ca3ce669d639.cer
File: f9b2f626-d921-4b5d-aaaa-ca3ce669d639.cer (raw, json)
Hash identifier: KRn6HzRRBWDAthI05/SV60Mn4Ze+sFLpNbNEGUtVg7A=
Subject key identifier: 6C:E0:74:91:C2:AE:BE:9F:E4:6F:C5:A6:90:EC:ED:99:4E:4B:EB:F2
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EA43D988643B17F8F95F64920
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f9b2f626-d921-4b5d-aaaa-ca3ce669d639/f9b2f626-d921-4b5d-aaaa-ca3ce669d639.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f9b2f626-d921-4b5d-aaaa-ca3ce669d639/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Jul 2026 20:45:11 +0000
Certificate not after: Sun 29 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 394026
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:3d:98:86:43:b1:7f:8f:95:f6:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 27 20:45:11 2026 GMT
Not After : Oct 29 20:45:11 2028 GMT
Subject: CN=f9b2f626-d921-4b5d-aaaa-ca3ce669d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:a4:a7:af:c1:99:dc:1c:ff:8e:7f:8d:0a:
97:f5:c4:5e:d6:9d:93:10:8b:84:45:1f:00:c8:83:
33:78:30:21:e9:02:e3:c7:98:42:9f:09:f1:a7:d3:
48:67:86:e1:0a:e0:a7:a3:a7:17:9b:fa:11:ed:30:
d1:f3:e1:74:8b:ec:b2:79:6f:43:21:64:cb:4a:92:
6b:21:06:3d:9b:96:91:e6:a2:2e:d2:2d:51:15:12:
1e:d1:8e:b2:f6:19:0d:ba:99:91:cf:30:c9:e4:b0:
bd:e3:87:c4:a4:50:b3:64:8c:94:ea:94:25:1f:14:
41:7f:08:7c:4c:bb:bd:d5:dc:70:e8:cf:20:6f:bb:
ce:2d:17:49:9c:9d:7a:3c:27:aa:09:fe:42:fc:f4:
90:88:30:65:9c:73:1c:52:bc:93:55:6e:23:5d:82:
97:65:55:9b:e3:0f:fa:fe:47:9b:2e:68:bb:8f:e4:
0f:2a:2e:99:6a:7b:72:6e:6e:89:44:3d:cf:2c:bb:
f0:8f:60:d6:b2:49:cf:a3:f8:c7:d5:b5:75:2b:ac:
34:48:86:d4:f8:83:a7:41:2d:f9:49:64:6e:69:e5:
d6:66:2c:cf:95:a0:61:b7:68:71:bd:43:24:cb:c7:
f0:1a:9a:e3:d5:f1:b8:a3:8c:16:0a:2d:6a:3e:fb:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:74:91:C2:AE:BE:9F:E4:6F:C5:A6:90:EC:ED:99:4E:4B:EB:F2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f9b2f626-d921-4b5d-aaaa-ca3ce669d639/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f9b2f626-d921-4b5d-aaaa-ca3ce669d639/f9b2f626-d921-4b5d-aaaa-ca3ce669d639.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394026
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:30:2a:14:a8:84:30:8a:ac:9a:43:81:a3:2d:df:05:8c:fc:
9e:b8:83:46:6b:f3:e8:72:a3:c8:0a:88:51:72:12:f6:35:85:
62:52:b6:d8:80:02:05:96:bb:1d:b0:d2:9a:6b:45:b7:74:8e:
d0:d3:42:f3:09:18:3e:fc:54:1c:07:f5:64:55:f4:34:4b:27:
b2:ef:59:c5:00:0c:c9:6d:57:53:71:93:d7:14:65:92:45:0f:
7a:89:5a:ef:91:0d:5a:a4:46:b5:ca:e9:04:bb:2a:eb:8e:22:
50:d9:c2:cd:16:b7:79:92:ef:21:42:39:13:2f:c3:d2:30:49:
5c:67:83:fe:3e:4f:36:ee:fa:7b:eb:c3:89:62:48:20:8a:8f:
2d:a0:1d:0f:1d:1b:e9:56:8d:1f:12:06:c9:29:d5:ba:dc:aa:
03:ba:7c:42:7d:df:59:ce:64:74:77:03:32:d6:77:a4:96:24:
31:71:c2:7a:f7:48:f3:03:16:86:3b:45:4b:0f:03:51:e3:cc:
12:89:45:02:73:a2:f5:6f:ad:c1:e7:f0:61:1e:fc:fd:ba:c8:
d6:6c:f4:c1:fe:b8:ac:d4:dc:7a:62:ff:5f:5d:a4:68:19:e4:
6d:c0:c0:81:fa:ab:3d:93:3b:8f:c5:7f:e9:55:9d:fc:a4:a0:
a0:31:59:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:10 2026 by rpki-client