
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
File: fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer (raw, json)
Hash identifier: eMR50C6i5S+Udv063HaBoi+PKNXfOXOSLg5Sd588quw=
Subject key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E18A76463189D03B5DC45C8E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 07 Jun 2026 20:45:11 +0000
Certificate not after: Sat 09 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 40670
IP: 69.49.176.0/20
IP: 162.219.104.0/21
IP: 198.246.48.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:a7:64:63:18:9d:03:b5:dc:45:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 7 20:45:11 2026 GMT
Not After : Sep 9 20:45:11 2028 GMT
Subject: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:7a:45:e0:e5:b0:ba:7b:56:13:bd:57:79:
0b:4a:85:95:2d:32:57:73:36:77:2b:59:21:9c:1b:
58:7a:96:9e:61:96:41:b5:2b:10:e7:d7:e1:1f:18:
25:aa:8a:7e:9c:3a:d0:e9:b7:2f:5f:a1:e1:d1:83:
e5:1d:48:06:3a:a5:78:64:03:5d:e5:56:c4:95:b3:
b4:eb:6e:28:d2:cc:ff:06:e7:16:7e:7d:c3:04:d0:
26:3b:21:ae:91:22:a8:a3:b7:42:98:c0:fd:c3:e8:
83:b4:d4:89:2d:94:2f:0c:8f:9b:4d:45:1f:93:c2:
dc:6a:6e:fb:5b:18:e7:72:29:29:ce:a3:1c:d4:2b:
29:ea:03:e2:0d:93:a6:84:b2:39:c5:77:22:14:df:
f1:54:4d:8f:5a:bb:39:22:07:2c:91:80:8a:68:6c:
85:02:79:1f:c5:00:78:c1:73:eb:6b:e6:2b:b6:a5:
f5:56:d3:80:69:15:1b:63:97:d9:9d:7e:d2:a0:84:
9b:fc:c0:89:2d:ff:b6:fe:1d:4d:48:69:92:f2:eb:
f0:0c:d1:2c:9d:3d:47:e1:67:01:9f:05:05:70:c5:
03:3d:f3:53:b0:5a:04:df:14:be:d0:78:f6:d5:d0:
a8:5e:a8:eb:e3:5d:6a:8b:79:7a:4b:6c:f2:35:ff:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
69.49.176.0/20
162.219.104.0/21
198.246.48.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40670
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:09:18:77:17:6d:1c:18:33:5a:7f:ce:3f:99:87:2d:2d:21:
ca:b5:53:b0:55:0b:d4:39:aa:a8:95:33:ab:63:5e:75:45:ba:
f3:25:bf:3a:eb:7f:d4:80:e9:36:b7:8d:57:05:ae:3d:35:99:
6c:29:b8:a2:ac:71:16:2e:ef:a7:9d:50:46:9e:88:5b:21:bc:
cb:ff:e4:d0:17:2b:80:a0:17:9d:a5:49:50:f5:c0:16:95:5d:
7e:5a:ad:70:be:1c:78:b2:db:2a:20:23:e0:b1:90:43:d7:5d:
5c:a0:30:06:42:7c:b8:26:be:1e:e0:8d:82:40:d8:94:3a:a2:
52:57:61:cb:24:78:61:55:f7:0c:12:60:9d:41:f1:57:df:30:
ca:27:0f:f7:fc:1f:17:0b:36:b2:58:23:04:db:02:9f:ff:28:
d5:ce:39:c0:4b:4a:28:aa:eb:95:be:a4:1e:b4:e9:ea:51:04:
b4:ca:0d:d5:d6:36:2c:7d:a9:91:59:60:8e:8a:cf:1d:f4:16:
be:79:f2:c3:2e:82:62:82:32:cd:75:e0:fe:90:c2:d0:54:71:
50:28:13:7a:b3:8c:18:b3:e4:f4:25:91:95:b7:08:0b:cc:94:
de:9d:c5:5d:a2:8b:3b:1a:ad:1e:ed:ec:75:8a:a3:96:c4:56:
52:5e:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:58:08 2026 by rpki-client