
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
File: aa34647f-3229-480c-9b05-3cf0b00fa173.cer (raw, json)
Hash identifier: Xv/GYWczlzCJYTnP0ayNZINc6Z6wHnS9CPs4nXIcK1w=
Subject key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EBDD4DE4A1C37D40E07266880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 06 Aug 2026 00:45:11 +0000
Certificate not after: Wed 08 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 26431
IP: 45.159.108.0/24
IP: 185.159.89.0/24
IP: 203.31.160.0/24
IP: 2602:f666::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bd:d4:de:4a:1c:37:d4:0e:07:26:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 6 00:45:11 2026 GMT
Not After : Nov 8 01:45:11 2028 GMT
Subject: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:9d:a8:3d:eb:e5:8e:62:7b:50:7e:93:ab:
90:5d:35:c3:50:4b:0d:45:e9:5a:13:29:3e:4d:bc:
50:d7:2f:be:56:51:bc:5c:d0:2d:e6:d6:69:a0:fd:
ec:7d:a8:ef:15:81:2e:c3:4a:f3:0f:8e:5f:a8:b7:
24:2c:92:aa:76:e7:43:12:d4:aa:44:66:b4:bf:c7:
d5:30:cc:40:d9:cd:38:27:0d:12:05:41:9e:74:34:
33:92:c3:9c:db:e3:d7:bb:dd:a6:51:83:d5:79:e3:
d5:48:8c:d8:84:69:41:7a:c2:df:c5:d2:7a:8f:76:
a9:28:8a:90:4c:fa:56:77:79:3f:34:46:6c:73:d8:
5a:26:76:f6:95:cf:f0:a0:da:07:ff:40:f5:72:16:
05:a4:8e:af:8e:ef:6a:0f:04:0e:d2:c8:fa:ed:72:
c8:5b:c1:85:cf:d9:04:2c:97:5f:69:b2:9f:16:ca:
95:8e:5b:29:42:06:bf:12:18:cc:bd:51:d2:31:a5:
a3:64:34:c3:59:8a:3c:60:99:fc:f3:34:81:ed:a4:
f9:6e:3f:b3:8a:08:00:21:b4:e4:3c:6f:6a:62:a0:
36:5b:91:b1:9d:e9:00:1e:5a:8b:6d:b8:74:a8:3c:
5f:00:0a:e3:2f:af:d3:cc:c8:cd:dc:fb:db:85:b9:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.159.108.0/24
185.159.89.0/24
203.31.160.0/24
IPv6:
2602:f666::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26431
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:13:88:e7:07:4b:a5:9b:e1:a5:ad:fc:fd:34:b5:f8:62:de:
a7:da:f6:be:a4:e6:6a:bc:13:7e:d3:bc:c1:79:79:59:09:bf:
13:47:10:61:a2:b3:0f:03:95:40:ce:73:79:9c:91:09:f5:47:
f4:84:67:b0:d0:7f:84:ad:77:fd:84:02:66:d6:13:84:86:60:
f1:71:7c:12:3a:fa:bc:6c:dd:de:27:ab:b6:9c:3e:f7:7b:48:
f4:05:e1:f3:cf:ad:68:4a:7d:96:b9:53:49:5b:94:e3:bd:45:
f7:89:a5:01:c2:97:96:b7:7d:14:09:19:bc:64:c9:bc:76:3e:
79:0f:cc:72:b5:9a:57:ac:1c:54:5e:d4:ec:50:05:fe:70:db:
52:ee:30:59:92:33:da:07:1f:d5:c2:f2:ea:fc:27:f1:d9:14:
77:84:9c:67:e7:5b:37:6b:1e:58:9e:eb:10:e7:01:d1:b6:3e:
7a:36:c6:41:7f:11:08:91:af:64:70:e5:53:6a:c1:1b:61:ac:
a9:5d:c4:eb:b1:06:69:4e:e7:dc:29:7a:78:e8:4e:99:c2:5b:
f8:89:90:f9:e2:6e:08:8e:7f:08:b9:67:6f:9b:41:25:69:2b:
d2:ca:52:23:fb:3f:ff:0a:b1:9e:c2:56:f4:58:72:ae:0a:c8:
0c:56:eb:a4
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE691N5KHDfUDgcmaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDgwNjAwNDUxMVoXDTI4MTEwODAxNDUxMVowLzEtMCsGA1UEAxMk
YWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZhMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xKdqD3r5Y5ie1B+k6uQXTXDUEsNRelaEyk+
TbxQ1y++VlG8XNAt5tZpoP3sfajvFYEuw0rzD45fqLckLJKqdudDEtSqRGa0v8fV
MMxA2c04Jw0SBUGedDQzksOc2+PXu92mUYPVeePVSIzYhGlBesLfxdJ6j3apKIqQ
TPpWd3k/NEZsc9haJnb2lc/woNoH/0D1chYFpI6vju9qDwQO0sj67XLIW8GFz9kE
LJdfabKfFsqVjlspQga/EhjMvVHSMaWjZDTDWYo8YJn88zSB7aT5bj+ziggAIbTk
PG9qYqA2W5GxnekAHlqLbbh0qDxfAArjL6/TzMjN3PvbhbnMgwIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFPZkzVblL1y3gZwrSPsbzVucx/qmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9h
YTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2FhMzQ2NDdmLTMyMjktNDgwYy05
YjA1LTNjZjBiMDBmYTE3My9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAw
ZmExNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAtn2wDBAC5n1kDBADLH6AwDgQCAAIwCAMGACYC
9mYAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmc/MFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGgTiOcHS6Wb
4aWt/P00tfhi3qfa9r6k5mq8E37TvMF5eVkJvxNHEGGisw8DlUDOc3mckQn1R/SE
Z7DQf4Std/2EAmbWE4SGYPFxfBI6+rxs3d4nq7acPvd7SPQF4fPPrWhKfZa5U0lb
lOO9RfeJpQHCl5a3fRQJGbxkybx2PnkPzHK1mlesHFRe1OxQBf5w21LuMFmSM9oH
H9XC8ur8J/HZFHeEnGfnWzdrHlie6xDnAdG2Pno2xkF/EQiRr2Rw5VNqwRthrKld
xOuxBmlO59wpenjoTpnCW/iJkPnibgiOfwi5Z2+bQSVpK9LKUiP7P/8KsZ7CVvRY
cq4KyAxW66Q=
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:35 2026 by rpki-client