
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c.cer
File: f924d902-b3ed-4578-a1c7-866c1aeef49c.cer (raw, json)
Hash identifier: Fk8Uj46cE21mLZMyU5NqsjBuvUJMLqDr5m64hO45D2Y=
Subject key identifier: 17:51:85:8D:ED:3D:CA:86:E5:86:D8:62:54:6B:39:19:00:B7:AC:33
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E55D56D549250DF3EBAAF8E00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/f924d902-b3ed-4578-a1c7-866c1aeef49c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 29 Jun 2026 18:42:15 +0000
Certificate not after: Mon 04 Sep 2028 20:35:23 +0000
Subordinate resources: AS: 402563
IP: 66.84.80.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:55:d5:6d:54:92:50:df:3e:ba:af:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jun 29 18:42:15 2026 GMT
Not After : Sep 4 20:35:23 2028 GMT
Subject: CN=f924d902-b3ed-4578-a1c7-866c1aeef49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:fe:99:be:1b:98:95:64:87:25:7d:0f:6a:
d4:41:82:58:3b:4f:f4:40:52:cc:91:89:af:4f:a8:
88:44:db:1a:22:40:cd:f8:35:5c:15:8b:3f:98:80:
e4:29:3f:f0:2a:6c:c6:9a:f4:0e:b3:c4:13:0e:77:
0c:ae:99:b2:b7:21:8e:23:80:ac:13:1b:d5:4d:90:
04:34:a2:4d:bd:52:c3:8f:8b:5f:45:12:53:68:9a:
31:91:7d:91:2c:82:60:d6:50:fc:80:55:e6:50:4e:
9c:8b:94:f1:be:9f:82:28:fa:65:1b:1b:e4:d1:2c:
15:ea:c5:a7:9c:42:b7:47:44:af:25:67:14:2d:8f:
29:47:e2:4d:26:d6:02:d8:ab:60:b1:95:42:4a:63:
d7:b8:f3:60:97:19:4d:f6:1a:4c:8a:df:7c:07:80:
1c:c1:69:1f:fc:34:1b:ba:99:d1:d3:21:8f:b1:59:
54:5a:8b:ec:ee:63:21:aa:77:ee:aa:75:51:70:42:
b6:55:b2:45:88:c3:1e:f4:33:70:8b:d1:f9:9d:af:
e4:5f:e3:88:ed:b7:9c:a3:e1:ca:a6:87:41:4a:56:
81:af:56:34:7a:da:93:48:b2:80:4f:d1:01:7c:c1:
56:57:2a:90:b4:b4:b6:63:82:8e:7f:93:a7:04:9a:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:51:85:8D:ED:3D:CA:86:E5:86:D8:62:54:6B:39:19:00:B7:AC:33
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/f924d902-b3ed-4578-a1c7-866c1aeef49c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
66.84.80.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402563
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:bd:1c:09:bc:b9:09:17:4d:e1:ec:7f:12:95:83:c1:b9:a0:
05:ec:38:fd:2d:6c:36:a7:a8:c7:29:7b:8a:76:92:6d:8c:40:
d3:9c:72:91:54:56:b9:d9:a6:6b:25:80:26:a8:da:20:6d:22:
f7:ef:81:6d:48:ce:1a:b0:29:24:50:fb:77:d3:9b:d3:3e:3b:
b4:9b:c4:96:85:15:61:e7:d1:a7:2a:14:1b:5b:ba:13:9f:79:
f5:cd:3e:2f:57:77:c1:69:f9:3d:e8:e0:9e:65:96:0f:08:04:
b1:d6:c5:9a:95:14:ad:8b:86:67:f7:a3:5c:ad:32:66:a9:9e:
af:19:34:fd:d3:3b:4c:58:50:83:33:1f:63:b4:1b:dc:eb:c4:
ef:13:00:89:14:67:82:e3:eb:36:2f:39:71:b4:96:b5:4e:44:
23:37:97:20:4e:05:9c:67:b2:32:21:0e:82:ba:52:cd:77:23:
f9:02:8a:e6:87:28:f0:c9:84:55:5e:29:10:16:43:1d:2c:3a:
20:78:78:dc:11:88:3b:f6:4f:96:a4:d6:12:fe:7a:f0:ed:0c:
62:fb:90:df:cf:d7:73:c9:21:25:aa:2a:bd:8b:c9:4e:a1:29:
76:c6:dd:d7:f5:5a:da:7f:9b:3f:5d:27:8a:66:94:5f:e8:36:
7b:d8:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:32:04 2026 by rpki-client