
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer
File: f621e93b-af72-4dc7-bd05-abfaefba3c45.cer (raw, json)
Hash identifier: sfDx7ISsvhAwo1NL3TpJHGy5rpKeH5XokG+RbJ7c6gc=
Subject key identifier: E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DFCBC8C94586377B52B537580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 May 2026 20:45:11 +0000
Certificate not after: Wed 30 Aug 2028 20:45:11 +0000
Subordinate resources: AS: 40958
IP: 23.135.12.0/24
IP: 2602:81b:2000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fc:bc:8c:94:58:63:77:b5:2b:53:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 28 20:45:11 2026 GMT
Not After : Aug 30 20:45:11 2028 GMT
Subject: CN=f621e93b-af72-4dc7-bd05-abfaefba3c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:30:2f:94:81:fd:2c:4c:63:4b:e3:ad:dd:
06:d0:fb:27:f9:a4:0a:68:7e:92:c1:21:6b:de:2c:
4a:a5:09:c4:40:b4:54:54:f0:38:46:a6:0a:7f:b6:
d5:5c:11:e0:26:1f:f0:75:29:0d:b3:ec:aa:ac:2f:
5c:96:c7:be:22:d2:e7:86:1e:9b:9d:9a:83:09:e0:
4d:90:06:a7:01:24:32:3b:bd:65:69:f2:41:9b:c4:
f8:04:9a:c3:10:38:82:e5:ec:a4:2b:aa:70:3a:0d:
3e:04:37:2f:6f:eb:04:7c:b8:2a:72:5d:22:77:94:
d6:56:e2:7d:04:d1:89:66:2c:dc:d5:90:a5:12:a0:
6a:42:68:54:03:26:6d:f4:ec:13:c5:97:08:22:53:
c8:72:ca:14:a0:73:c1:33:9a:c8:79:68:cc:1a:b5:
af:8b:bd:f6:8d:a9:30:9d:9e:03:a9:10:85:66:f7:
1e:51:78:d4:77:74:c8:64:0b:6f:8d:3d:02:5c:f1:
ce:d4:37:11:b8:cf:de:3c:07:6a:ee:90:23:f0:2b:
56:93:a9:f9:b8:68:e1:b5:f0:48:b3:9c:8e:23:18:
e5:c1:85:33:28:a2:b9:73:3f:e0:7e:60:fb:c0:ef:
88:db:9c:43:e6:23:59:40:31:be:f4:de:e4:0a:05:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.12.0/24
IPv6:
2602:81b:2000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40958
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:9e:ea:4d:66:cd:d7:99:af:7a:ab:f4:3d:93:2e:c8:24:5b:
c5:53:6a:1e:63:6b:ae:f8:fc:bf:a3:a0:02:a0:c7:ad:f6:22:
37:89:1d:dc:79:fa:8d:c5:45:19:47:e0:fb:a5:f9:37:7a:c1:
cf:fe:4e:41:96:f5:20:fc:3c:ec:46:83:3e:12:85:45:de:89:
03:61:7b:64:09:0c:c6:4e:cd:a1:25:06:af:61:5e:1b:07:dc:
71:9b:15:7f:84:68:3d:30:a4:53:c6:17:0c:ec:ca:de:fd:bf:
c2:4a:2d:b2:92:2e:23:71:e5:cd:1d:b7:8b:e6:d3:3d:98:06:
0b:1b:45:9d:04:35:32:13:c5:76:cf:38:a6:77:48:32:3e:5b:
21:00:70:76:2a:5c:13:65:ba:5f:85:71:6a:6f:8a:96:07:e8:
ff:4d:7e:50:15:9b:ae:ba:00:66:1c:a1:ba:83:a6:f7:6c:d6:
8a:af:c5:71:d3:8c:9d:26:f1:2e:03:4e:90:f7:58:8b:d4:d8:
20:c4:a6:e4:0e:6c:95:9d:15:d8:e0:29:0b:fe:e9:45:28:0f:
3a:db:c6:c4:07:a2:99:7c:e9:c9:1e:da:05:db:f6:95:ec:e8:
4b:55:07:9e:aa:e2:fa:9a:73:7f:7f:42:d2:a2:59:4d:75:2d:
2b:87:dc:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:34 2026 by rpki-client