
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.cer
File: 427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.cer (raw, json)
Hash identifier: wt9KNYLR3RAoSPz5FDcY0EqUk6cvN+Fh/V0nJ9icKiE=
Subject key identifier: A7:D1:E5:FC:8F:85:49:9C:C1:14:90:84:73:FE:8F:CC:E5:58:1E:5D
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E4BD4AFF9427088F12563B640
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Jun 2026 04:42:41 +0000
Certificate not after: Thu 28 Sep 2028 04:42:41 +0000
Subordinate resources: AS: 402634
IP: 23.160.132.0/24
IP: 2602:f37a::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4b:d4:af:f9:42:70:88:f1:25:63:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jun 26 04:42:41 2026 GMT
Not After : Sep 28 04:42:41 2028 GMT
Subject: CN=427f59fa-33fa-40f0-a5e6-ad09dff0b5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:aa:95:91:5d:02:d0:cc:87:39:56:8c:41:ca:
7a:23:2f:d9:58:f6:b5:40:d0:92:d3:bf:7d:b7:ef:
f2:8d:27:55:e7:af:ad:be:34:99:d2:be:64:8b:2b:
dd:30:a8:07:4c:16:b6:7c:04:ad:5c:fc:c9:de:7f:
03:d7:30:b6:45:f6:69:13:7a:a2:78:21:72:4a:41:
bc:56:34:81:81:f5:56:5c:3c:a3:fe:0b:91:bb:57:
83:6a:39:d5:d9:13:5d:4a:d3:cf:ca:ea:f7:d7:a8:
ee:a1:62:58:3d:99:44:c3:a3:9a:9e:b8:25:68:94:
3b:86:c9:43:1a:bf:23:7d:9b:14:32:37:bb:d4:ee:
c9:d3:99:e8:c3:a1:3a:81:4e:40:b5:0d:09:28:1c:
4f:f7:06:7c:01:fb:11:68:df:70:dc:45:c0:f8:0b:
31:fe:34:ce:cd:a1:eb:2f:fa:1a:bb:7c:07:21:b4:
42:17:e5:88:d2:6d:7b:0b:c3:e8:19:5c:83:1a:ce:
ea:bc:9b:cf:12:b9:91:4c:68:0f:b1:97:ea:07:11:
f3:46:f4:4d:ed:50:3f:a8:0a:bd:e0:6b:0c:52:63:
a9:3b:64:e7:07:53:b2:7e:29:cd:23:4c:f2:ca:53:
ff:cd:01:e8:f7:b1:9d:52:dd:cd:ab:61:a3:aa:c9:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:E5:FC:8F:85:49:9C:C1:14:90:84:73:FE:8F:CC:E5:58:1E:5D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0/427f59fa-33fa-40f0-a5e6-ad09dff0b5b0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.132.0/24
IPv6:
2602:f37a::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402634
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:95:e9:24:52:05:2e:88:dd:48:b1:f1:64:f6:7c:46:66:ba:
3c:92:8e:1a:48:00:3f:af:6d:2a:a8:2d:fb:d2:89:0f:e3:0f:
5b:05:c7:ab:e1:03:df:9c:27:3e:e5:41:f6:e7:10:9f:67:87:
e9:0e:26:28:ed:ff:70:9d:5f:34:27:c0:f0:ef:1e:e6:8e:18:
88:46:06:47:59:d3:13:ac:a9:a2:e4:4c:ba:a7:96:9b:13:dd:
53:03:24:65:85:a9:b4:b3:27:53:8a:b2:54:eb:69:5a:c1:0c:
3e:cc:7b:7c:3f:13:d8:cb:07:cd:ac:89:2b:e2:c8:22:9c:d8:
2d:15:df:c0:6d:47:7b:82:04:28:aa:cf:e7:3e:ae:0c:a4:af:
63:ef:f2:6a:c9:b8:71:39:1d:9a:b7:fd:67:b9:6e:e3:af:6a:
a7:20:d0:56:27:7e:55:40:4c:c1:da:da:00:43:d9:66:1b:11:
e1:3a:d3:6c:f1:f3:ae:04:09:ac:7b:14:5f:08:4b:4c:94:2b:
16:c1:56:b4:20:27:04:99:b9:a5:20:69:3e:95:67:6f:83:e3:
64:56:f5:25:63:b0:9c:74:f6:42:e6:ff:98:b3:29:5b:25:ee:
6c:81:18:44:d1:e8:d1:c7:53:81:d7:eb:6e:88:1a:a9:26:33:
86:e4:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:14 2026 by rpki-client