
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6682c5e9-ce7f-425d-ab54-429f10d22e4a.cer
File: 6682c5e9-ce7f-425d-ab54-429f10d22e4a.cer (raw, json)
Hash identifier: ypn+PZ3fWedihnWwi1a0nEofHK2mwXCPpKpHXyzA+Lo=
Subject key identifier: 8C:E6:3D:3E:7C:09:C0:F2:74:B7:C4:87:B0:CE:D1:0B:28:0D:18:EF
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F6B5F7BD27F3FCE5C7691A750
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6682c5e9-ce7f-425d-ab54-429f10d22e4a/6682c5e9-ce7f-425d-ab54-429f10d22e4a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6682c5e9-ce7f-425d-ab54-429f10d22e4a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 07 Oct 2026 04:39:20 +0000
Certificate not after: Tue 09 Jan 2029 05:39:20 +0000
Subordinate resources: AS: 18505
IP: 156.9.128.0/22
IP: 199.115.28.0/23
IP: 209.112.84.0/22
IP: 2604:c9c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6b:5f:7b:d2:7f:3f:ce:5c:76:91:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 7 04:39:20 2026 GMT
Not After : Jan 9 05:39:20 2029 GMT
Subject: CN=6682c5e9-ce7f-425d-ab54-429f10d22e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:63:7b:59:59:3d:87:a2:49:2f:f7:e7:5c:
df:1e:6f:11:f7:03:ef:a1:1a:7e:a6:0e:a5:a6:3b:
47:4b:f9:25:ab:07:e7:93:53:96:ca:f6:56:12:ae:
b5:bb:13:9a:e5:41:ce:02:83:21:0b:e4:6a:d0:52:
c0:8e:5a:ac:66:e8:58:d7:a8:d3:cd:c3:1b:78:7f:
48:ff:33:a8:6d:30:07:14:b9:a1:bf:d9:81:a5:f7:
6b:1b:ff:7d:fa:1d:e4:ee:ef:0e:3d:23:2c:72:6a:
53:97:4b:18:fe:46:bb:97:01:84:c7:54:92:d9:ce:
76:87:f6:7e:2c:44:ec:b9:85:d7:f5:e4:7e:bf:23:
bd:01:ea:44:5a:dd:b0:c2:05:85:0f:ea:c4:5f:1f:
f0:2b:48:d7:2a:7f:b0:80:ab:12:f1:04:ec:95:5e:
3a:38:b3:11:17:4d:dc:cf:a8:9c:66:59:5a:91:ef:
f2:19:94:3b:b1:cc:21:ea:d1:95:85:a0:74:e4:59:
8f:47:86:94:67:8a:b7:33:d5:8e:ae:bc:fc:f8:48:
7d:e0:85:58:85:f6:21:fb:c8:2b:6a:f2:fa:de:a9:
8d:a4:28:4f:db:4f:1f:29:af:ba:b4:7c:b3:bc:1c:
7e:09:1f:85:fa:3e:19:69:df:df:f4:ba:22:c1:29:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:3D:3E:7C:09:C0:F2:74:B7:C4:87:B0:CE:D1:0B:28:0D:18:EF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6682c5e9-ce7f-425d-ab54-429f10d22e4a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6682c5e9-ce7f-425d-ab54-429f10d22e4a/6682c5e9-ce7f-425d-ab54-429f10d22e4a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
156.9.128.0/22
199.115.28.0/23
209.112.84.0/22
IPv6:
2604:c9c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18505
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:32:6a:6d:28:6f:45:04:6a:34:1e:fc:bf:ca:24:de:85:f7:
0c:50:a3:1e:2c:cb:72:90:38:ed:2b:fd:6a:8f:ba:68:94:f8:
78:bb:3e:2c:6a:35:64:5c:63:da:51:9c:76:04:f3:85:e2:52:
c6:a9:53:de:cb:30:38:b4:51:2e:31:17:bf:d3:15:62:67:6a:
7c:37:07:bc:62:9f:38:16:61:f1:5c:b9:a0:df:8e:54:52:d5:
a0:98:55:2c:f0:a9:d0:e7:e4:c0:06:97:1a:e8:59:93:ed:0a:
0b:c2:3f:58:2e:e3:42:ab:a4:f8:c5:eb:0b:da:31:f3:19:3d:
9b:4b:15:4e:5e:a2:1c:e8:bb:40:60:a2:8d:a8:eb:95:e4:6a:
c1:40:54:ff:ff:85:db:0d:11:f9:e2:d6:cb:5b:85:33:a4:2f:
e5:b3:e5:1a:22:47:89:9a:59:8e:32:f2:cf:92:f6:42:e5:bb:
9a:10:60:65:62:bd:c1:bf:aa:be:42:59:84:90:c4:4f:b4:1b:
8a:c9:59:3d:71:8e:9b:e8:83:09:41:b3:92:56:ea:52:aa:f6:
68:39:de:40:75:60:48:92:ea:8d:83:ff:53:49:89:2b:a9:d5:
b1:18:a8:c7:70:3b:96:55:fb:19:80:60:5a:5b:41:a5:da:3a:
60:42:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:40:31 2026 by rpki-client