
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
File: b1b35dc3-b096-40ba-8edf-87e481b625c4.cer (raw, json)
Hash identifier: KqrF7MKim3LJ1zvfxKFjcFy4uSEIKMKBGJ+ptP+huY8=
Subject key identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E2ACCD79F92EC33C716A39C10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 14 Jun 2026 08:45:11 +0000
Certificate not after: Sat 16 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 393559
IP: 2602:f8c8::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:cc:d7:9f:92:ec:33:c7:16:a3:9c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 14 08:45:11 2026 GMT
Not After : Sep 16 08:45:11 2028 GMT
Subject: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:6a:25:44:27:97:02:ea:4c:cc:b7:ef:aa:
4c:97:f7:38:a1:6e:10:81:50:3c:1f:f3:63:8e:00:
e1:58:3f:cb:8a:f9:f2:f6:98:45:84:97:e1:76:bb:
77:21:41:cc:17:b0:fc:a4:08:9d:53:70:b7:35:d8:
7f:2b:84:59:57:1b:b2:78:73:0b:10:cb:9f:c5:b0:
24:28:c2:42:a7:d9:cb:82:74:4a:6a:fc:93:ec:75:
c2:2f:d0:46:99:5f:5c:39:f1:61:6e:f5:d5:9c:34:
a6:a9:90:3d:ca:6c:d3:6c:84:bc:7a:33:ac:62:c6:
13:c4:43:ef:cc:4f:1e:e4:8c:bc:9d:ba:ca:33:4b:
96:19:dc:a7:d4:44:e5:2d:8d:22:02:3e:af:94:ca:
41:53:89:e6:80:0b:eb:1c:76:44:ea:8d:00:c4:42:
81:e2:f3:73:97:20:d4:5b:8d:db:97:cd:5e:47:c7:
64:83:dd:17:90:4f:bb:04:e3:8c:05:90:8e:62:15:
06:bd:f2:d5:7e:be:53:f2:5d:53:22:a9:2a:5e:dc:
e6:5f:11:2c:c6:08:02:b9:14:66:ca:fd:f7:f3:f0:
c0:b6:2b:c1:7a:01:c9:02:b4:7e:49:f9:a8:e3:70:
79:cb:86:8d:9d:ab:6c:31:51:ae:11:6f:c9:0a:2c:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8c8::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393559
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f5:df:36:6c:58:a5:1e:f0:8b:2c:e2:e8:0d:80:d3:16:26:
19:63:64:94:8d:08:7f:d2:ce:c1:1e:40:ed:b1:51:58:ac:01:
fb:d0:f8:f8:21:2d:7e:00:5b:de:18:14:da:c1:88:05:cf:ee:
38:03:cf:e8:18:37:ef:af:28:80:1a:dd:a3:ce:80:33:a4:74:
b7:9b:4a:24:ca:fa:b9:1c:12:1e:b7:14:54:8e:e0:53:9a:c9:
7d:cb:1f:5b:4f:49:ba:ef:d8:9f:b9:6f:6c:9d:be:19:33:8d:
37:7a:6d:61:42:95:3a:54:1d:32:7f:e5:10:a8:e7:4e:01:7a:
c7:78:be:55:ef:c6:62:7d:e9:1b:41:42:e8:46:c6:a7:d2:95:
28:9a:e0:e9:07:85:cd:11:92:3a:db:f8:ad:9a:a9:56:29:d0:
90:7d:4c:03:34:15:02:0d:d0:67:6e:fd:26:21:2d:bc:66:ff:
b4:e0:df:8f:0e:f9:a1:79:80:6f:ed:ae:6e:6c:0a:5b:a6:f2:
0f:2d:7c:51:91:f1:e0:d5:79:b0:02:dc:27:68:bb:65:bd:5d:
b8:ef:12:14:9e:72:91:09:ab:5d:5a:c9:a2:d6:09:b2:07:f0:
f9:c7:10:21:5c:52:8d:62:37:3a:60:f1:3b:94:14:18:e9:80:
67:74:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 02:14:39 2026 by rpki-client