
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650.cer
File: 6b4271be-24be-4e3f-b6ab-bf0ddc950650.cer (raw, json)
Hash identifier: gAAJ6abeds3/mI8cY57P/UyADkcbgEHI6j5fGzn1FD8=
Subject key identifier: E8:39:63:35:46:09:A9:DE:D3:0B:0D:49:D0:3A:ED:45:2E:52:C7:AB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F0ECAB6D31B7DAFCCBFB4C340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/6b4271be-24be-4e3f-b6ab-bf0ddc950650.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 04 Sep 2026 00:45:12 +0000
Certificate not after: Thu 07 Dec 2028 01:45:12 +0000
Subordinate resources: IP: 23.139.108.0/24
IP: 2602:f637::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:ca:b6:d3:1b:7d:af:cc:bf:b4:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 4 00:45:12 2026 GMT
Not After : Dec 7 01:45:12 2028 GMT
Subject: CN=6b4271be-24be-4e3f-b6ab-bf0ddc950650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4c:78:3b:c4:b6:19:70:a4:31:97:7d:d9:88:
08:05:96:71:8a:df:5a:bc:26:69:20:fe:f1:3c:a2:
f6:8a:98:f1:20:db:fe:94:c4:f4:5a:6f:3c:49:38:
65:c7:bd:72:0e:19:31:b1:c9:ad:09:54:35:bd:a5:
3c:7a:0d:a8:aa:2c:48:3d:dd:52:22:c9:c3:3c:1f:
62:6b:b3:db:b7:85:a2:c6:08:c4:fd:1b:84:62:6d:
3c:55:cf:75:ab:6b:5b:47:78:61:c7:8f:41:c9:ec:
d4:5b:ba:10:85:c9:ee:bb:a0:25:ba:a0:a9:c6:bb:
e8:31:ff:42:31:6a:e4:18:9f:45:8e:f4:8c:0d:54:
f0:90:fd:5d:fc:eb:6d:37:51:b9:86:5d:ad:27:07:
23:65:96:6f:0b:c8:16:de:1b:90:44:84:0f:82:fa:
ca:2b:00:6c:ee:67:9c:89:dd:06:b3:56:98:75:97:
58:f3:24:93:62:f2:3d:bf:ff:63:6e:23:32:e8:00:
52:23:1e:a1:b5:d6:35:63:d1:bb:0f:fa:5b:41:4d:
84:5c:a6:84:80:03:ea:20:54:9d:a9:eb:b8:81:17:
ce:54:9c:1f:48:16:ad:9f:c5:3f:41:d9:34:5a:c1:
5f:fc:ba:a4:14:16:1c:b1:dc:a1:fd:5f:94:8b:76:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:63:35:46:09:A9:DE:D3:0B:0D:49:D0:3A:ED:45:2E:52:C7:AB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6b4271be-24be-4e3f-b6ab-bf0ddc950650/6b4271be-24be-4e3f-b6ab-bf0ddc950650.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.108.0/24
IPv6:
2602:f637::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:57:8f:2a:81:07:30:46:6d:61:dc:be:07:0b:6f:69:da:6a:
a9:3b:ef:9d:ed:eb:b8:50:64:f5:b6:0f:68:c3:63:58:3b:e4:
ab:68:a5:e1:a6:98:e5:a0:cf:90:07:30:73:9f:99:2c:c4:ae:
eb:98:16:f1:ba:b3:dc:11:62:15:de:0b:92:6e:4c:3e:92:66:
5d:5b:9e:53:3d:a4:19:91:66:10:96:ee:23:d6:80:91:2b:e5:
bd:fe:31:79:86:9c:1d:32:3e:ab:5d:c2:e8:0f:49:d7:53:d9:
a9:60:88:5d:85:a8:95:f2:1f:b4:0d:6a:fc:68:ac:c8:2a:3d:
af:f1:74:78:dc:cf:5a:95:e1:58:2d:f7:e9:1a:9a:17:ad:07:
13:a4:0e:03:a1:f8:e3:a5:41:54:23:a4:f0:fb:b5:ab:ec:fd:
28:64:0d:fd:cd:a9:b1:41:8a:be:1d:38:89:31:9e:68:33:55:
95:49:f3:6c:df:34:55:32:f9:b9:76:3b:4c:89:fa:a8:db:bb:
b7:32:cb:ab:01:c5:10:e6:e2:8c:3a:0a:bf:0c:54:c9:1b:30:
62:a2:cf:b0:c7:17:cc:b1:8f:5c:30:fd:da:90:04:a2:12:9b:
13:6e:4a:de:f1:b8:7b:bb:4a:c2:a7:11:2b:49:61:b4:c1:ae:
76:66:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:24 2026 by rpki-client