
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013.cer
File: b15f8fb3-7cfd-4593-ada0-a231ef250013.cer (raw, json)
Hash identifier: kGfd8I/gC9Obw+UQDkbLHshFDoBskjx0o7pYRgNq9uY=
Subject key identifier: F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DF4D3AA138014C5214E7FC420
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 26 May 2026 00:45:17 +0000
Certificate not after: Mon 28 Aug 2028 00:45:17 +0000
Subordinate resources: IP: 199.84.132.0 -- 199.84.134.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:d3:aa:13:80:14:c5:21:4e:7f:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 26 00:45:17 2026 GMT
Not After : Aug 28 00:45:17 2028 GMT
Subject: CN=b15f8fb3-7cfd-4593-ada0-a231ef250013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:3e:21:45:49:c3:55:b1:f5:0f:f6:ac:d2:
93:68:b0:0b:24:51:b0:2a:37:c4:3a:88:a5:34:df:
ad:59:ef:44:27:cf:e4:85:5a:01:16:22:e7:a5:66:
bc:2f:37:66:92:8b:56:83:b5:bc:32:80:4b:97:0f:
5d:3b:0d:4d:c3:cc:51:90:02:f3:fe:37:7a:cf:31:
70:29:84:1b:74:9b:91:14:d9:c0:1e:74:5f:2c:96:
16:59:52:81:16:a2:4b:50:5b:2b:d1:b1:88:a6:b1:
f5:b0:5b:a2:42:b8:66:c7:11:ee:e8:5c:5b:ea:ed:
ba:56:73:7c:45:f5:df:25:51:d0:99:c7:af:d4:4c:
9f:eb:26:9a:f0:21:99:ae:a5:f1:30:af:a9:9a:10:
ac:f0:3c:11:4a:a9:5c:9a:1e:b2:9e:54:6a:e9:c0:
a6:1e:41:bd:4a:f3:ac:b7:63:c4:f1:bc:87:6f:4e:
81:97:53:68:49:58:a7:b1:f2:19:a5:4e:74:0e:63:
49:92:58:a7:ee:f1:8e:9a:01:e7:cd:ef:82:0b:30:
33:0e:92:a3:c6:f5:57:f8:c2:a8:d4:92:15:bb:a9:
6a:38:67:49:52:1d:a3:0f:60:4e:6d:6e:06:59:10:
79:6e:8d:4d:ab:65:b2:59:d4:a2:13:82:a3:dd:2b:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
199.84.132.0-199.84.134.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:46:95:28:83:6e:6e:ef:30:91:7c:54:c2:07:c6:96:e4:c3:
04:29:a1:d5:64:c9:1d:08:39:ed:3d:49:21:b8:33:ae:69:78:
a9:0f:0e:b4:e4:f4:18:95:64:7d:3d:e1:6f:de:18:62:68:0f:
7b:b4:20:5c:b6:33:bf:dd:6c:b9:5e:ec:18:a6:72:20:f8:ae:
e4:8a:8e:6d:bd:42:80:c5:77:fa:93:14:4a:4f:c5:a3:7a:da:
ad:b3:f4:88:b6:e2:f8:5a:cc:76:16:66:d1:90:a5:ae:b5:ee:
9f:f4:dc:d2:66:38:6f:d6:81:6a:58:04:e4:24:5f:13:25:b0:
38:55:51:d1:4e:e4:b8:a6:2d:7b:48:8b:64:93:8b:1d:79:4a:
d2:09:c3:ab:21:85:27:a1:69:91:ae:99:2f:d9:f6:d6:a0:20:
7b:0d:f0:e9:6c:3e:e7:6b:ac:5e:84:94:fb:2c:37:e6:84:54:
77:26:7e:95:ea:07:82:88:42:ee:6a:ac:b4:c0:c7:24:c5:22:
03:5c:b6:43:4d:12:88:6c:a3:95:fb:f1:93:af:88:81:86:29:
af:63:b4:01:32:b4:b3:ee:91:f0:30:06:b1:74:59:e0:28:47:
0f:a3:14:b6:dc:b4:7d:ff:72:e8:13:b5:54:a3:b1:f4:e7:ac:
c5:45:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:10 2026 by rpki-client