
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer
File: 9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.cer (raw, json)
Hash identifier: GJerdN5OrOazEBNIOKy7GwNNA6le/fDJpSo9/l0UlGI=
Subject key identifier: BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E44ED1AE2C90812A121E1A0D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 23 Jun 2026 17:21:13 +0000
Certificate not after: Mon 18 Sep 2028 19:57:55 +0000
Subordinate resources: AS: 402361
IP: 204.126.98.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:44:ed:1a:e2:c9:08:12:a1:21:e1:a0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jun 23 17:21:13 2026 GMT
Not After : Sep 18 19:57:55 2028 GMT
Subject: CN=9bbbcdeb-6e56-4c47-98f4-ca2daee4e669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:8a:f4:01:f0:ca:3e:c2:9c:67:01:64:6c:
68:3e:7b:c3:2d:9b:69:31:26:23:25:4c:e2:c6:03:
48:f3:e5:50:8f:9d:00:2c:f0:4b:73:34:09:11:48:
29:50:b0:bc:50:9a:52:d2:58:8c:0d:e3:cb:57:b4:
77:bf:80:eb:e8:5a:8d:63:14:11:71:36:54:c4:6b:
5a:00:04:84:27:8f:ec:92:c9:5f:11:3a:39:cc:d8:
fd:d3:93:9f:45:86:80:a4:7f:ae:c6:6f:46:0b:cf:
78:fe:84:b6:d3:f6:13:d1:b7:ae:77:75:7d:75:5a:
be:94:ea:a9:e3:d4:e1:97:1c:36:c3:9d:ef:03:e6:
a3:47:64:eb:ea:55:6b:ac:63:f7:b0:2c:c7:65:b8:
b5:45:8a:0b:88:aa:f0:87:da:e7:b5:45:b7:ad:a9:
91:36:eb:ad:b0:61:f9:85:09:c3:38:b1:6c:fc:bb:
82:96:75:f6:f4:dc:b4:d7:cb:87:a7:db:43:6f:45:
41:64:be:f3:38:3b:b5:34:70:7a:69:6b:62:d6:28:
a8:24:ed:95:16:3a:8f:19:7b:03:b4:f5:78:55:b2:
87:ae:7e:9c:52:e6:79:ce:85:52:c2:a0:99:2b:e5:
5c:70:e7:db:12:f6:9d:7a:ab:af:ec:a7:79:12:c3:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AB:98:31:15:4B:AA:88:83:4F:12:B8:0E:51:BE:10:F4:3B:4C:61
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669/9bbbcdeb-6e56-4c47-98f4-ca2daee4e669.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
204.126.98.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402361
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:6f:92:2b:c0:a3:a5:e2:ac:1b:d0:02:9f:eb:2b:f1:a4:ad:
49:1c:f7:58:ee:68:f7:06:da:6c:f9:11:eb:15:81:0c:4d:71:
23:be:10:51:d4:11:cc:56:eb:8b:c6:04:c9:08:3c:b4:74:9a:
7f:9c:06:29:b2:66:61:b8:6d:2a:62:f3:04:8e:73:01:e8:3b:
af:8e:70:1a:7b:dc:e1:3e:a5:d6:1b:16:58:43:6a:39:77:d2:
f8:ba:24:f9:e0:b7:58:a2:bb:c1:fb:c2:97:8e:60:f3:17:36:
41:3a:cb:fc:a2:bf:87:f7:eb:00:33:c8:f6:09:36:ec:52:b7:
b4:2c:c0:c2:c7:a1:6f:a5:3d:93:99:3a:95:ae:28:0e:b6:62:
6b:a0:70:37:0d:37:67:01:37:0a:f2:a0:f4:9c:2b:33:4a:9e:
58:f1:86:57:5d:c8:ba:62:4b:26:f4:a0:8b:f8:54:96:e8:c7:
80:75:b8:47:8f:dd:8e:e9:1f:f9:9b:ca:e4:e5:cb:b7:51:fa:
33:27:e3:c9:c8:50:43:7b:45:a7:ca:dd:c6:18:36:c9:92:f0:
e4:8c:92:1b:fd:f4:4c:ea:85:26:30:99:9e:fc:25:55:6f:fa:
43:d2:c3:0d:c2:16:44:5f:76:1b:52:69:cc:a9:7a:56:e8:ea:
2b:6a:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:25 2026 by rpki-client