
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer
File: 9052f135-bd8c-426f-88a5-6b30bb6e99c8.cer (raw, json)
Hash identifier: oynwsrMYySQ85nr0Zmm3JrYB7qUL1OGFfkcXtO1dl3k=
Subject key identifier: 9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584ECBCA49C5E395BA3B686D1100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Aug 2026 00:45:11 +0000
Certificate not after: Mon 13 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 46958
IP: 74.113.204.0/22
IP: 2620:126:d000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cb:ca:49:c5:e3:95:ba:3b:68:6d:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 11 00:45:11 2026 GMT
Not After : Nov 13 01:45:11 2028 GMT
Subject: CN=9052f135-bd8c-426f-88a5-6b30bb6e99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2d:1f:58:0e:42:f6:e5:0c:64:22:b8:74:90:
d1:b7:89:e2:37:01:32:a8:87:39:d3:d1:dd:7b:ad:
28:86:00:e5:b9:ab:4f:6d:a3:89:42:60:80:09:07:
4b:3c:9e:f8:bb:e0:33:23:41:bd:fc:70:32:d6:11:
3c:87:a7:11:47:b9:d3:ba:55:6d:fd:54:df:29:9e:
62:49:58:8a:9d:5a:1c:13:cb:cb:df:df:02:e9:1a:
dc:70:b0:38:6a:a2:f1:96:42:4a:56:43:35:7d:c0:
9b:78:d4:83:a9:21:f5:3a:e0:ba:7d:01:e4:23:43:
50:0d:36:f2:6c:50:14:a9:13:d2:3e:09:17:0d:a1:
e8:4f:85:6b:d7:be:74:45:82:68:e8:25:63:d3:ce:
6a:2c:e3:6e:f2:99:fc:46:84:69:95:c0:08:95:66:
5d:d7:cd:70:f6:75:2b:5b:4e:4c:29:3f:50:b1:3e:
d9:4c:11:60:61:4c:bc:9c:e6:ab:15:7e:96:31:01:
d1:a5:24:7e:3f:60:cb:24:46:8a:16:1e:7e:8c:a6:
bd:b2:14:e9:9a:d2:9d:1b:b4:8f:c5:66:8c:8f:7c:
a7:5e:9c:00:1b:57:ee:b7:6a:c1:e9:4d:3e:d7:36:
dd:7d:f0:1d:f3:01:d4:f4:ac:96:0a:f9:3b:ba:99:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:2E:69:31:8C:74:09:1B:0C:D7:1C:02:B0:DB:FF:C2:8E:2D:DB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9052f135-bd8c-426f-88a5-6b30bb6e99c8/9052f135-bd8c-426f-88a5-6b30bb6e99c8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.204.0/22
IPv6:
2620:126:d000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46958
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:ad:3e:c6:23:2a:b6:f9:3a:74:2f:9c:bc:f0:2c:25:a3:40:
aa:4a:1a:43:d5:ff:5f:1a:eb:0b:9d:d3:2f:26:0c:f5:65:35:
f4:79:45:aa:b9:8e:a7:3a:20:85:c8:a7:68:88:b4:b5:87:7f:
68:8f:26:49:35:b8:10:af:e1:96:ec:a5:ba:6f:0c:18:9e:72:
b4:ca:62:96:9b:56:37:1f:f9:f6:19:9e:4c:c0:8f:33:78:9e:
c1:a0:49:bc:3d:84:10:f0:a6:03:0c:85:6e:1f:7d:31:03:ab:
18:7b:5c:e9:ed:0c:d0:1a:b5:c3:2a:cd:16:6d:a9:d8:86:d8:
62:b0:e4:e7:d5:6f:87:d5:4d:b4:e4:e3:d1:41:80:3d:ae:5e:
de:89:3f:67:b9:fc:59:4f:30:5b:9f:98:a6:95:a1:4e:4c:f3:
70:0f:c8:55:51:98:95:3b:56:00:1d:76:f3:e5:96:a1:b3:eb:
7a:ed:b2:a1:04:d2:a4:76:66:ff:70:f3:95:8c:6f:da:ce:0b:
e0:4b:5c:e4:0d:cb:95:9d:d8:bb:bd:70:94:9d:21:13:fe:4c:
aa:bc:ac:b5:15:36:49:5d:ae:44:45:18:54:3e:ee:5e:2b:81:
2b:8e:15:8f:20:81:42:50:a2:ef:3b:a3:87:f9:f7:61:9a:2d:
e2:e9:97:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Aug 25 11:02:22 2026 by rpki-client