
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer
File: 7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer (raw, json)
Hash identifier: bDYF+ZEM837rytJ05Nwy8N+HQszoK66eg2EvqNuml54=
Subject key identifier: E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DF706556F63A1324EDBCC69C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 26 May 2026 19:39:00 +0000
Certificate not after: Mon 28 Aug 2028 19:39:00 +0000
Subordinate resources: AS: 397170
IP: 204.124.87.0/24
IP: 2602:f6bc::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f7:06:55:6f:63:a1:32:4e:db:cc:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 26 19:39:00 2026 GMT
Not After : Aug 28 19:39:00 2028 GMT
Subject: CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:6d:91:8a:92:63:27:c3:79:65:4b:35:68:
b9:2d:65:9b:12:b5:c2:9e:51:3a:9e:02:ff:f3:31:
c7:85:46:4a:33:52:20:eb:63:99:df:97:f4:9b:c9:
6e:51:a4:70:a8:57:fd:14:37:ed:bd:0d:4a:4f:f9:
a8:77:6f:3a:30:2c:e4:9c:2b:20:55:c3:df:65:ad:
c9:c5:50:d2:1e:8e:bd:1f:ff:a8:09:18:dd:59:d7:
10:84:25:72:c9:f5:38:96:cf:18:ed:c8:cb:3e:a1:
03:ed:cb:e5:64:18:96:d0:f0:06:ca:f0:b9:bd:19:
ff:b0:b4:a1:c1:d7:c0:c9:11:76:d3:87:63:29:96:
91:6b:50:f7:e1:c8:18:8b:83:8b:f4:c2:37:d0:36:
37:01:0c:85:c8:83:62:20:f9:85:a1:8d:dc:d3:be:
a6:1a:ea:95:44:c1:32:d0:9d:4e:88:8d:02:13:09:
83:f4:47:dc:c2:99:3a:88:6f:9f:4c:7d:74:5d:b6:
4d:e2:75:2e:c7:f4:e7:c0:54:36:58:ec:8b:dd:9c:
d2:0c:27:54:dc:2b:73:6c:e9:b3:81:06:cb:2a:24:
01:23:03:ee:43:52:63:6d:de:0a:41:8e:ca:80:86:
ee:35:c3:60:8d:84:ff:5f:94:a9:52:d0:b3:06:1e:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
204.124.87.0/24
IPv6:
2602:f6bc::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397170
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:fe:ee:15:eb:3b:0c:91:f9:b5:8f:b5:ba:d3:52:a5:87:20:
0b:23:cc:6c:4c:ca:ba:39:c8:a6:b3:52:00:1a:5c:60:82:42:
df:70:ce:78:9d:83:05:be:fe:9e:20:85:bb:4b:ef:e9:fc:f8:
a0:a5:94:d8:17:3c:be:2d:03:74:70:a9:34:c4:d1:67:e8:50:
57:2a:b3:82:54:93:84:91:6f:e0:44:c2:63:de:ab:64:fe:e5:
3e:a9:b6:ea:8a:73:d9:51:69:e0:0c:86:32:a0:e4:7b:39:eb:
1d:99:2f:8f:99:28:0b:15:1a:f0:64:73:68:69:e0:80:66:19:
0e:7e:a3:6c:93:e6:31:50:cc:9b:53:68:a2:f4:80:7f:d6:b6:
86:fe:33:85:af:4e:fe:96:a1:7c:ab:74:e5:e8:78:e4:42:a1:
33:0e:ae:dc:b6:47:34:34:0e:52:d1:fa:7b:10:9e:81:b5:03:
2c:f0:41:1c:1d:07:8d:31:ec:9d:9b:d8:52:24:39:3c:a0:2a:
24:8f:18:1d:c0:a2:0b:11:25:c7:ef:61:89:c5:e4:2f:40:b2:
65:e6:43:62:ca:ca:48:16:99:93:0c:95:a1:55:16:fa:6b:41:
f0:fd:a3:6d:75:8d:1b:a1:08:db:40:c9:ce:f0:bf:e7:7b:b9:
0b:9d:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:42 2026 by rpki-client