
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
File: 5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer (raw, json)
Hash identifier: Du4UslGlgtZYuJOd+G5AxTgxnJykOXBSgMH+ZoALhK4=
Subject key identifier: 47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584ECBCA49D62C64736E84EB0300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Aug 2026 00:45:11 +0000
Certificate not after: Mon 13 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 1054
AS: 27426
IP: 68.68.248.0/22
IP: 2602:f656::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:ca:49:d6:2c:64:73:6e:84:eb:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 11 00:45:11 2026 GMT
Not After : Nov 13 01:45:11 2028 GMT
Subject: CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:8c:05:06:16:2a:f2:b6:ca:00:15:49:d1:
39:18:7f:7e:6c:6f:f1:97:7d:5b:b7:45:36:42:71:
59:59:4b:6c:fa:fe:3c:b9:63:c2:b3:bd:19:fc:27:
a9:5f:fb:b5:01:48:d7:9c:03:e0:90:70:9c:6c:02:
d8:c2:fe:b1:af:b1:da:0c:db:a8:86:8f:0b:88:87:
60:cc:d0:df:09:96:a9:fd:27:70:20:14:cf:11:65:
9b:35:80:8d:e2:6f:90:9a:2c:7f:3d:6f:48:ff:df:
ac:6f:47:f9:ed:17:bf:89:31:52:d8:3f:8f:6a:32:
78:75:15:cf:9e:3c:58:87:fb:4d:75:5e:5a:5c:af:
c1:f4:c1:75:49:16:1c:f5:df:2c:31:3a:f0:f3:27:
6a:b7:da:72:30:ac:b4:81:48:26:df:47:7e:6b:c9:
3a:21:c8:cd:a4:c1:23:20:85:25:f0:79:ee:e2:05:
3b:9f:9b:3d:f7:80:bc:25:14:b6:62:35:76:dd:a0:
f4:e0:df:ff:80:04:4a:aa:3f:07:07:78:96:2b:8b:
7c:29:62:45:a7:d8:ff:50:64:ae:27:33:3e:2f:1f:
fc:40:f4:af:2b:3c:88:46:7c:68:68:1a:14:ca:5c:
c0:6c:44:25:69:c0:00:bb:db:76:01:f7:ed:87:43:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.248.0/22
IPv6:
2602:f656::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1054
27426
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:c4:a3:40:10:14:da:8d:b9:ce:dc:8a:15:5f:49:90:59:c1:
76:7e:41:eb:c5:38:c4:4c:4d:bd:ba:f9:b3:b4:fb:94:9f:f5:
aa:49:7b:76:2a:0e:0a:4a:7b:e5:60:a8:ae:52:6d:64:54:bc:
60:be:c7:f0:4b:9a:a2:6b:ff:38:6b:a4:9a:98:21:08:05:5c:
01:13:94:8b:9a:37:c8:49:12:a4:15:97:c0:bf:34:58:30:e4:
2b:93:35:8a:fb:53:17:4c:cf:fd:f9:12:d7:6e:3c:af:5d:b3:
a4:60:6a:9e:39:b6:7b:35:a5:9c:56:4f:b4:af:05:55:9d:68:
3f:83:79:53:6a:55:9f:98:32:d4:44:65:45:98:70:7f:17:aa:
49:5c:84:ec:a3:11:db:f1:4d:10:5a:58:c6:80:26:e3:18:0d:
f9:c7:af:b1:0d:75:c0:94:43:df:a6:c3:53:c4:fa:2c:8a:3f:
9b:7f:fe:a9:73:65:49:e6:78:f9:0c:11:cb:b2:97:59:33:2f:
1e:ce:50:59:04:d1:28:bf:79:c9:03:39:2d:72:1a:62:33:7c:
7c:c0:5d:ea:69:92:fe:30:8f:17:40:b3:0f:4c:94:65:6f:79:
0f:f3:96:d1:90:89:9b:2d:47:a1:65:ce:8a:5d:fe:01:5c:26:
db:43:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:37:47 2026 by rpki-client