
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15.cer
File: d38fa32a-a6da-4615-8255-2c818c06ef15.cer (raw, json)
Hash identifier: QcvJDqA1ALl1cliC92Ptn+yN+lcdUHYxl6bX9egsYu8=
Subject key identifier: B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584FAF510CFE36CDDFA4E3501B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 31 Oct 2026 12:45:13 +0000
Certificate not after: Fri 02 Feb 2029 13:45:13 +0000
Subordinate resources: IP: 204.107.89.0/24
IP: 2606:8740::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:af:51:0c:fe:36:cd:df:a4:e3:50:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Oct 31 12:45:13 2026 GMT
Not After : Feb 2 13:45:13 2029 GMT
Subject: CN=d38fa32a-a6da-4615-8255-2c818c06ef15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:8e:1c:20:91:30:62:20:dd:87:c5:99:fa:
99:6a:87:73:bc:b2:45:9a:f7:2c:47:6e:2a:39:80:
7f:34:2d:52:a9:1c:d3:fc:35:91:98:82:de:62:84:
39:2c:0a:a4:27:22:2c:10:53:f4:a4:0e:0e:fc:ee:
21:c5:ea:f2:7b:50:63:50:24:45:ac:6f:1a:01:45:
35:81:ec:1c:ef:80:02:81:ca:9a:da:91:46:65:96:
ca:30:7b:24:05:37:d1:e9:09:f4:0c:fe:92:cd:97:
d8:9d:4c:34:8f:1f:43:15:9c:c5:89:2d:69:d5:4a:
47:94:60:45:1e:5e:d2:bc:e2:b2:81:5e:73:7f:96:
fd:d8:fe:3d:72:5a:4b:38:0b:56:0c:29:1c:bd:7f:
af:41:67:fb:07:0e:75:da:4f:47:86:34:1d:b2:93:
08:84:63:78:ae:a9:6e:4f:76:bd:de:55:ce:fb:69:
d4:83:f2:1f:02:51:4e:e2:18:30:5b:0c:35:e7:4f:
eb:e3:94:4b:5d:07:bc:53:b4:be:67:5c:20:7f:74:
40:61:57:41:ff:33:ef:ff:72:79:75:27:aa:33:dc:
01:37:ff:1f:29:bc:2f:1b:cf:44:71:44:02:f1:c2:
e3:11:ba:fb:a2:7d:51:d0:61:e5:cb:a3:26:07:12:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:1C:77:5A:84:56:36:CE:B2:69:45:C5:6F:E4:A3:1D:07:07:6C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d38fa32a-a6da-4615-8255-2c818c06ef15/d38fa32a-a6da-4615-8255-2c818c06ef15.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.107.89.0/24
IPv6:
2606:8740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:be:4a:7d:c1:18:9e:49:b0:92:33:1c:93:ee:e6:da:51:c0:
d5:f4:b9:33:07:cb:ec:8d:f8:27:ed:19:98:9a:b9:2e:9c:7f:
d3:93:75:59:25:55:66:93:a2:04:90:c9:91:bf:79:53:84:96:
d3:12:0a:36:e3:20:e0:46:61:17:f0:d8:d9:2d:95:03:3a:dd:
7e:3e:99:3e:b5:dd:53:ab:de:19:0f:4d:ee:b3:5a:9a:51:ca:
9a:33:42:e0:01:8b:d8:90:69:2d:ca:6d:83:5b:b1:8b:a8:8e:
13:c2:10:ed:89:04:b7:d2:ae:2e:6c:0f:0e:a7:ab:7d:6a:f1:
17:c3:f5:73:b7:01:22:0d:a6:05:52:71:38:6c:fc:e0:eb:b6:
df:85:6b:ef:f2:35:a5:a7:76:48:8a:de:68:97:a2:b4:79:61:
d6:e4:83:be:77:c5:37:f2:88:65:26:7f:ae:ec:79:3b:32:88:
f9:bc:5b:17:dd:96:86:86:2b:63:54:77:0c:bf:8e:29:4a:e0:
2a:13:58:c0:d2:b4:be:ef:7e:90:d0:71:e8:4e:d9:4c:b4:cd:
b5:0e:2f:92:7c:0e:78:dd:b4:e1:c1:fe:b2:4d:5b:98:65:40:
4e:56:1e:bb:e9:ae:aa:15:c5:1a:1e:26:09:3a:9d:61:7b:38:
6c:3e:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:24 2026 by rpki-client