
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bc2b1c5-8b04-4382-9e90-bb7e70def477.cer
File: 0bc2b1c5-8b04-4382-9e90-bb7e70def477.cer (raw, json)
Hash identifier: lZ/s96RfQnerLVIdIfgj67epm28SPETzEVA1ZoXukEM=
Subject key identifier: FE:6B:07:32:E2:D2:5D:ED:F2:0A:E2:31:A3:9A:2E:FB:DA:04:68:5E
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F7DD8662A6733D1CDB6E1F200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bc2b1c5-8b04-4382-9e90-bb7e70def477/0bc2b1c5-8b04-4382-9e90-bb7e70def477.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bc2b1c5-8b04-4382-9e90-bb7e70def477/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Oct 2026 19:27:31 +0000
Certificate not after: Mon 15 Jan 2029 20:27:31 +0000
Subordinate resources: AS: 402856
IP: 2602:f2ba::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7d:d8:66:2a:67:33:d1:cd:b6:e1:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 13 19:27:31 2026 GMT
Not After : Jan 15 20:27:31 2029 GMT
Subject: CN=0bc2b1c5-8b04-4382-9e90-bb7e70def477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:16:fc:ff:33:19:7e:d8:19:f8:37:cf:7d:
4b:d2:85:89:ef:b4:36:15:00:3c:98:d2:18:90:f3:
b7:3a:32:81:4b:f9:27:f3:f6:f6:9d:12:cd:e7:dc:
bd:40:03:09:12:45:29:13:03:0f:10:18:15:03:6c:
73:49:7f:f5:31:8e:a8:91:4e:2f:f8:e0:d3:85:bc:
d3:e1:b4:8c:26:c4:db:f9:d5:e4:ca:16:6a:da:5f:
ff:da:ee:88:74:1e:b2:ff:51:11:9c:f6:41:d7:ad:
a1:7c:6e:4c:29:d8:ff:0d:e6:63:9f:6c:c2:78:10:
14:bb:d2:04:a4:cf:12:ec:23:51:69:1c:da:97:af:
5a:05:a3:a0:3c:d5:c2:18:bb:b8:5a:7e:a8:15:b4:
2f:fe:35:2c:10:d7:78:79:da:fc:50:3b:33:8a:c2:
5c:30:d2:8f:0c:9f:e0:b4:e0:f6:e8:ef:a1:8f:20:
6d:ba:d2:e8:1f:8e:6d:dc:d0:22:2c:50:6e:06:df:
45:c2:02:97:23:1f:b2:bc:81:87:be:87:be:5b:c4:
c3:8b:75:de:ed:a7:4a:a5:a0:67:60:8a:cd:44:fe:
10:4c:72:e4:4e:a8:d8:f5:0f:cb:e8:99:fd:2a:21:
a0:44:9a:80:ca:c5:c8:74:96:f6:1a:6e:e2:e1:34:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:07:32:E2:D2:5D:ED:F2:0A:E2:31:A3:9A:2E:FB:DA:04:68:5E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bc2b1c5-8b04-4382-9e90-bb7e70def477/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bc2b1c5-8b04-4382-9e90-bb7e70def477/0bc2b1c5-8b04-4382-9e90-bb7e70def477.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f2ba::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402856
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:91:1e:4c:8d:45:92:32:96:dc:38:2e:90:63:bd:5b:0a:f1:
3e:41:46:f5:10:92:4c:b2:28:d0:63:53:b2:08:a0:6d:0b:46:
ee:e4:82:cc:7f:53:93:8d:3a:44:49:b2:90:38:08:94:4a:31:
ad:f9:16:6b:01:0b:17:42:63:50:d9:af:59:15:55:57:22:4e:
63:2c:21:73:6e:b1:bf:a9:00:9b:08:ea:3f:36:60:0f:a5:f6:
dd:2f:cd:05:73:68:cb:08:2b:4b:c7:f5:b3:0e:30:6c:54:71:
5d:cf:88:2a:88:db:92:8f:d6:e8:2e:b9:da:e3:a0:80:2c:42:
5d:e0:e0:4e:25:0d:65:00:9b:4b:15:09:95:e5:f5:c6:c6:09:
0d:06:ca:21:30:33:93:30:2b:54:37:4c:3f:0a:63:b8:7b:1e:
33:dd:4a:b1:3a:7c:f4:48:c9:f9:51:46:a6:02:34:7f:c7:d3:
74:cb:cc:2a:0b:4e:ce:f4:1b:5c:94:44:68:d3:69:f5:d8:7e:
35:6c:bb:57:30:0f:44:2c:8e:37:ca:13:93:8b:1d:d4:fa:71:
42:34:d0:b0:fd:ec:8e:f3:a2:7a:f5:84:a2:05:6d:79:e2:b9:
1b:24:29:66:8f:dc:a5:65:9a:52:bb:2c:c7:52:a6:af:3b:7d:
14:c7:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:42:05 2026 by rpki-client