
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65c1ebf5-5b97-42e1-a974-2c4ebe101306.cer
File: 65c1ebf5-5b97-42e1-a974-2c4ebe101306.cer (raw, json)
Hash identifier: dgh9QNx9MGmVlLBrVBiS3qV3AZIqdnPq6ZP5nZqd7RY=
Subject key identifier: AA:AA:9A:3D:6D:C2:73:1C:1A:42:3B:2F:FC:A2:C1:2E:5A:10:AF:FD
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E5B5507490EF92B15CE589680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65c1ebf5-5b97-42e1-a974-2c4ebe101306/65c1ebf5-5b97-42e1-a974-2c4ebe101306.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65c1ebf5-5b97-42e1-a974-2c4ebe101306/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 17:58:24 +0000
Certificate not after: Tue 03 Oct 2028 17:58:24 +0000
Subordinate resources: AS: 15109
AS: 32271
IP: 69.55.176.0/20
IP: 104.255.112.0/21
IP: 162.217.136.0/21
IP: 199.192.92.0/22
IP: 199.195.136.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5b:55:07:49:0e:f9:2b:15:ce:58:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jul 1 17:58:24 2026 GMT
Not After : Oct 3 17:58:24 2028 GMT
Subject: CN=65c1ebf5-5b97-42e1-a974-2c4ebe101306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:33:41:ed:a4:71:a5:16:f5:7d:33:ba:f3:
b3:0d:96:2a:f9:74:72:35:23:11:7f:ae:d4:15:c6:
bd:e9:80:ce:4a:4f:c2:d0:40:55:3f:ba:bb:f9:e3:
f0:a0:bf:0e:98:2b:03:82:fa:d2:14:20:f6:71:6a:
3b:29:ea:1f:79:f3:72:e4:8e:8a:14:45:9b:f4:c8:
6f:0a:b9:bc:4a:2f:dd:6d:44:c5:77:8e:be:d3:33:
11:cf:eb:a7:97:54:0a:89:73:74:eb:76:b9:0c:44:
80:89:ec:5d:5b:7a:83:a4:0f:6b:6b:45:6f:0b:ce:
17:03:1b:01:22:58:d5:46:05:b1:35:6d:53:0f:ed:
d1:72:22:d2:d7:5d:97:d4:30:d1:65:99:2e:c4:35:
bc:ce:97:9a:7a:29:24:c6:5a:99:6e:dd:5f:e4:76:
00:90:e2:16:22:99:69:e9:62:64:40:5b:eb:8e:68:
a0:b6:85:8e:7d:6a:5b:17:e0:87:8c:7d:10:5a:3f:
5f:27:48:29:b4:ad:a5:85:d9:04:ae:c6:19:d5:d6:
c1:4e:db:40:78:bf:6d:a5:37:d5:33:cf:24:62:61:
f4:00:4a:d3:c2:f4:8b:e1:d5:5b:77:16:c6:d1:9b:
ce:79:7e:af:1f:2f:10:cb:02:0e:ee:c0:a3:7b:4a:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:9A:3D:6D:C2:73:1C:1A:42:3B:2F:FC:A2:C1:2E:5A:10:AF:FD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65c1ebf5-5b97-42e1-a974-2c4ebe101306/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/65c1ebf5-5b97-42e1-a974-2c4ebe101306/65c1ebf5-5b97-42e1-a974-2c4ebe101306.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
69.55.176.0/20
104.255.112.0/21
162.217.136.0/21
199.192.92.0/22
199.195.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15109
32271
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:de:c7:d6:ff:00:bd:d5:7c:35:67:97:d3:c1:4b:c7:c1:60:
5f:db:f9:98:f2:60:59:33:e2:bd:97:77:e8:83:0d:e8:bf:a6:
af:b3:27:ac:75:9f:d2:98:61:cf:13:12:7f:ca:0d:22:82:90:
31:63:b3:b3:05:6c:14:7c:37:f7:0b:90:27:4d:70:40:02:46:
f9:70:13:8f:89:63:85:ab:53:9c:85:58:2e:94:a8:5c:11:da:
c6:03:23:c8:e8:11:af:5c:50:06:60:17:42:16:7b:02:4d:f7:
60:8f:a3:f5:02:b6:98:5b:d1:e1:60:a1:66:81:a2:0f:27:a1:
57:8e:7a:16:42:86:a1:81:67:c3:ed:51:b8:e6:6b:37:2e:5f:
7a:3f:d9:22:21:a4:70:d5:f0:db:a3:f1:dc:81:f3:e9:59:f9:
3f:fa:f6:d3:59:b5:52:46:ce:7a:a3:32:ab:70:ab:b7:37:03:
02:37:4a:a9:76:dc:b5:e7:16:dc:d3:ed:93:23:fc:03:d9:99:
c0:4a:bd:77:c4:d4:78:3f:9c:92:8d:9e:7f:49:06:9d:a3:64:
68:1c:3a:6d:d6:76:a2:77:df:fb:7d:0b:c9:ed:f4:72:a6:86:
e0:9d:a9:94:72:d4:ae:9a:35:bd:e7:31:ad:8c:aa:a9:73:35:
03:19:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:37 2026 by rpki-client