
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer
File: b9c7c552-f63b-4d16-a564-9e63d1c2343f.cer (raw, json)
Hash identifier: RRs1HIW8+7ipiKSzdbsTFWWz539eZontcaXAN5/PDR8=
Subject key identifier: AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer: /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial: 010D0C9F4328584F07DBD23ECD92BD8A23626080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 01 Sep 2026 13:09:01 +0000
Certificate not after: Mon 04 Dec 2028 14:09:01 +0000
Subordinate resources: IP: 204.79.147.0/24
IP: 204.79.199.0 -- 204.79.200.255
IP: 204.154.64.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:07:db:d2:3e:cd:92:bd:8a:23:62:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Validity
Not Before: Sep 1 13:09:01 2026 GMT
Not After : Dec 4 14:09:01 2028 GMT
Subject: CN=b9c7c552-f63b-4d16-a564-9e63d1c2343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:ae:67:44:27:57:70:7b:f9:d7:83:69:9f:
cc:57:8e:5f:a1:c8:ea:bd:ca:cf:ad:f9:95:68:6a:
d1:74:72:f5:6e:9d:ff:96:92:c4:bd:22:2f:0f:50:
9c:8a:24:e8:bd:6f:3c:47:29:8e:a3:d8:a7:99:7e:
5e:9e:23:d6:66:05:6d:87:4e:4c:0e:3b:64:e0:47:
4b:1a:6c:2d:56:54:0f:a7:f6:cc:62:00:c5:05:71:
56:ed:92:95:c8:5f:5a:96:b7:52:31:f9:ee:de:19:
18:9c:fb:05:3d:c9:6a:98:ee:8e:e8:19:5f:ab:d3:
f8:9a:45:4e:69:32:2c:25:45:68:41:bc:53:bd:55:
89:60:bb:43:fa:34:f6:35:09:65:2c:ca:d1:1e:4b:
e8:c7:6b:14:46:ea:f0:c7:bc:f7:4f:e6:b1:b1:d6:
e2:4f:9f:46:aa:44:56:87:65:52:6d:88:54:b5:f5:
bb:b0:d3:f9:2b:02:90:4e:c1:8e:1e:94:0f:e6:b5:
f7:a9:40:d7:bf:90:53:17:af:d8:82:4e:65:0f:d7:
b1:0d:68:b0:c9:58:99:78:29:a3:47:97:d3:d0:eb:
a0:32:f9:3c:de:66:b6:1d:4b:55:fc:8f:c2:76:3e:
c7:4a:8f:a0:43:0d:29:b6:fe:b7:a0:7d:c1:47:81:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:3B:3A:55:EB:72:D9:3B:A9:BD:91:33:17:37:73:78:BD:97:4C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/b9c7c552-f63b-4d16-a564-9e63d1c2343f/b9c7c552-f63b-4d16-a564-9e63d1c2343f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
X509v3 Authority Key Identifier:
keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
sbgp-ipAddrBlock: critical
IPv4:
204.79.147.0/24
204.79.199.0-204.79.200.255
204.154.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:78:6a:ae:73:19:04:51:79:75:39:cb:b6:78:9a:2b:ba:3a:
bf:5d:69:66:82:ca:d0:de:5c:73:f9:04:23:80:4f:25:94:70:
21:b7:85:36:f9:cb:30:a1:33:23:01:eb:5e:15:6f:0c:b3:2d:
ab:39:c4:4c:19:50:23:d7:6e:78:a9:87:e6:3f:83:f1:11:fd:
69:7c:52:cf:46:4d:c9:68:4b:14:8c:bc:ee:49:bd:70:42:f5:
1e:f0:40:0b:3d:c3:c7:11:af:bb:0b:dd:01:63:c7:d2:c9:e6:
8c:01:2a:4a:89:c2:f1:fc:74:ad:95:4a:3e:46:a9:a0:ed:70:
12:dd:7e:c6:e6:fa:60:6c:77:cf:61:c6:ca:5e:d9:39:6a:c2:
61:5a:33:7e:64:bb:fb:b3:bf:86:e2:97:98:4d:1e:79:e2:9d:
73:e0:7f:9a:68:06:91:f3:e1:2f:8b:e3:2d:78:b8:d8:56:ab:
33:10:61:d6:70:9a:b2:02:23:2c:a5:32:cb:09:f3:2e:c7:52:
fd:a3:99:0d:34:4f:53:42:ad:b5:22:b2:b1:d3:a0:9f:52:2d:
a1:aa:6c:21:e7:7d:e2:39:37:fd:87:c7:14:00:9f:d8:61:9b:
9c:ff:7b:40:44:ea:2e:32:27:37:99:77:b1:c0:0e:d6:69:38:
3e:d0:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:29 2026 by rpki-client