
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364.cer
File: e7ec0b2b-7ba6-415a-9a16-5f185478d364.cer (raw, json)
Hash identifier: bNJ4ylrd1mnOnuq/Q1T+FxIdSnnShbUL1tA+1Se9YEs=
Subject key identifier: 82:15:6C:42:15:0E:95:23:EF:3D:40:40:ED:BB:A9:F9:67:80:20:1C
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E8422BBBFB1591C08CCF1B000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/e7ec0b2b-7ba6-415a-9a16-5f185478d364.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 16 Jul 2026 08:45:12 +0000
Certificate not after: Wed 18 Oct 2028 08:45:12 +0000
Subordinate resources: IP: 23.137.84.0/24
IP: 2602:f68b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:84:22:bb:bf:b1:59:1c:08:cc:f1:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 16 08:45:12 2026 GMT
Not After : Oct 18 08:45:12 2028 GMT
Subject: CN=e7ec0b2b-7ba6-415a-9a16-5f185478d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:9c:7a:0a:1d:bd:b0:09:ec:5b:58:77:be:
81:d7:24:47:fe:24:2f:19:27:c6:e3:40:79:7c:82:
49:b7:d8:f3:8f:5c:9f:fa:90:1a:c2:25:a8:72:f0:
5e:04:74:76:d9:6e:b1:b4:64:9a:b5:55:35:37:d0:
bc:90:e1:a1:08:3f:cf:45:7a:b3:28:4b:fa:87:1d:
75:18:a5:69:2e:08:9c:ae:d6:6c:f0:42:0b:ba:9a:
7d:c4:67:22:b3:f4:f6:4a:4f:dd:9f:52:70:35:cd:
df:68:c3:c7:c6:4b:b3:eb:a7:c5:70:48:da:3b:54:
04:3c:9c:a8:56:27:61:68:35:8f:82:08:75:e5:8e:
f4:aa:6e:f0:78:14:8e:45:39:84:0d:d5:25:e7:39:
3b:40:d9:c9:25:5b:b0:7c:60:b9:de:da:ff:45:90:
af:e3:e6:3a:07:d0:75:27:bb:82:3e:53:1d:23:8c:
b3:96:0d:7b:dc:58:fa:ea:c3:52:8b:32:da:ad:58:
d7:eb:bc:64:47:a9:d3:b8:d3:8c:45:eb:2e:ae:7a:
c6:5b:1f:55:1b:01:06:6d:92:7b:7b:ad:ce:ac:c3:
70:41:6c:20:d8:14:2e:4e:fe:d9:20:f5:7e:f6:57:
93:8d:8e:ad:30:86:5a:4c:2c:13:d9:b9:33:ee:3c:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:6C:42:15:0E:95:23:EF:3D:40:40:ED:BB:A9:F9:67:80:20:1C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/e7ec0b2b-7ba6-415a-9a16-5f185478d364.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.84.0/24
IPv6:
2602:f68b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:75:de:13:e8:b7:96:6b:03:f2:c9:5b:c3:0e:eb:cc:e6:25:
01:9b:dc:ab:21:81:4e:c0:39:1f:cc:0c:82:e7:91:f4:61:a4:
bf:1b:56:da:72:21:16:f9:ff:9d:31:e3:aa:57:70:4e:68:12:
94:21:6e:b0:c7:e3:f2:63:7b:d5:5f:88:c2:2d:7a:25:4a:ef:
88:d3:da:08:5f:ed:d1:2a:aa:59:f5:87:55:45:f8:3e:bc:49:
b1:79:7b:11:dd:4e:91:c1:a9:5f:d4:4c:22:96:0e:e8:bd:ca:
36:83:bc:3f:14:a2:67:d5:c5:d9:11:bd:ff:10:1d:2c:c6:4c:
5d:74:f7:a7:41:2a:e3:d0:13:19:4f:44:9a:c9:0d:3d:db:f6:
ad:8a:75:5a:ff:e2:a6:3e:31:d9:03:29:95:e0:07:0c:05:f0:
d1:e4:52:4b:25:24:80:fe:65:eb:32:0a:31:34:27:da:2b:bb:
a6:e4:f3:c9:ed:1d:7a:7f:65:88:a2:3d:38:2d:02:e1:9e:3c:
8c:1f:0a:d7:d6:b4:56:c8:4a:cf:ee:af:15:9e:fd:cf:9e:6a:
7e:80:28:5c:30:ee:60:07:88:31:70:54:ac:8b:3e:c8:f8:0b:
79:46:c3:43:b7:c0:5b:b9:b3:09:78:78:90:10:2c:95:5d:e0:
dc:a3:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:47:00 2026 by rpki-client