
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5.cer
File: 0cee6afc-a72f-490d-85d1-9417465106f5.cer (raw, json)
Hash identifier: /VRzEu/KpojI9FzgHPxaMCTK6GPwo6zwdz03t9s7eYI=
Subject key identifier: 4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DFC67E94688854743D07F6F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 May 2026 17:54:39 +0000
Certificate not after: Wed 30 Aug 2028 17:54:39 +0000
Subordinate resources: AS: 402567
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fc:67:e9:46:88:85:47:43:d0:7f:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 28 17:54:39 2026 GMT
Not After : Aug 30 17:54:39 2028 GMT
Subject: CN=0cee6afc-a72f-490d-85d1-9417465106f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:8e:2f:97:e2:dc:7f:ef:df:dc:80:3b:e8:
4f:90:b5:ab:f0:f9:4e:02:8a:05:68:4e:15:e7:4b:
ed:13:d0:34:f1:2d:c3:c8:56:d1:8f:d9:16:d0:0c:
d3:3b:ee:ae:71:ab:54:20:af:ab:2c:54:f5:2d:69:
72:19:34:29:e9:91:35:70:33:1f:76:5d:31:27:e8:
a0:62:b8:84:97:ab:0b:72:3f:f0:38:18:82:c1:4f:
a5:68:02:83:b6:30:99:15:f8:64:4c:22:22:f5:cf:
06:da:38:83:0f:30:d9:6e:f0:0a:ed:61:75:28:c8:
63:86:33:78:6f:cc:85:80:92:81:08:c4:fb:fc:fb:
f3:5a:9e:9e:4a:f9:a1:1b:24:79:ec:02:35:09:f8:
be:34:2a:bf:7f:5f:85:de:f9:d7:a7:09:0b:a8:49:
28:f5:30:ea:ef:b5:e6:7c:fa:b9:51:21:67:ab:46:
a9:a0:0f:e7:77:7e:a0:72:6f:e1:db:e7:00:65:03:
81:a1:d0:06:3a:86:86:9a:7e:4e:3e:6f:7b:34:ea:
70:b7:2e:04:63:d9:36:16:87:86:79:c2:f5:68:b5:
a8:91:1e:0d:8a:13:0d:12:54:36:9e:f4:28:5a:10:
29:79:b3:73:e1:96:14:b7:e6:67:47:00:8d:57:bf:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:BC:BE:74:19:6F:0F:FB:3F:47:13:A4:CC:38:55:57:25:35:94
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0cee6afc-a72f-490d-85d1-9417465106f5/0cee6afc-a72f-490d-85d1-9417465106f5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402567
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:7f:85:b6:66:53:0f:7f:89:38:a0:37:c4:68:6d:d5:9c:22:
5a:e0:ac:8f:57:e6:6b:a1:e0:72:c0:36:f9:24:f9:83:65:43:
b1:99:18:da:36:38:11:df:c6:e5:41:18:0b:36:63:e1:64:02:
43:96:57:4b:8e:f7:d0:be:69:22:b4:26:e8:ef:ac:23:51:9c:
0a:85:3a:45:63:f6:41:f5:70:4f:f8:25:d6:b3:d9:0d:44:7f:
26:29:37:99:fc:a6:49:9f:85:9a:71:fd:87:3a:1d:a3:b3:76:
e6:13:1d:82:96:fc:a4:3f:ff:a7:b1:b4:fb:89:b5:a6:02:e8:
73:36:2d:ba:b6:65:8f:f8:11:97:c1:de:4e:f9:d4:be:20:b0:
be:c1:70:e6:a6:29:f0:c7:8c:4a:d4:26:32:82:8e:7c:8e:07:
48:5b:dc:53:f4:e8:cf:29:d3:fd:60:4a:b4:32:28:59:a8:12:
7a:38:7c:4b:45:71:c5:04:79:7c:b5:f9:62:66:fd:1a:2b:45:
d4:cf:1c:71:cc:ab:41:70:c5:64:25:e8:4b:da:b4:fd:95:9d:
26:40:af:21:13:6b:53:1e:38:ff:96:20:75:a8:2f:4a:aa:87:
ff:d8:a1:3d:fe:51:04:4a:9d:51:66:b3:94:fd:b0:9d:1b:62:
9c:f5:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:31 2026 by rpki-client