
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad635e34-1634-4390-bf89-b6be14811e4a.cer
File: ad635e34-1634-4390-bf89-b6be14811e4a.cer (raw, json)
Hash identifier: BSHpBMkPUeh5IHtfMyeHPu1yh/GxWj8M1dM4lS4aZD4=
Subject key identifier: 1D:DE:2E:A6:ED:DC:C3:2F:BC:40:CD:16:29:10:F8:4E:42:B8:07:4F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D0FC78676F76D431F03014A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad635e34-1634-4390-bf89-b6be14811e4a/ad635e34-1634-4390-bf89-b6be14811e4a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad635e34-1634-4390-bf89-b6be14811e4a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 04 Mar 2026 23:40:43 +0000
Certificate not after: Tue 06 Jun 2028 22:40:43 +0000
Subordinate resources: AS: 395237
IP: 198.13.176.0/22
IP: 208.79.180.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0f:c7:86:76:f7:6d:43:1f:03:01:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 4 23:40:43 2026 GMT
Not After : Jun 6 22:40:43 2028 GMT
Subject: CN=ad635e34-1634-4390-bf89-b6be14811e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:ec:37:9f:cb:2a:50:fb:0e:f2:b2:80:56:
ca:ff:37:13:de:ae:70:52:53:70:28:f8:42:bd:da:
10:8c:4f:5c:7d:f0:2c:44:18:88:86:5b:c1:4a:92:
5c:72:86:28:90:8e:f4:9c:cd:1d:16:81:21:2b:8d:
9f:69:0d:b4:d6:f5:8b:c3:15:aa:13:8e:fa:aa:83:
6e:51:c4:11:05:32:94:d8:b7:eb:5d:40:bb:a1:ea:
46:e0:9e:d7:3f:19:1b:4a:b5:a4:4c:56:f3:fc:bc:
b8:fe:6b:49:66:7b:9c:73:ee:02:4d:7e:27:c5:93:
cb:89:e4:da:c9:2a:54:4a:b5:ca:c2:ec:7d:7f:88:
dd:b2:dc:62:a1:d2:c7:ea:4e:53:2f:e0:9c:7f:99:
88:93:ab:c2:6f:08:17:60:15:99:e7:26:6d:48:26:
81:89:bb:2f:29:bf:8e:bb:89:ec:0e:9a:fc:49:43:
d9:b5:ff:1f:8a:ae:b6:9c:c9:47:04:da:a4:46:56:
23:ff:e7:97:2c:41:9c:30:c2:da:84:ca:79:0a:41:
f8:fb:4c:47:c7:46:2c:2f:a5:87:9b:80:95:5f:05:
a2:1e:df:2d:86:43:40:25:a7:37:ff:e4:6f:27:4d:
e4:47:9c:db:38:7d:e6:1b:91:91:45:02:80:7f:6b:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:2E:A6:ED:DC:C3:2F:BC:40:CD:16:29:10:F8:4E:42:B8:07:4F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad635e34-1634-4390-bf89-b6be14811e4a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad635e34-1634-4390-bf89-b6be14811e4a/ad635e34-1634-4390-bf89-b6be14811e4a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.176.0/22
208.79.180.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395237
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:2c:f2:75:21:be:db:32:89:7f:84:d3:8e:ec:a0:c8:92:9c:
be:42:f7:e4:db:7d:5d:4f:72:e5:ec:ba:b3:a9:8f:41:44:01:
3b:20:60:c6:b1:57:ed:67:af:52:16:0b:97:f8:eb:00:03:8a:
70:4c:da:ff:20:ae:4e:10:d2:fb:46:e6:59:9e:ca:9a:57:b3:
b8:04:6b:ee:8a:fe:24:1c:b1:a6:f7:17:74:c1:9d:4d:ca:83:
7d:b6:8f:bd:53:85:b5:06:67:87:84:70:2d:ff:da:07:a0:03:
3d:90:80:10:ef:35:a3:34:8c:33:a4:1d:99:88:e9:1c:09:46:
b7:5e:c6:e0:41:fd:2c:d7:75:13:0b:86:2e:68:a6:11:bd:51:
7e:92:4d:cc:e0:ce:81:2e:f2:a7:e7:38:72:44:0a:99:b7:8f:
1f:37:81:df:dc:d3:c4:71:0d:19:38:e1:21:50:a8:80:02:ac:
44:a5:0d:a7:4d:6b:1c:f3:60:51:ef:e6:eb:26:3a:93:34:0a:
ae:6f:28:a4:1b:df:f6:dc:24:70:00:e4:4d:3d:4d:6d:51:df:
6a:2e:8d:75:d0:a5:19:8f:09:1e:bc:57:47:fc:4f:5f:6c:94:
e8:3f:c3:de:cd:c5:5f:f9:09:17:23:69:55:b3:ee:e2:4f:b3:
ec:e3:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:20:58 2026 by rpki-client