
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87effbd2-7fe0-4b3f-a994-c3fac5ef1487.cer
File: 87effbd2-7fe0-4b3f-a994-c3fac5ef1487.cer (raw, json)
Hash identifier: LyFW0WB0Yc4Fy4/uG5Eimfxo2QOammsTUgxp/+xeoLU=
Subject key identifier: 9A:9C:0F:5A:7C:7E:EA:4B:1A:19:39:67:F2:02:1D:2F:E3:03:A7:B0
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F490DD2C288F9894643823680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87effbd2-7fe0-4b3f-a994-c3fac5ef1487/87effbd2-7fe0-4b3f-a994-c3fac5ef1487.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87effbd2-7fe0-4b3f-a994-c3fac5ef1487/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 24 Sep 2026 21:37:19 +0000
Certificate not after: Wed 27 Dec 2028 22:37:19 +0000
Subordinate resources: AS: 399893
IP: 2602:fc6e::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 02 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:0d:d2:c2:88:f9:89:46:43:82:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 24 21:37:19 2026 GMT
Not After : Dec 27 22:37:19 2028 GMT
Subject: CN=87effbd2-7fe0-4b3f-a994-c3fac5ef1487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:16:ed:5f:ca:90:a8:33:0c:04:22:38:3a:
38:13:9f:f0:02:f5:06:a9:dc:86:63:89:1a:e5:05:
a8:05:2b:57:55:9a:58:ee:6b:4d:be:79:76:e0:13:
c3:b4:11:59:26:10:0e:9f:b3:cb:da:4c:1b:50:06:
6b:97:97:d8:78:52:04:d7:16:1d:4b:0f:5e:66:f7:
fb:20:b0:a0:b4:c6:3a:94:61:fb:c5:0b:5a:a0:e9:
d2:ff:5c:06:66:32:c5:69:99:c5:ac:83:52:d5:97:
22:82:c4:02:c7:f4:15:66:4e:42:48:20:f1:aa:8a:
e7:01:78:12:cf:e0:fe:11:10:ac:de:86:1b:32:79:
6d:17:fb:10:1f:ac:18:59:aa:be:0f:96:4b:60:00:
9b:e0:52:22:d7:0f:46:f8:c4:25:5a:fb:7e:d3:12:
d1:78:7e:a9:00:45:92:0f:cb:16:4b:da:52:42:3c:
b1:77:a9:a3:5a:d0:16:e7:4c:ed:50:00:00:e7:1b:
4d:a9:61:0c:8f:0a:d4:15:6d:4f:ca:76:05:a3:60:
6f:63:11:0c:f1:07:42:9e:b3:31:eb:ad:62:00:72:
58:20:39:ec:b5:f0:fc:96:0a:f1:be:c9:e5:c2:84:
27:5c:44:03:2b:54:e7:da:b9:38:18:96:61:fa:44:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:0F:5A:7C:7E:EA:4B:1A:19:39:67:F2:02:1D:2F:E3:03:A7:B0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87effbd2-7fe0-4b3f-a994-c3fac5ef1487/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87effbd2-7fe0-4b3f-a994-c3fac5ef1487/87effbd2-7fe0-4b3f-a994-c3fac5ef1487.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc6e::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399893
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:db:7b:f6:96:f2:05:fa:11:ec:03:ef:fe:1a:38:f0:dd:11:
81:a9:6b:ea:29:fa:64:16:b3:1a:a9:92:f5:8c:a6:b1:96:ab:
28:d3:ff:4c:2f:1a:70:a0:22:83:74:0a:9e:d7:2d:6c:fd:a7:
8c:e8:5e:aa:0e:1e:96:f9:4b:a6:2d:5d:5c:41:2f:d5:64:20:
2e:c7:63:6a:67:65:c4:4d:96:53:bc:be:00:21:7e:1e:aa:b4:
ec:e8:a6:52:8e:1d:55:67:ba:46:a7:f2:ad:f1:89:41:f7:d9:
38:4f:ee:e5:65:9f:49:27:65:a3:64:c8:71:c8:54:f5:3d:90:
d4:90:39:62:ac:a6:9e:f4:3b:53:f7:0b:5b:b2:5e:b4:32:0c:
00:07:8e:e7:7f:39:a9:8e:08:18:73:21:1e:cd:cc:ae:6d:2a:
6a:65:b2:0a:08:13:cf:8e:e1:f7:31:0f:2a:b6:3f:23:3b:31:
df:e7:0f:28:46:91:61:f2:cc:0a:4f:3c:12:93:27:c0:9f:b7:
6b:3c:0a:4f:0f:19:b1:c8:2d:67:8e:03:61:45:84:2a:60:e4:
56:a7:79:ae:2c:76:e8:c2:6d:aa:75:9c:2c:a7:a2:40:bc:d3:
19:79:a3:63:c2:ac:98:81:de:55:86:37:86:63:24:d0:f9:d2:
23:3b:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:08:53 2026 by rpki-client