
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
File: 35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer (raw, json)
Hash identifier: C1L+49qU3DGtJW6c62+eRREvPaRajNkXIZistblsG6I=
Subject key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E29677EC45BD4B9563DAE84C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 13 Jun 2026 20:45:11 +0000
Certificate not after: Fri 15 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 14511
IP: 66.231.96.0/19
IP: 216.196.64.0/19
IP: 2610:188::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:29:67:7e:c4:5b:d4:b9:56:3d:ae:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 13 20:45:11 2026 GMT
Not After : Sep 15 20:45:11 2028 GMT
Subject: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:8e:21:ff:61:09:18:70:c0:84:10:7b:da:
c2:59:0b:3b:18:f6:6d:02:76:9c:c4:22:4a:9c:25:
38:33:59:55:d8:28:1d:6b:6e:cb:ab:dc:1b:f8:d3:
9b:6e:14:14:3a:28:0f:a3:d2:d3:40:e6:ab:7c:bf:
c2:52:57:2d:b6:6f:53:98:ed:75:f1:4e:d3:77:0b:
37:f9:d0:b0:9e:0b:3f:61:da:9b:09:97:a1:fa:62:
33:a7:6e:18:7d:36:e8:5a:01:38:c1:b9:eb:20:b4:
38:14:69:53:28:1c:42:60:8a:42:f8:69:79:f9:3f:
0d:e1:f8:24:e9:14:89:51:95:7c:06:e1:bf:5f:e2:
c2:3a:a8:04:0d:6a:79:a5:f0:26:b1:b4:7f:24:27:
66:aa:55:51:0c:29:8f:e1:e4:b7:82:75:5b:fb:ab:
df:2c:84:10:f0:86:78:68:56:23:03:d8:0f:e3:83:
a8:74:41:e3:74:b9:78:51:24:a9:54:a8:cb:df:6b:
59:7c:4a:9e:8d:bd:50:39:b4:3c:40:05:07:66:e1:
ba:8f:60:30:76:3d:c4:65:d6:2a:a7:48:a6:36:37:
f9:32:83:f4:be:0b:b5:38:14:91:3e:57:59:6b:e4:
ce:ca:e1:0b:f9:81:b3:0b:6a:be:f7:1a:d0:34:b0:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.96.0/19
216.196.64.0/19
IPv6:
2610:188::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14511
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:4f:96:e0:b0:25:69:a1:24:e1:3f:77:cd:e7:18:6c:c0:72:
f1:98:2c:1b:e5:7d:dc:b6:5b:e2:f4:00:9d:2c:f8:e8:25:72:
4b:63:fb:6f:79:04:c1:ff:f3:6f:b7:26:02:90:82:31:87:46:
82:0b:f0:3e:14:d6:e2:cf:41:84:59:e3:29:f5:12:9c:b4:aa:
a7:76:16:a8:dc:8b:d9:e8:ed:bb:21:da:ca:e8:43:cc:7e:5e:
20:a1:65:fe:27:09:21:7b:d6:f2:fe:5c:e2:c2:c2:09:75:39:
f3:05:d0:90:4a:a5:e0:3e:22:ec:06:c0:4b:f4:39:e9:a0:c6:
be:af:de:f3:e2:c9:ae:97:24:46:d9:82:c5:81:25:66:62:36:
1d:45:7f:80:02:46:18:b7:61:1d:5f:a1:b9:79:f8:5d:8d:a5:
94:4b:c9:45:38:25:fb:c7:64:15:1d:a3:47:08:9b:5c:ad:bc:
1b:09:fa:69:7d:7d:53:ac:dd:4e:b5:e6:e8:4c:98:dc:9b:a8:
80:0e:a2:9c:a5:cf:8c:2d:68:9b:2a:ba:1c:de:33:e7:b0:d5:
2d:f3:54:10:c7:0d:72:cd:e6:cd:0f:69:93:90:0d:cf:5c:0b:
a7:f1:04:de:7a:c4:b3:a3:06:be:5b:d2:e2:ae:87:df:1a:63:
8b:b9:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 23:22:53 2026 by rpki-client