
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c851466e-6a1d-46a5-8901-ddc71f609df3.cer
File: c851466e-6a1d-46a5-8901-ddc71f609df3.cer (raw, json)
Hash identifier: 1887ZRh6QTufbFqDTsQX7L0eh2W5atGjH7m9/jKiXHc=
Subject key identifier: 2C:6E:EB:8F:93:22:9E:81:29:46:51:70:30:B5:81:96:FE:EE:5A:68
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584F1068A493E0C93A285F0F7180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c851466e-6a1d-46a5-8901-ddc71f609df3/c851466e-6a1d-46a5-8901-ddc71f609df3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c851466e-6a1d-46a5-8901-ddc71f609df3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Sep 2026 14:39:14 +0000
Certificate not after: Wed 13 Sep 2028 20:55:45 +0000
Subordinate resources: AS: 393574
IP: 23.163.132.0/24
IP: 209.46.52.0/24
IP: 2606:fcc0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:68:a4:93:e0:c9:3a:28:5f:0f:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Sep 4 14:39:14 2026 GMT
Not After : Sep 13 20:55:45 2028 GMT
Subject: CN=c851466e-6a1d-46a5-8901-ddc71f609df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:cb:d1:12:8e:5f:b4:23:5e:4f:a8:bf:d8:
03:21:57:23:0d:50:69:58:a5:21:dd:37:00:63:e8:
2f:bf:f4:e0:16:30:a2:8f:da:57:a8:e4:7b:1d:82:
05:65:57:88:58:62:d9:01:e3:ef:38:84:0b:ad:aa:
f7:65:18:6e:30:8d:b8:9b:15:b1:e4:56:85:56:51:
d7:04:d4:78:89:b2:ee:de:9a:48:5e:a2:eb:d3:c3:
05:8f:b1:4b:5f:8b:00:8b:b2:72:2a:97:7a:6d:74:
71:61:69:92:8c:2f:b2:82:04:34:93:66:71:a0:64:
12:ab:b4:6f:82:ef:66:76:87:eb:10:41:91:02:47:
3b:56:1c:b3:0a:65:9e:42:3a:15:90:53:6a:23:4a:
e3:2a:37:e2:a7:f1:6a:d3:72:08:89:50:42:c6:9e:
14:c8:49:38:9c:12:d2:76:e5:c9:48:97:55:da:1b:
4d:42:3e:80:36:8c:82:df:c1:af:a7:75:75:41:98:
15:d4:dd:da:17:55:f8:8f:75:ac:41:e7:24:3d:90:
87:73:2f:0b:2c:ac:fc:32:ec:6c:98:7b:23:5d:85:
83:8d:7c:63:3c:5f:95:08:c6:ce:62:a4:8e:d7:09:
c4:63:22:aa:32:80:0e:03:00:ca:e4:72:27:8c:c1:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:EB:8F:93:22:9E:81:29:46:51:70:30:B5:81:96:FE:EE:5A:68
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c851466e-6a1d-46a5-8901-ddc71f609df3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c851466e-6a1d-46a5-8901-ddc71f609df3/c851466e-6a1d-46a5-8901-ddc71f609df3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.132.0/24
209.46.52.0/24
IPv6:
2606:fcc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393574
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:97:9e:f0:c8:9b:2a:a4:50:f9:3f:15:a4:9c:13:35:ca:b8:
3d:90:cf:02:ed:ee:e9:88:cf:17:97:0f:cb:80:3a:31:15:4e:
b7:18:34:35:1e:14:88:ea:aa:2d:89:fa:2e:e4:ce:b7:a0:2d:
54:c7:98:dd:7f:ac:ab:2b:52:14:71:cb:a5:6f:43:de:6e:68:
69:27:0d:bd:02:0a:f9:78:2f:bd:b8:b0:39:65:98:ff:3d:a9:
6c:0d:99:3a:a1:11:ad:78:8d:99:6d:6e:fb:47:1f:10:82:ef:
05:aa:09:75:17:cf:f4:87:87:56:ba:a2:a2:92:1a:3a:ed:d8:
22:df:1b:d5:4e:01:27:c4:1c:03:88:52:4b:09:67:53:82:69:
fa:ec:a5:56:77:15:a5:30:e5:5e:ef:fe:2b:18:84:4b:bd:1d:
ba:90:18:eb:84:50:95:76:50:49:e9:dd:a3:55:2c:56:47:6a:
51:da:3d:c8:94:ff:ca:fc:3b:9a:a0:ba:58:8e:2f:3c:e1:8c:
8b:30:0e:7b:7c:a8:56:85:fa:8b:0b:e1:80:4f:43:6e:58:de:
c7:c7:cf:54:b0:d7:00:03:74:81:82:93:cb:c1:86:cf:06:35:
ea:97:e7:87:5f:a6:8c:52:db:21:2b:f2:bd:72:08:81:d0:37:
cf:92:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:35 2026 by rpki-client