
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
File: dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer (raw, json)
Hash identifier: rLbWUDk+ymHgb8P0zczXv9wFnll2FK3U/4KjeKltWd8=
Subject key identifier: 9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DE3FDBA12B5ACE30DC64DAD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 20 May 2026 00:01:18 +0000
Certificate not after: Tue 22 Aug 2028 00:01:18 +0000
Subordinate resources: AS: 54651
AS: 394027
AS: 397868
IP: 162.223.124.0/24
IP: 162.244.4.0/23
IP: 192.231.134.0/24
IP: 209.51.32.0/21
IP: 2620:121:e000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e3:fd:ba:12:b5:ac:e3:0d:c6:4d:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 20 00:01:18 2026 GMT
Not After : Aug 22 00:01:18 2028 GMT
Subject: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:c0:91:25:3b:83:12:cb:42:1e:e6:cb:2b:
e6:a4:01:84:f0:64:de:eb:9f:63:cf:14:65:a0:51:
46:64:3b:63:38:c2:7d:09:8a:76:d0:29:b3:5c:ea:
87:30:50:3b:9a:03:67:aa:ea:20:eb:ea:b5:44:33:
86:42:39:6c:7b:37:51:f9:04:c1:92:5f:a4:99:7a:
83:ff:d9:8a:59:16:c5:3c:9a:84:f1:ff:bd:3e:5c:
3a:d0:4e:f9:a8:dd:15:7b:14:ee:24:45:e3:e3:3c:
b2:f1:2b:b8:40:5f:ce:cd:99:b7:65:44:2f:8d:a2:
5e:38:a1:fa:7f:4a:53:1c:f9:2a:55:26:92:ec:2b:
a7:14:d1:c6:b2:dc:ac:c6:c7:e2:7f:be:44:08:f8:
d6:fc:dc:46:5f:f5:95:0b:95:91:cd:53:4b:63:01:
a3:3d:3e:6a:d8:6e:9e:c9:e1:be:fb:a8:e4:77:b7:
56:80:f7:8f:ba:4d:c2:ca:34:f6:79:ee:40:80:03:
9f:d5:9b:8e:fb:75:55:6a:b8:2b:50:ee:4c:ec:87:
ad:d5:a9:e3:40:1f:ed:ec:f2:75:e2:e8:2e:0a:1b:
63:02:65:a5:2c:54:0d:da:9e:90:34:15:7d:ef:52:
18:ea:df:d1:44:2b:9d:3f:34:50:06:ae:39:9a:ee:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.124.0/24
162.244.4.0/23
192.231.134.0/24
209.51.32.0/21
IPv6:
2620:121:e000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54651
394027
397868
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:73:b5:89:ef:1c:8a:98:28:6f:33:2e:63:0b:54:f2:32:13:
91:b4:4b:5a:a7:c3:83:f7:95:63:85:f8:5e:1c:f2:0b:58:bd:
20:c5:96:49:9c:35:ed:b4:16:4d:22:b2:fc:f3:4b:d4:16:eb:
2b:ff:c9:a0:c3:10:ee:aa:30:09:5d:a8:bd:5f:4d:fe:4a:ec:
de:0b:2e:10:a8:39:e5:77:7a:53:ec:a3:97:7b:1b:96:dd:b4:
c2:7e:83:22:45:c8:a4:f0:10:c0:df:ae:60:7b:1f:6d:01:c3:
93:a2:25:87:02:ae:6e:60:d5:bb:9c:34:cd:ee:1b:c8:af:b1:
fb:c6:3d:20:ce:ac:50:de:5c:8f:52:96:5d:3b:0e:fb:6c:a9:
b0:47:0c:7f:e7:6e:91:fb:d2:dd:cf:2e:8b:3a:9d:8f:f1:e9:
c0:21:62:a3:eb:3f:8e:fe:56:bd:89:51:29:72:31:33:0a:1b:
6b:5d:f9:25:c8:f8:5a:ff:69:09:62:ea:3f:c6:30:bb:9d:cf:
0a:84:9a:96:39:8c:02:dd:f9:3d:eb:01:17:d0:c5:09:9a:51:
f6:b6:79:fb:a7:23:1d:3a:db:f3:66:ea:b9:03:7c:98:8e:cb:
f6:90:12:a7:52:c2:d2:35:96:30:49:da:fc:83:d8:5c:ec:86:
39:aa:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:40 2026 by rpki-client