
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123.cer
File: 169d877f-3a03-42b7-8bce-7109eddd1123.cer (raw, json)
Hash identifier: XicW8Ri8+K4EWHvTDF/bPqXcu0cIp9GMdggh77nv/2Y=
Subject key identifier: 9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E319F30C7149E09229FEF5740
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 16 Jun 2026 19:23:52 +0000
Certificate not after: Mon 18 Sep 2028 19:23:52 +0000
Subordinate resources: AS: 23550
IP: 66.129.160.0/20
IP: 184.95.0.0/20
IP: 2605:b800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:9f:30:c7:14:9e:09:22:9f:ef:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jun 16 19:23:52 2026 GMT
Not After : Sep 18 19:23:52 2028 GMT
Subject: CN=169d877f-3a03-42b7-8bce-7109eddd1123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:b9:d1:a8:33:24:6d:4e:69:50:65:18:31:
a4:d3:5d:a9:13:58:3f:0e:ae:cf:6b:e7:97:b4:9d:
85:78:27:26:a5:7b:a0:2f:ef:6b:a7:47:93:a1:9c:
44:a6:cd:69:fa:47:ae:27:f1:16:0b:73:42:63:f0:
38:90:b3:95:e0:2f:11:c4:0b:56:9a:a9:6d:36:1e:
65:c2:c8:1f:e3:4b:1c:02:3d:c3:1b:04:ce:64:88:
47:6c:12:b5:e0:a7:5d:ab:da:96:a6:6e:28:f3:c5:
d5:e6:e5:2f:ff:e9:34:1a:4d:7f:70:90:9a:6f:10:
c6:bb:84:39:69:65:4b:62:c2:29:8c:51:61:d2:ec:
c9:ed:32:5b:eb:57:c3:8f:65:f2:ea:f3:0a:eb:7f:
03:b9:4c:45:52:63:4d:ae:62:bf:1e:96:ad:e4:13:
c5:34:a6:48:62:37:00:6e:9f:6d:ac:5c:69:92:28:
aa:3b:ac:ce:61:36:21:dc:b4:12:8e:bd:66:5b:57:
f6:df:c1:8b:0d:9e:83:aa:08:c9:fd:96:a6:2d:fa:
42:2a:8b:84:f2:4f:b4:42:3e:3a:26:96:be:6a:9f:
b0:a3:cd:3e:83:81:85:4a:54:b8:05:d8:3c:4f:a7:
cf:9c:d7:4c:82:b4:16:3f:ed:78:2f:09:34:28:e1:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:3F:A3:1D:0C:5A:99:2C:B5:04:5C:53:DB:BF:06:D2:99:E5:6E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/169d877f-3a03-42b7-8bce-7109eddd1123/169d877f-3a03-42b7-8bce-7109eddd1123.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
66.129.160.0/20
184.95.0.0/20
IPv6:
2605:b800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23550
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:42:1d:84:16:b8:f2:c0:cd:0c:67:0b:13:d9:73:a8:04:ad:
98:44:7e:4e:10:76:c8:e8:9c:27:e8:5b:0f:31:2f:dc:82:16:
e4:81:0a:74:2b:96:ce:f7:80:2c:9f:45:55:e1:f1:32:ac:d6:
41:89:84:de:58:ee:13:3d:18:ea:d7:a2:67:07:26:e4:a8:d5:
77:00:3e:f8:0b:be:6a:63:7a:79:98:25:82:99:d0:91:93:1b:
66:cf:1b:14:2e:48:04:9e:3f:6b:ca:a9:7c:65:26:15:21:ab:
64:90:e6:ca:83:85:56:be:34:71:af:a2:f2:1d:c0:48:f1:78:
1c:c1:cb:2e:27:51:d6:ac:02:40:3c:c2:2f:dd:3f:1e:0d:68:
6c:7a:c6:e3:14:60:7a:e1:73:81:10:d5:a3:f1:4b:0d:0d:9d:
a5:fe:83:10:ee:59:1c:e7:ca:16:af:d3:72:a0:d2:b4:07:33:
6b:8c:18:08:e4:2e:df:e6:4f:b5:1b:4d:96:6a:54:21:2d:23:
ca:2c:d0:a3:45:f8:26:2f:60:ad:84:05:ef:b8:7e:b0:d0:c5:
cd:79:9b:f2:d3:32:eb:66:fc:8b:3b:30:19:93:88:40:f2:43:
28:1b:29:5e:b8:08:e5:47:0d:7a:5f:df:f1:39:dd:50:84:30:
59:90:b1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:32 2026 by rpki-client