
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.cer
File: 3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.cer (raw, json)
Hash identifier: lHfdWgYuuncKfeQ7q5QC9qGV1LEB3Z9gVz8oSike5n8=
Subject key identifier: A1:C0:70:EA:E8:06:D1:C5:87:56:0E:09:C4:6B:10:3E:86:41:7F:20
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EF2DFDE213B0BF51CA9C55200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 25 Aug 2026 00:45:12 +0000
Certificate not after: Mon 27 Nov 2028 01:45:12 +0000
Subordinate resources: AS: 22691
IP: 69.48.144.0/24
IP: 69.48.147.0/24
IP: 2610:198::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:df:de:21:3b:0b:f5:1c:a9:c5:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 25 00:45:12 2026 GMT
Not After : Nov 27 01:45:12 2028 GMT
Subject: CN=3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:47:57:ac:06:20:69:d2:65:9b:2f:a3:34:
36:f4:37:f5:2b:ad:4a:9d:aa:da:d4:0c:17:37:a6:
38:8a:8a:68:39:9f:85:3a:67:79:94:46:29:d9:f6:
f6:54:c3:79:8a:c6:43:6f:f1:00:e5:69:47:33:bd:
b5:8b:0e:aa:fb:54:25:7c:fe:9c:02:4b:7c:2a:14:
b8:ab:2a:48:38:a6:6b:c6:7e:16:0d:1f:1b:85:b1:
93:15:2c:0f:2c:9a:12:7d:59:40:cb:18:03:cb:76:
e7:3c:2a:03:9b:de:b8:43:d8:a4:ab:4a:6c:ed:00:
1d:4e:44:83:28:46:fa:4b:e1:16:0e:10:76:f6:d6:
0e:7a:14:59:d7:97:41:97:2c:39:42:ab:65:a2:67:
15:18:7e:f5:b8:85:5f:1e:5b:f1:ef:05:d8:7a:50:
7f:0f:98:34:e8:5f:64:df:5c:55:6c:a9:f1:55:9b:
02:63:f1:65:e9:52:a2:a4:98:e2:bc:1e:be:6f:9f:
7e:cb:88:1b:40:7c:b3:9f:3a:06:ba:d3:e1:ca:0f:
8b:9f:5f:e3:0e:f5:3d:1a:5f:e0:0d:16:b7:63:59:
74:6f:55:98:6c:2e:37:63:d3:c6:81:65:77:7c:52:
54:89:68:8e:35:3b:b3:99:ba:58:c3:bb:c9:5b:a6:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:70:EA:E8:06:D1:C5:87:56:0E:09:C4:6B:10:3E:86:41:7F:20
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914/3f7f4ca5-5fe2-4dfb-ae7a-6062a20f5914.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.48.144.0/24
69.48.147.0/24
IPv6:
2610:198::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22691
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:12:76:1e:36:4f:29:d5:5c:58:13:4d:0a:17:8d:86:6d:94:
86:bb:b4:cc:f6:3a:bc:37:3c:64:a1:cf:33:4e:86:70:93:25:
b7:35:2b:c3:c2:c6:3b:5d:fb:6e:43:96:c8:80:09:e9:4c:11:
8d:78:17:23:f6:32:28:60:ec:2a:69:60:f6:c6:96:75:7d:f0:
fa:4b:bd:e5:2f:df:3b:ec:91:dd:bb:0f:da:6e:ad:2b:ff:e0:
7e:f9:2e:19:40:9d:61:0b:e0:71:69:74:46:ca:77:e0:da:16:
22:e2:d7:f5:43:56:a5:1b:f3:b2:b4:26:5f:4e:75:73:71:d0:
84:91:8b:9e:93:f6:4b:68:a6:3a:4e:70:3f:7d:52:aa:30:09:
77:d4:a1:42:5e:ad:54:56:90:11:c9:4b:1c:b0:92:67:86:93:
d2:0c:a5:9e:19:a2:2d:55:ca:7a:9d:52:d2:f5:a3:eb:1e:9b:
bc:ac:ff:59:f1:d0:4f:24:3f:70:63:1a:c3:27:6c:84:1a:97:
bf:c3:53:a2:1e:85:b6:71:99:0c:f5:94:72:68:e2:0f:95:90:
18:af:31:b9:d6:15:b4:a1:0f:04:e9:ec:a8:e2:b6:5b:7a:b0:
7f:46:d3:78:a6:2f:1c:ca:24:ec:6b:b6:42:07:a8:e3:2a:29:
ca:a4:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:09:32 2026 by rpki-client