
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ceacb5b-963d-4997-abae-61cd3de1fbdb.cer
File: 8ceacb5b-963d-4997-abae-61cd3de1fbdb.cer (raw, json)
Hash identifier: IOHGHocZGJc9Ojv5adsPQCJF+6gNkbOVUxmQZwKA2TA=
Subject key identifier: 86:AD:9A:78:54:B8:7E:1B:4E:36:31:EB:1E:01:2A:7C:60:38:C4:EE
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F505153AD33E5DBCB1125A800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ceacb5b-963d-4997-abae-61cd3de1fbdb/8ceacb5b-963d-4997-abae-61cd3de1fbdb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ceacb5b-963d-4997-abae-61cd3de1fbdb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 27 Sep 2026 12:03:59 +0000
Certificate not after: Sat 30 Dec 2028 13:03:59 +0000
Subordinate resources: AS: 401142
IP: 2602:f2d7::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:51:53:ad:33:e5:db:cb:11:25:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 27 12:03:59 2026 GMT
Not After : Dec 30 13:03:59 2028 GMT
Subject: CN=8ceacb5b-963d-4997-abae-61cd3de1fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:2f:ef:39:bb:35:40:94:22:ca:d8:02:f8:
4a:5f:97:d5:76:41:22:50:81:17:8b:ae:8c:62:20:
38:94:5f:57:49:2c:5b:dd:b3:25:ed:d3:69:04:ee:
26:5e:c4:3f:48:2b:bd:28:6e:10:ba:e9:7a:01:e3:
d3:25:61:d3:f0:be:4a:20:29:9a:17:1a:ae:39:f5:
6a:92:cf:df:06:5d:86:b3:51:35:23:c5:28:a8:8f:
92:62:da:2e:8c:5d:b2:85:b4:46:14:e3:86:a6:42:
c1:e1:1f:3d:08:83:c9:7b:70:32:5a:65:bf:cc:8e:
88:43:e4:6a:68:5e:73:36:d2:15:51:84:26:e3:5c:
ff:a2:8f:60:7b:a3:9b:59:e0:67:89:e6:22:6b:39:
d6:e4:ab:e5:2a:64:b5:80:8f:10:34:28:80:f4:7d:
e8:58:d8:5f:f3:27:aa:3d:78:e1:2d:d7:19:e4:a5:
3f:bb:06:a5:47:a2:a2:3f:39:ce:ce:08:2f:88:87:
3d:f7:25:90:f8:73:e8:ee:40:78:a7:39:06:e8:77:
92:c7:22:1d:55:87:47:df:66:89:ea:57:87:7b:98:
54:a4:63:c3:3b:6c:b7:ac:6d:7b:d2:d0:9d:da:e5:
f2:13:62:59:44:d4:5c:ad:e9:6d:2f:47:04:d5:f7:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:9A:78:54:B8:7E:1B:4E:36:31:EB:1E:01:2A:7C:60:38:C4:EE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ceacb5b-963d-4997-abae-61cd3de1fbdb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ceacb5b-963d-4997-abae-61cd3de1fbdb/8ceacb5b-963d-4997-abae-61cd3de1fbdb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f2d7::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401142
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f2:3a:59:3c:ec:2b:54:47:f2:06:f0:0e:c7:29:5c:da:a8:
a3:3e:dc:d5:bf:3e:a9:b0:4e:95:7f:09:58:4b:bc:e5:f3:d5:
9c:e3:2d:12:74:d2:c0:2e:6e:ce:d4:4c:b6:72:56:86:23:6f:
b6:cb:2a:58:89:ba:cc:71:2b:83:fc:ea:ae:2d:48:74:cb:a9:
6e:8a:1d:cf:bf:48:c3:8e:f9:e6:4d:85:3f:83:f2:f9:17:91:
f9:5d:2c:f3:58:02:08:a5:78:e0:ba:0c:ad:7d:21:42:69:e2:
03:29:96:59:07:b7:0b:d9:7b:51:5b:63:2c:64:9e:e3:d6:ba:
34:f2:82:6f:38:4b:9b:d0:b7:57:0d:ab:98:95:18:4d:5e:ee:
4d:31:cf:70:08:85:06:e7:0b:0f:fd:98:75:64:66:17:69:2e:
dc:81:ba:30:ea:0e:b2:5d:1d:f4:fc:6f:5c:b9:1c:31:e8:2e:
87:f0:cb:a2:35:34:cd:11:c2:e0:6f:df:7f:71:54:6a:88:70:
ad:60:51:c4:c1:b5:fc:90:3f:0b:69:49:0d:9b:66:1c:16:3f:
f8:39:d6:28:30:c8:20:49:ef:64:1c:f0:48:0a:78:4c:c7:b0:
21:b1:54:53:b1:0f:39:6f:2f:63:60:dd:19:ec:df:24:ec:ea:
f6:08:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:47 2026 by rpki-client