
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162.cer
File: 266d4a1c-d5b0-4329-99d0-8647be3e7162.cer (raw, json)
Hash identifier: nhpw3xC9Zn8kx2ASkYz8ING/Kcm2tjp5Xer9cnEhn2c=
Subject key identifier: 94:80:EC:AA:1F:F3:5C:89:31:2F:61:F7:2E:15:96:80:90:7C:13:9C
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F58E69E77E518DFC401541780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/266d4a1c-d5b0-4329-99d0-8647be3e7162.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 30 Sep 2026 13:51:15 +0000
Certificate not after: Sat 30 Dec 2028 03:03:29 +0000
Subordinate resources: AS: 403008
IP: 2602:f2cf::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:e6:9e:77:e5:18:df:c4:01:54:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 30 13:51:15 2026 GMT
Not After : Dec 30 03:03:29 2028 GMT
Subject: CN=266d4a1c-d5b0-4329-99d0-8647be3e7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:9b:66:ad:0b:35:cd:c4:39:35:c0:01:ed:
28:d1:37:eb:6e:c6:d7:05:29:e5:a8:59:2e:a2:10:
7d:2f:eb:ec:67:2c:d9:d8:ed:cd:92:8d:c0:ea:d0:
8c:72:3d:ae:71:46:00:a1:0d:f1:da:cb:6f:7e:8e:
3c:ed:d0:c5:3b:d3:84:dd:0f:ad:ef:31:d5:84:be:
42:a9:3c:5d:24:f0:e6:ee:30:2b:69:d0:bb:40:79:
c8:31:01:d4:2e:66:67:b2:01:0a:18:f4:95:6a:ac:
33:79:e6:bb:a8:ef:61:b0:b3:13:bc:62:72:2a:97:
f9:7f:5b:5a:51:40:fd:b7:ac:86:d9:85:b3:61:c4:
db:68:2e:97:5c:d9:e0:22:6c:51:a1:61:70:93:7c:
eb:fc:fb:7e:43:e1:46:b0:9a:1c:b1:f7:1f:8f:80:
c0:a8:fc:cf:d7:2f:57:b3:ff:11:e5:e2:dd:bc:6d:
a9:95:bd:b7:e2:b7:72:11:4d:2f:ca:06:43:f0:4b:
b2:55:b7:e0:06:89:19:4f:ce:cb:92:a4:4f:e0:e6:
fc:03:33:97:a8:06:2d:04:1a:d3:59:f6:c0:a8:e9:
3c:a4:ce:af:35:90:c4:63:7f:1f:d1:71:43:ac:64:
d3:69:66:4d:17:41:4b:29:cd:38:2a:07:ec:99:8b:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:EC:AA:1F:F3:5C:89:31:2F:61:F7:2E:15:96:80:90:7C:13:9C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/266d4a1c-d5b0-4329-99d0-8647be3e7162/266d4a1c-d5b0-4329-99d0-8647be3e7162.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f2cf::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
403008
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:c0:b3:47:84:db:ac:22:8f:71:0f:b2:be:c2:10:99:bd:80:
3e:e8:80:af:18:10:98:3f:eb:c3:4c:6a:70:45:f2:03:a9:f4:
a5:50:8e:09:83:48:a2:57:3e:fb:c5:81:8e:bf:29:44:85:9d:
a3:d0:5e:43:25:24:16:c7:8d:cc:79:73:ed:f6:88:0a:e8:8c:
59:9b:a5:1c:00:e9:0f:38:68:4c:95:05:7a:c4:38:83:b6:1d:
9b:07:6f:9f:e4:e3:1f:69:fb:4c:15:f8:02:00:a5:54:27:92:
1f:ec:e3:b5:49:57:59:b0:a8:c3:76:ed:7e:bd:ed:20:25:51:
30:a3:15:d8:84:ba:e9:fc:6a:05:98:78:56:fe:b5:b0:45:43:
bf:5a:f6:2f:0f:a7:4d:1c:34:2b:43:69:55:36:d0:dd:1c:0e:
9a:0f:50:59:84:04:e5:9d:71:fb:1b:d3:74:be:7d:82:74:56:
e3:3e:07:a9:18:9d:c2:6b:58:ff:6b:6c:1d:d3:f6:0d:36:3b:
b8:59:b2:f6:66:c9:4b:c7:a5:fe:dc:3d:fd:7f:00:45:55:2e:
31:aa:3b:91:fd:e5:a1:0e:0e:29:05:5c:d6:66:87:57:60:f0:
33:ee:ae:47:a1:e5:29:3a:5f:e7:67:8e:7b:09:74:13:0c:99:
0e:97:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:35 2026 by rpki-client