
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
File: 253f385b-feb4-4b22-9447-502d6e3a69ac.cer (raw, json)
Hash identifier: liB9smltrgduyqqeDSJlPGmjVwGyRQEE1nPfY5v+R+8=
Subject key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E7E8D5D1E067B23351D6C94FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 14 Jul 2026 08:45:11 +0000
Certificate not after: Mon 16 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 401081
AS: 401725
IP: 23.140.28.0/24
IP: 2604:ae0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:8d:5d:1e:06:7b:23:35:1d:6c:94:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 14 08:45:11 2026 GMT
Not After : Oct 16 08:45:11 2028 GMT
Subject: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:56:7b:c2:10:51:d4:cd:d3:66:fd:a0:5b:
c4:e2:92:1f:52:bb:99:40:d0:c9:19:df:84:f3:d3:
8f:18:30:44:e0:93:9b:8c:f8:90:03:a3:3d:c4:84:
9e:95:2e:da:e6:bc:2c:e1:d8:aa:77:7b:f0:e5:25:
d1:84:01:31:b1:43:20:b5:09:4b:07:cc:83:3e:00:
d6:ce:1f:ad:42:26:8a:a3:d6:83:83:df:10:32:71:
3d:e7:da:b7:f7:27:1b:22:73:18:b4:cd:8a:49:f3:
9f:6e:76:a4:3a:32:28:88:e0:8b:a6:a5:8e:3a:36:
ad:89:f2:c4:c0:f1:13:07:8d:57:ba:32:83:86:9e:
3f:9d:f0:26:80:f2:15:d0:09:a8:78:f2:6d:3a:f2:
cf:6d:7b:3d:7d:94:45:a9:47:f3:89:4f:f9:03:94:
8b:19:fb:13:12:5c:19:f3:9f:bc:26:4e:ee:df:df:
d4:bf:e9:87:79:7c:3b:a7:ef:56:71:f9:da:36:ca:
a4:21:4d:e8:e2:ad:21:90:ad:40:7e:b8:99:89:67:
32:9c:cd:a9:a7:96:39:c4:f4:b0:52:76:7c:6b:78:
52:df:f5:ed:c7:c7:81:96:fb:84:9b:b2:92:09:00:
72:f0:49:27:65:e2:7b:e3:34:3f:dc:73:4b:99:d0:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.28.0/24
IPv6:
2604:ae0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401081
401725
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:24:12:68:9c:be:bc:a9:3f:ed:d4:25:26:d0:eb:79:d3:b5:
2a:43:1f:de:70:a0:0d:32:59:a5:71:00:dc:1d:de:82:75:66:
a5:b2:e4:b7:d1:70:df:fb:92:d6:b4:b5:e1:f9:30:ea:e0:82:
71:21:65:85:d4:eb:83:cf:78:41:a0:b6:72:71:6b:97:19:ff:
b5:1b:41:d4:32:3b:59:1a:28:9e:0b:47:00:5c:87:f6:06:a0:
3e:43:b4:c7:5d:09:c1:c1:59:02:94:f5:42:20:c0:57:48:17:
8e:91:ca:2e:2f:db:e6:c9:d5:dd:3f:58:06:ae:52:04:2b:84:
a2:0c:9f:4a:71:08:ae:48:ef:cb:cc:d3:e5:0f:f4:33:72:4c:
02:b4:3e:ec:ae:bf:ea:bf:9c:14:1a:22:a3:b3:0b:da:fd:3c:
76:c2:ed:6a:57:bb:cd:4f:8e:8c:74:96:99:ad:aa:e5:88:75:
38:29:e7:1a:47:fe:60:ce:93:0b:8b:2b:5b:21:d8:01:72:50:
a4:a2:d0:8e:1d:ad:d5:f7:c0:42:51:8f:b3:59:cd:82:5b:6b:
8e:ec:05:93:da:70:a2:4e:19:91:38:35:3a:0f:17:c6:c6:99:
86:7c:cd:db:20:9d:b3:77:57:82:a5:3c:bd:07:ed:b4:56:91:
47:1f:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:15:45 2026 by rpki-client