
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer
File: 0c9b7b78-0431-4030-be95-6889ed40d6e6.cer (raw, json)
Hash identifier: IXVi/86Wjq/UyOE+ex1BTm/30QHfM7Q5CYIvcz8lBoc=
Subject key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E90B2D0126EDB864E7A827900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 20 Jul 2026 20:45:12 +0000
Certificate not after: Sun 22 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 18904
IP: 192.34.34.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:b2:d0:12:6e:db:86:4e:7a:82:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 20 20:45:12 2026 GMT
Not After : Oct 22 20:45:12 2028 GMT
Subject: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:14:57:9f:c2:48:d3:3c:31:db:d8:e0:f8:
74:b6:70:31:b5:05:86:96:05:1f:57:25:d6:5f:96:
af:a8:dd:a8:06:f8:c8:c6:28:b6:8d:08:75:8c:32:
f9:07:3c:63:32:1b:96:30:54:a4:11:5c:ae:4f:9d:
a3:14:15:1a:20:6b:37:51:6e:0d:d0:42:7f:22:f9:
95:9c:9c:7c:d1:ba:0b:2f:8d:28:e2:78:2a:d4:d2:
1e:e9:49:a3:11:80:c2:f2:ee:ab:4f:27:6d:b1:38:
b0:36:10:34:9f:c6:da:f6:a3:1e:4b:3b:d6:e4:9d:
d0:f9:95:65:ea:d3:24:4c:c8:dd:23:29:fe:a0:80:
02:e5:07:e8:a3:9c:33:eb:f2:05:f5:e1:3b:1d:53:
a4:d4:22:b6:72:44:38:4e:bd:76:ac:99:35:f6:c9:
41:66:76:ca:5a:30:6e:e2:fe:84:7b:ec:8e:a9:28:
be:6b:e7:81:98:8c:79:87:37:60:5e:aa:b9:d5:20:
ee:ee:7b:e5:f4:69:aa:fa:d8:82:e7:1b:8e:3d:09:
fa:81:61:6e:87:3c:19:51:a2:0d:b1:e3:68:97:6a:
89:98:db:d7:4e:c6:f7:50:bd:57:33:43:30:fc:f5:
ed:c7:7f:2d:8f:41:e0:db:3c:fc:1d:95:b2:86:16:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.34.34.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18904
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:26:f5:69:6e:79:dc:39:83:29:67:6d:2c:d7:3a:f1:bd:63:
e0:c9:7e:ce:7e:c7:16:63:45:50:60:fb:04:ab:05:c0:f0:53:
5e:1a:8d:8c:85:70:15:66:9e:0e:c3:1a:60:35:c8:c0:b4:f5:
65:d1:1e:9e:8f:5c:6f:ca:7e:5e:cb:cc:2e:02:06:dd:ed:21:
34:59:22:da:5a:82:0c:b4:67:4f:ca:47:f7:5a:a5:ef:b5:a6:
c7:5e:41:8b:e4:60:a5:38:5a:33:c3:8d:ea:b0:95:66:88:82:
33:c6:c4:72:5c:8c:32:a1:ac:85:63:6e:8c:3d:28:61:0f:a2:
51:24:c0:9d:ad:52:c5:3c:3a:9e:5e:9b:d1:5b:2f:d9:e3:ee:
be:ec:84:7b:f2:8d:f3:78:65:45:9e:a2:fa:ff:ed:c1:b3:92:
7a:92:76:8a:1f:6f:50:c3:b3:e7:30:75:56:95:1d:c0:7e:4b:
6f:64:f7:cc:26:96:f7:17:a4:c6:b5:46:e5:d3:35:9a:f3:7c:
9f:b0:d1:6d:f4:5a:db:17:f4:7c:1f:73:10:2e:bf:5e:91:27:
c5:78:ee:f2:69:91:c8:00:d6:8e:1a:d8:ab:c0:02:21:5d:f2:
31:24:44:09:96:a2:02:e0:1c:c6:cf:8d:bb:bd:6a:a1:c4:a2:
7c:2f:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:43 2026 by rpki-client