
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e.cer
File: 04d439cc-e13c-43bf-a782-47c58b71fb3e.cer (raw, json)
Hash identifier: NWuxMxWAdLfZbj/TQJeZJ96/bZQJBAP/lYPr2AjJGgM=
Subject key identifier: B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584F83515C7B37C1861ED734D500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 15 Oct 2026 18:30:17 +0000
Certificate not after: Wed 09 Aug 2028 05:00:44 +0000
Subordinate resources: AS: 398567
IP: 23.162.80.0/24
IP: 2602:fd2d::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:83:51:5c:7b:37:c1:86:1e:d7:34:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Oct 15 18:30:17 2026 GMT
Not After : Aug 9 05:00:44 2028 GMT
Subject: CN=04d439cc-e13c-43bf-a782-47c58b71fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:dd:32:06:8a:da:8c:2d:1c:7c:ae:fe:fb:
41:7b:f4:9a:97:b8:ed:2b:e8:5b:ca:9f:2c:31:0d:
76:53:3d:72:c7:fe:35:fa:99:d3:23:9a:6e:4b:3e:
2a:2d:2c:4d:a6:ed:90:18:1b:31:40:ba:6e:7f:49:
a7:6d:c0:44:08:4e:64:ad:bd:3d:5a:6d:7c:02:f7:
15:2a:02:37:0f:56:9d:83:d0:60:ba:ec:99:94:c6:
12:87:49:53:02:46:d9:ce:9b:41:b3:84:93:04:2b:
c5:17:b7:68:fc:ad:c3:e8:5f:34:2e:d9:22:d5:11:
5b:29:49:92:a1:f2:c0:d2:4c:af:3a:5b:eb:77:68:
41:29:10:db:19:af:84:a0:7d:71:64:eb:98:2d:d3:
c5:fb:1c:fb:3c:e1:c1:75:66:5e:09:f9:98:d5:fd:
23:eb:0b:ca:10:1a:bd:fa:f8:a5:48:c4:90:f5:5a:
a8:c7:84:cc:42:a0:9e:24:13:ae:9c:ca:bf:ce:5e:
c8:e1:7a:85:b7:fb:3b:61:5f:7c:cf:ef:5c:6a:35:
01:52:da:c1:bd:44:44:03:a9:98:37:2e:a4:8c:d8:
f5:31:6e:54:92:e0:f4:7e:d9:02:f6:c0:e8:34:c7:
a9:f6:fb:10:ac:17:b5:24:65:05:74:eb:ad:04:94:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.162.80.0/24
IPv6:
2602:fd2d::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398567
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:08:b2:01:71:a3:59:56:b1:d8:de:dc:1d:25:92:b1:c1:df:
86:17:c8:98:f2:dd:c3:60:ca:8b:14:73:ff:a5:20:00:57:18:
a7:fa:20:9b:6a:c3:6c:29:6d:b1:d0:9b:cc:e1:c2:17:7a:30:
8c:6c:f3:56:f7:fb:0d:d1:f8:69:44:2c:20:2d:07:d8:e8:87:
d0:f9:47:61:df:81:56:6f:77:c8:fb:50:54:6b:b3:98:7b:eb:
e8:a6:21:cf:0a:44:09:d4:47:1d:b2:eb:30:01:57:e2:a7:e6:
a7:db:b5:ba:d4:8c:6a:36:e6:87:de:02:d6:8e:91:6b:87:2e:
34:e2:80:a7:e1:d7:dc:3e:0d:d5:b2:18:d1:b5:bc:f5:96:b9:
82:8d:05:29:43:43:ef:be:d8:fe:a3:07:6e:11:0b:8b:28:cc:
0e:04:97:64:50:3c:1c:52:f4:fb:8d:1a:d9:08:95:6c:b6:27:
5a:80:ff:78:2d:dd:a9:68:73:4a:aa:4a:25:28:ad:20:63:24:
4f:fa:e2:55:39:66:db:ae:b0:f6:bf:a2:eb:f3:d4:63:44:2c:
e0:3c:0f:17:d8:a3:e7:af:86:77:fe:fc:21:8f:ea:a4:b1:93:
14:be:6b:09:55:e7:30:21:db:ad:20:69:db:bc:84:5e:14:dd:
df:6e:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:17:32 2026 by rpki-client