
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9.cer
File: 79401fe4-d719-4a98-97e7-e309254447c9.cer (raw, json)
Hash identifier: yvM17nhV2t8h4qpSAjxkAL8E6h7QCIfrB8s/2YzH60Q=
Subject key identifier: CA:75:62:B9:45:F0:B5:EC:8B:03:CC:16:FC:05:FB:F9:36:63:20:4B
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E5B17D5EC6333D40F7C519B40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/79401fe4-d719-4a98-97e7-e309254447c9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 15:55:06 +0000
Certificate not after: Tue 03 Oct 2028 15:55:06 +0000
Subordinate resources: IP: 23.159.100.0/24
IP: 2602:f3a2::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 16 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5b:17:d5:ec:63:33:d4:0f:7c:51:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jul 1 15:55:06 2026 GMT
Not After : Oct 3 15:55:06 2028 GMT
Subject: CN=79401fe4-d719-4a98-97e7-e309254447c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:39:0c:cc:d6:65:60:0b:7f:b7:0f:1b:c0:
f6:67:b1:94:d9:8a:14:bd:bd:e8:8f:d3:ec:58:47:
e2:4b:4a:e9:20:e5:0b:33:8c:fc:67:5d:1c:f7:74:
5e:c6:82:74:98:f2:5c:89:1d:e0:51:91:c5:98:c3:
0b:cf:3d:10:dd:fd:19:0e:dc:89:12:df:4f:43:3d:
ed:6b:e9:90:cb:c0:6d:53:1a:87:25:c9:ba:3c:5b:
47:ce:82:74:6c:43:1f:ac:80:4b:53:82:ec:62:42:
0f:56:89:e8:c6:b9:88:31:18:18:0b:68:26:6d:4c:
db:55:8b:63:ea:a0:c7:b1:63:17:29:c7:5d:74:72:
d9:b2:f1:62:78:49:ec:ab:02:d8:00:dc:c8:44:0f:
98:8b:04:28:48:35:dd:2b:e2:13:73:7b:3b:ce:72:
f0:86:76:fe:ec:82:17:2b:20:13:5d:a0:13:00:8c:
b5:82:a3:86:7b:1a:56:4a:d9:bb:ac:47:b3:9e:f3:
89:4f:13:8f:66:c3:e9:0c:67:15:3b:a7:e3:56:e4:
60:41:8d:79:de:bc:b6:cd:08:a7:fd:99:56:f5:19:
a3:64:d7:99:b4:ca:40:58:3c:c8:a2:f3:c5:5a:40:
e7:b4:3d:d8:d8:d8:a7:cc:d8:89:18:f8:d4:68:35:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:62:B9:45:F0:B5:EC:8B:03:CC:16:FC:05:FB:F9:36:63:20:4B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/79401fe4-d719-4a98-97e7-e309254447c9/79401fe4-d719-4a98-97e7-e309254447c9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.100.0/24
IPv6:
2602:f3a2::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ce:28:7f:58:fc:5e:e4:99:c7:48:a6:c7:03:c9:f7:e1:26:
56:0e:de:ab:ce:db:9f:77:af:4e:d0:4c:92:d0:ac:a1:b3:85:
6a:78:34:e9:7b:a8:04:cb:8a:e7:d7:3d:6e:60:dd:ed:af:d9:
2f:b3:53:b5:b9:7e:a6:61:e6:fc:6d:83:cb:17:19:a9:2a:49:
a3:4d:a7:a2:b3:5b:c5:a6:37:c6:12:d9:dd:fe:c8:28:9a:db:
4a:90:9c:95:28:d4:3a:26:7d:34:73:6b:f0:6c:2c:16:59:3f:
a7:cb:23:2a:a4:7f:c0:75:61:46:12:03:d9:0d:09:a1:d3:f0:
77:9f:4e:69:f6:71:7a:ea:d7:b4:fb:76:25:eb:39:50:d4:32:
67:86:88:d8:3a:a2:67:cb:31:0a:78:0b:b2:a8:50:18:5b:23:
4a:61:76:7f:9c:3f:d3:80:91:6a:ca:0f:aa:24:99:1d:c2:57:
c6:80:8b:70:47:0f:41:89:01:86:22:ce:13:a1:6d:80:b6:c4:
cd:5d:45:50:d1:a8:43:bc:32:81:4e:33:82:6d:ec:c9:10:aa:
41:62:49:4f:b1:b8:ad:fa:d2:bf:d4:6d:38:91:a5:d6:9b:9a:
81:71:6e:f2:62:45:a7:21:b2:43:74:84:23:56:cf:b5:15:85:
18:6a:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 06:23:06 2026 by rpki-client