
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer
File: 91625b8e-8d13-496f-b542-d170ffd5f3fa.cer (raw, json)
Hash identifier: FMWfl56t6X+ILYHpG4CnmqUgidb8gsJvdB3JHbqhIa8=
Subject key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EA8E4BD3482627FA343A4CE80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 29 Jul 2026 12:45:12 +0000
Certificate not after: Tue 31 Oct 2028 12:45:12 +0000
Subordinate resources: AS: 5065
AS: 6207
IP: 148.222.158.0/24
IP: 165.140.192.0/22
IP: 2604:1560::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:e4:bd:34:82:62:7f:a3:43:a4:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 29 12:45:12 2026 GMT
Not After : Oct 31 12:45:12 2028 GMT
Subject: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:9f:0c:b9:d6:86:4f:49:e8:e2:2b:59:fa:
fc:da:49:40:c3:51:71:a3:98:d5:3b:d0:9e:6f:99:
b3:2c:67:d7:77:f1:15:19:20:8e:ca:c3:e3:f1:30:
4c:8d:ba:76:24:b3:0a:65:4e:47:f8:68:c0:34:40:
e5:e9:2c:d1:61:20:d8:68:eb:04:79:f1:7b:ad:a1:
00:f1:c2:a4:9a:95:42:76:8e:24:87:5e:2f:96:fb:
f8:8f:53:c7:c9:74:e8:44:90:1f:a1:fd:42:9c:bc:
c7:79:1d:be:a7:57:c7:a6:97:19:b7:45:11:51:d1:
af:9b:73:63:82:b8:5f:b0:86:f4:ce:a4:7e:66:1c:
c5:58:57:04:1b:14:f9:db:bc:5b:d4:79:09:3d:ab:
e3:fa:e2:12:5f:dc:70:89:79:00:7f:1a:f1:7d:51:
a4:ec:51:fe:82:bc:a6:3c:e8:68:81:c2:a0:1d:82:
09:f9:f1:8c:ef:d9:5b:58:d3:a5:48:4b:df:8b:42:
5d:c6:48:2f:a5:84:ff:d6:fe:3e:ce:08:20:57:82:
8f:e2:8c:ff:72:21:a4:8b:b9:d7:96:32:5b:6d:ec:
8f:c6:f3:1c:69:70:60:0d:a9:51:c5:14:eb:89:5a:
5e:7d:4f:1d:bf:75:9f:51:b4:29:65:10:5a:21:bc:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
148.222.158.0/24
165.140.192.0/22
IPv6:
2604:1560::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5065
6207
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:34:fb:a6:71:02:bc:0b:94:09:9e:53:18:08:15:cd:67:85:
c5:07:3e:7a:9e:ef:32:79:f7:45:89:8a:60:ea:79:81:6f:45:
a9:2f:dc:07:cf:6a:d5:51:48:47:82:e1:18:d8:aa:76:62:30:
7a:c3:e3:1d:5c:87:a7:ec:13:ac:f5:c9:cf:33:16:91:5e:cd:
f1:65:27:5f:3b:dc:f9:77:56:4d:25:5a:2f:8e:58:ec:04:ef:
e9:50:0b:f4:ee:57:b2:bb:db:6f:4d:db:0a:82:a1:64:a8:86:
79:0e:f0:3b:78:fb:68:59:ad:bc:b9:e4:66:23:d6:87:48:7c:
ae:23:82:0a:22:28:b8:2a:c6:90:fe:5c:f6:01:ee:c2:f2:d5:
84:3a:11:8f:a4:bb:d9:e5:ff:13:96:8e:10:2d:40:fe:f5:a5:
69:ab:ca:80:57:78:6f:2e:4c:ca:de:01:48:ad:fb:be:5a:0f:
18:03:9c:dd:ca:75:8f:b8:20:47:3a:61:1d:42:f3:de:f6:39:
d8:3d:45:df:60:d7:32:d0:f4:95:25:a0:23:bf:e2:df:bd:d1:
0d:71:d8:16:1e:89:14:1d:cb:ab:d7:7c:31:3e:3c:ab:72:25:
bd:c3:f5:31:38:48:ee:7b:b2:13:67:88:38:69:07:ab:af:5b:
6e:50:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:26 2026 by rpki-client