
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
File: 0e59c137-0619-407b-87ce-8a4e08dd6c63.cer (raw, json)
Hash identifier: vOdKjN56SJrvNyyuTicV7GzCyf8WnuTqiSeF9pH9aZ8=
Subject key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584ED85A5E18AA1E274A7E3C5080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 15 Aug 2026 12:45:11 +0000
Certificate not after: Fri 17 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 12025
AS: 22625
AS: 62947
AS: 395174
AS: 401026
IP: 66.35.32.0/19
IP: 69.71.48.0/20
IP: 72.44.192.0/18
IP: 74.206.96.0/19
IP: 104.153.188.0/22
IP: 104.193.44.0/22
IP: 135.84.108.0/22
IP: 138.207.64.0/18
IP: 148.51.128.0/17
IP: 162.223.160.0/22
IP: 162.252.176.0/22
IP: 174.128.0.0/18
IP: 198.199.52.0/22
IP: 199.48.80.0/22
IP: 199.190.194.0/23
IP: 204.86.116.0/22
IP: 205.235.80.0/20
IP: 2605:3380::/32
IP: 2607:2f00::/32
IP: 2607:a500::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:5a:5e:18:aa:1e:27:4a:7e:3c:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 15 12:45:11 2026 GMT
Not After : Nov 17 13:45:11 2028 GMT
Subject: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:62:16:1e:22:d4:06:9e:16:fa:78:72:c1:
33:6b:c1:ca:99:1e:0a:fb:fa:00:1d:26:06:28:7e:
97:f0:58:92:f9:69:3f:4f:47:a0:1c:8b:6a:68:93:
78:4d:a3:91:66:63:cf:f7:b6:ce:6a:1f:10:c7:89:
73:30:44:3c:44:a7:4c:cc:77:e9:36:2d:aa:3a:d5:
70:7f:14:55:c8:18:16:67:32:e1:0f:41:05:9c:b1:
12:ce:a1:93:28:ad:94:16:a1:0a:3f:5f:f8:88:12:
09:67:da:e8:76:ba:84:81:fc:82:c0:06:14:ba:db:
5c:d7:87:d9:15:3e:8b:25:91:24:58:fc:6c:81:7b:
93:81:02:49:19:e4:2a:12:e9:34:e2:8b:74:6b:5f:
51:0a:4f:70:34:6a:fd:4c:07:99:e2:b0:4f:f3:71:
ad:16:a7:b3:5f:02:c1:f0:4b:83:a8:9f:97:5d:99:
b7:fe:ea:c5:46:fe:d1:a1:0f:a7:d4:30:8a:34:a3:
00:68:bf:60:07:17:82:c0:ec:0d:d1:43:a8:8d:a2:
5c:78:1d:a8:a2:83:63:f9:bd:08:9e:a5:c3:63:bc:
74:7f:63:e5:1d:9c:9d:dd:93:87:64:52:37:32:6f:
f5:17:83:9e:15:11:ea:d7:ed:20:fe:d8:16:ec:ac:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.35.32.0/19
69.71.48.0/20
72.44.192.0/18
74.206.96.0/19
104.153.188.0/22
104.193.44.0/22
135.84.108.0/22
138.207.64.0/18
148.51.128.0/17
162.223.160.0/22
162.252.176.0/22
174.128.0.0/18
198.199.52.0/22
199.48.80.0/22
199.190.194.0/23
204.86.116.0/22
205.235.80.0/20
IPv6:
2605:3380::/32
2607:2f00::/32
2607:a500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12025
22625
62947
395174
401026
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:cd:61:e6:c1:64:65:e8:a1:9f:9d:62:ce:83:48:2b:cf:e0:
72:e3:dd:98:0a:3d:6e:fe:d4:65:38:87:07:60:e3:89:f6:a3:
d1:cc:72:13:26:ff:ae:87:7b:df:6b:d3:08:29:ae:cf:40:41:
b6:5e:49:70:31:cb:bf:b8:ec:a9:9b:4a:0d:94:ae:99:2b:e2:
a8:61:bf:8a:70:c5:74:3c:b2:97:c6:0e:e0:aa:af:a7:0d:cd:
95:fd:00:35:b1:38:f0:a1:48:8a:4a:b2:14:4c:60:13:f2:7f:
cc:d7:cd:7c:a1:88:34:2e:8e:5f:83:cf:a1:41:36:e4:cf:72:
b5:a6:16:17:f7:e3:0d:05:d0:2c:8b:b0:46:b6:9a:31:1b:0b:
8b:9a:62:e4:0c:72:c9:f5:65:d1:fc:f2:64:53:d8:3e:dc:ef:
15:0f:bb:df:bf:05:db:fb:46:81:b4:3a:80:a5:e7:d1:b2:e4:
4e:95:39:40:34:e5:5b:47:4f:9d:cc:59:f8:79:1a:9c:c4:8f:
c6:8b:90:f8:54:65:cd:fe:dd:80:c8:30:96:b0:97:c1:90:b0:
45:76:06:02:eb:62:84:be:fc:b6:fd:df:aa:e5:06:b8:fe:e7:
b5:c4:86:77:59:57:a0:a9:d2:2c:86:d6:3c:59:d2:11:f5:ec:
5e:d9:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 13:32:07 2026 by rpki-client