
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer
File: 646b4c8f-df71-430f-9338-67bba3a82c34.cer (raw, json)
Hash identifier: 7D9avSMwd7GCwDoGyY12basEsRuixVEU8ytmBYn+Rh8=
Subject key identifier: DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F43D5B40040920F4664941DC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 23 Sep 2026 00:45:12 +0000
Certificate not after: Tue 26 Dec 2028 01:45:12 +0000
Subordinate resources: AS: 15044
IP: 64.56.224.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:43:d5:b4:00:40:92:0f:46:64:94:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 23 00:45:12 2026 GMT
Not After : Dec 26 01:45:12 2028 GMT
Subject: CN=646b4c8f-df71-430f-9338-67bba3a82c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:b4:ff:fb:e5:1d:da:74:16:35:95:8a:d4:
25:80:47:c2:2b:55:ac:eb:8d:20:e5:9c:3a:e1:17:
8c:39:85:b9:5e:d6:3b:64:e0:ea:97:8f:31:d8:f8:
53:04:a0:1f:24:9f:5f:b7:fe:f8:9c:d5:0a:c6:d0:
1d:6a:8f:68:ec:21:17:c1:cd:5d:91:c4:9a:a2:65:
da:69:e5:05:4f:3b:2f:28:57:10:d2:99:4f:4a:6b:
99:f3:a6:fc:85:ee:9c:47:b3:60:fd:1e:09:7f:9b:
6b:e6:c0:28:5e:d7:bd:e4:af:e4:03:f2:ed:61:ca:
ba:35:bf:f1:73:30:51:af:e1:c4:05:0a:34:46:f9:
fc:0f:e0:e8:16:93:46:a1:d3:f5:fd:fb:53:53:ca:
a6:3d:d2:7d:8d:28:fe:52:3e:71:33:ca:af:65:e4:
d2:bf:6e:2c:fd:9c:ab:f6:e9:49:0c:6d:f7:a3:b9:
e1:d3:a6:b2:35:a0:4c:e7:62:52:12:fc:e2:5e:3f:
ca:c1:8c:fb:99:0e:2c:83:75:fe:92:12:47:95:0c:
65:0e:75:b3:0b:00:a0:1a:b1:68:21:48:ba:7c:7f:
1e:b0:23:6b:c3:f5:78:7b:8b:70:e1:c3:11:db:87:
94:ab:f4:2d:e7:1d:fb:8d:23:01:b8:f7:bf:39:bd:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.56.224.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15044
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:62:99:7a:92:db:f7:9f:30:aa:d7:71:d2:32:89:5a:2f:64:
73:8b:87:9d:1d:e1:05:62:89:07:c0:05:c7:99:6f:10:62:37:
19:d8:b9:77:d3:54:55:3e:21:d8:66:96:fd:47:93:3a:a0:07:
6a:1c:4b:f7:8b:48:ce:bf:b3:d7:35:06:bf:94:8d:77:7b:64:
9d:c8:b3:4a:30:c1:d6:66:94:01:e1:ea:fc:8a:a6:eb:cf:c7:
76:e6:f8:da:42:d5:01:44:9d:0c:e2:06:1f:a0:52:59:f8:71:
47:9b:e3:8f:72:39:0f:ba:58:cb:a6:d9:f2:f9:78:84:70:63:
e1:7a:f9:16:51:7b:a8:81:84:75:97:be:43:ff:67:4a:82:f4:
10:29:c3:03:0c:82:c2:7a:d0:87:07:82:8e:fa:71:d5:61:01:
26:e4:1b:a2:91:da:b8:e4:29:95:bf:b5:2d:71:a1:65:27:cc:
1b:b7:77:36:a4:1e:18:ab:9f:ae:b8:ab:c3:1e:48:4d:b2:49:
57:d7:2c:6e:4f:3c:d0:35:e0:00:d6:45:0d:fc:7f:ba:e0:23:
41:c5:37:e3:d0:a6:7a:67:01:f0:39:6d:c6:a1:3c:54:c0:15:
0c:0c:3c:17:45:b6:ce:a4:22:27:76:19:ea:8f:fe:26:1e:53:
7d:2f:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:51:09 2026 by rpki-client