
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b2bdd536-fae9-4011-9fc7-524c9a97ad29.cer
File: b2bdd536-fae9-4011-9fc7-524c9a97ad29.cer (raw, json)
Hash identifier: C9rFGNh+jNlTHGx6ErJ5teR+1ntjwVcV+RF0DP7DiP0=
Subject key identifier: 76:28:3A:76:05:07:6C:BE:77:49:C8:88:05:3C:65:24:FA:F2:4C:EF
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F72450A9BC5847605CAF99880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b2bdd536-fae9-4011-9fc7-524c9a97ad29/b2bdd536-fae9-4011-9fc7-524c9a97ad29.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b2bdd536-fae9-4011-9fc7-524c9a97ad29/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 09 Oct 2026 15:56:43 +0000
Certificate not after: Thu 11 Jan 2029 16:56:43 +0000
Subordinate resources: AS: 393684
IP: 23.152.16.0/24
IP: 104.245.184.0/22
IP: 2602:ff5f::/36
IP: 2606:94c0::/32
IP: 2606:9540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:72:45:0a:9b:c5:84:76:05:ca:f9:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 9 15:56:43 2026 GMT
Not After : Jan 11 16:56:43 2029 GMT
Subject: CN=b2bdd536-fae9-4011-9fc7-524c9a97ad29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:f8:a7:c8:1d:3a:89:72:91:7e:b1:4e:84:
24:7e:df:e6:68:bd:e8:bc:69:ab:44:75:2a:87:8e:
10:69:77:e3:be:8f:e5:65:cb:49:0b:7b:ad:92:59:
61:47:43:08:34:d8:90:02:cf:65:f7:62:4a:94:d7:
98:d3:3b:37:7d:fa:c8:b1:81:43:5a:f0:8a:2e:95:
e2:00:f8:08:25:ab:25:15:01:f5:6b:70:5d:42:c2:
b0:cf:2f:d0:93:fc:b0:ad:7c:d4:1f:c2:2d:8c:56:
aa:b7:f5:d3:56:c6:9e:91:4e:37:ca:e8:a5:65:da:
07:75:ec:2c:98:90:15:05:28:c8:cf:c3:d7:eb:4a:
2d:29:dc:42:c6:8b:23:5a:19:d4:2c:34:19:6f:e8:
ad:27:7c:b4:1a:10:ed:3b:42:cd:3a:66:a2:f9:7a:
bd:08:ec:6a:b1:f0:f6:8d:97:a5:d9:89:65:1d:48:
55:9e:ad:64:e7:62:d6:20:02:77:63:30:3f:3b:71:
d8:90:fa:4e:eb:88:5b:a5:ba:20:ee:86:4a:c6:66:
21:98:51:c6:b8:4e:79:d3:70:78:59:a1:b0:6b:19:
94:82:e8:34:43:93:68:36:2b:ca:f9:2d:4e:ed:ec:
5f:a6:7f:5f:27:b9:13:34:c4:0a:a4:6f:e7:62:0b:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:3A:76:05:07:6C:BE:77:49:C8:88:05:3C:65:24:FA:F2:4C:EF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b2bdd536-fae9-4011-9fc7-524c9a97ad29/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b2bdd536-fae9-4011-9fc7-524c9a97ad29/b2bdd536-fae9-4011-9fc7-524c9a97ad29.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.16.0/24
104.245.184.0/22
IPv6:
2602:ff5f::/36
2606:94c0::/32
2606:9540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393684
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:13:c2:59:6c:1e:61:23:d8:ac:6b:b0:b6:f9:ba:b7:bc:e5:
63:a3:3f:55:51:cf:57:0b:25:a2:f1:aa:96:f4:ac:08:59:dc:
5e:55:27:5b:42:3a:a6:15:5d:94:07:04:7c:bf:21:9c:cb:96:
42:be:dd:f8:c5:c9:ec:b8:ce:11:1b:97:f9:02:fa:1e:30:c4:
97:1e:0a:78:79:7b:8f:2a:46:61:51:f6:70:08:62:af:8f:e0:
ff:3c:d3:57:1b:d0:e7:e5:0a:39:25:7e:94:7a:25:65:94:a9:
3d:63:00:f0:10:c4:ae:56:66:e0:2b:a9:a5:8d:2e:ff:86:98:
0d:0d:f3:6b:fb:7c:ff:ab:5f:3a:6f:a1:98:9d:8c:b1:70:db:
7d:66:5b:84:53:a5:f6:76:a8:cb:b1:01:86:43:14:18:f4:41:
d3:66:b1:0f:a1:fa:d0:01:ca:ce:ca:22:14:07:aa:f0:6b:e5:
ad:35:9b:b2:df:2d:30:1a:36:65:08:6e:a0:8d:e1:8c:ba:d5:
b4:c9:65:d3:77:db:4c:bd:0b:4e:cd:57:e0:96:77:87:a0:1e:
83:4f:67:87:22:31:63:72:11:be:98:a4:53:be:ee:8c:d3:5d:
8b:48:34:eb:28:a8:b1:7f:c9:29:7a:a8:2d:7e:1b:61:f0:14:
74:b9:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:42:08 2026 by rpki-client