
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.cer
File: 6d91c088-4199-4ddf-8903-a38d9c8a4ae0.cer (raw, json)
Hash identifier: ywln7Pa6dESVf4MyTCbrjuFDC2mO/mS9zeRidUGHIe4=
Subject key identifier: 49:6C:94:9F:31:8B:C2:B9:C9:52:04:F4:CE:42:4B:47:8A:40:66:84
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E8422BBB3C50864DB0C373F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 16 Jul 2026 08:45:12 +0000
Certificate not after: Wed 18 Oct 2028 08:45:12 +0000
Subordinate resources: AS: 402505
IP: 23.137.36.0/24
IP: 2602:f68e::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:84:22:bb:b3:c5:08:64:db:0c:37:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 16 08:45:12 2026 GMT
Not After : Oct 18 08:45:12 2028 GMT
Subject: CN=6d91c088-4199-4ddf-8903-a38d9c8a4ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:fb:fc:67:89:17:8f:25:aa:71:d4:63:57:
e4:90:cd:d6:fb:de:7f:b7:69:95:7f:e0:9f:7b:8c:
6b:07:ab:c7:10:9e:aa:7d:dd:77:fb:47:b5:12:9c:
34:70:a8:57:10:a3:96:eb:60:b5:0c:f1:ea:a2:ee:
cc:ce:e2:6e:79:c4:4f:ed:5d:89:30:fe:db:b2:cc:
f7:35:d7:6b:12:35:18:8f:32:5e:ad:d4:19:ff:af:
8e:47:71:87:7e:2a:29:d0:61:89:ae:f2:e4:8b:e9:
68:84:b0:ad:8a:77:fc:8f:06:ab:31:85:90:46:73:
11:dd:0e:fe:28:11:72:24:2d:21:f6:cd:a8:ee:11:
e8:4b:78:bf:2b:68:32:41:be:02:65:3b:2c:d3:4c:
2a:fc:07:ad:25:72:bd:6b:c8:bd:93:dd:46:db:aa:
49:35:8d:77:f2:05:07:65:8a:71:2f:4b:01:0f:18:
72:de:8b:8f:c1:8f:0b:81:b1:bf:4e:b6:ba:5c:1b:
45:39:bb:51:32:19:7a:4c:0b:3a:0b:78:88:f7:8f:
33:b6:f8:dc:19:6f:fb:dd:7c:e4:7f:b7:cb:c2:52:
aa:a1:9d:0c:45:c3:7a:65:32:23:29:61:ec:3b:d7:
8c:64:89:f3:82:a2:1f:4c:c8:85:4a:79:d6:38:e5:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6C:94:9F:31:8B:C2:B9:C9:52:04:F4:CE:42:4B:47:8A:40:66:84
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d91c088-4199-4ddf-8903-a38d9c8a4ae0/6d91c088-4199-4ddf-8903-a38d9c8a4ae0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.36.0/24
IPv6:
2602:f68e::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402505
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1e:da:f7:d1:09:fb:7d:63:36:df:0f:ea:e6:11:a1:11:49:
a5:37:66:cf:9b:9f:2f:a0:f7:87:9f:97:65:11:a0:36:a9:ae:
b1:a5:98:9e:0d:ad:3f:d7:48:33:2e:4c:06:52:41:00:b3:79:
62:3c:99:58:5d:31:17:2e:84:d2:78:17:cf:e4:b4:ae:9b:ba:
4a:31:81:22:3b:51:c2:87:2c:89:83:2d:9c:b7:4e:89:f1:aa:
86:37:f0:b1:9c:ba:e7:ec:61:8f:b0:a8:bd:6c:cc:25:98:46:
4c:d8:2b:30:9d:df:5e:44:68:fd:e4:3f:5c:53:6b:f1:a0:1d:
c3:7a:7f:f6:09:90:ff:4c:41:c9:dc:a5:13:d7:41:19:a6:5e:
be:24:b3:9c:08:b9:b3:dc:5e:3b:4f:24:af:c3:65:33:c1:1b:
7a:53:03:eb:4a:b9:17:f6:d3:04:6e:d5:b8:36:fe:f1:37:54:
f0:f3:ea:1e:52:8d:64:3f:c3:67:5c:1c:ba:ea:26:0a:7d:bf:
44:23:f0:cf:e6:f5:61:9f:b7:4b:a5:41:e8:77:79:86:45:f3:
c1:ec:07:41:06:e6:fc:18:15:6b:56:5e:a5:c3:d4:7e:ff:0e:
da:38:61:31:2f:64:12:a5:60:b5:50:28:01:e2:d5:da:01:b4:
2b:ac:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:11 2026 by rpki-client