
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
File: d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer (raw, json)
Hash identifier: kGQ1taUrbELpo+aL2U7vByZhypfHv3z3O9IXHgqtd+s=
Subject key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584ECD2FA04F01C64680FC7C2900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 11 Aug 2026 12:45:11 +0000
Certificate not after: Mon 13 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 20118
AS: 402436
IP: 23.129.188.0/24
IP: 142.248.92.0/23
IP: 2602:f797::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:2f:a0:4f:01:c6:46:80:fc:7c:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 11 12:45:11 2026 GMT
Not After : Nov 13 13:45:11 2028 GMT
Subject: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:0e:b0:56:7e:9a:ca:db:2f:6c:c8:5e:74:
90:0d:dd:91:40:59:75:eb:89:a2:f9:06:78:b6:26:
42:7b:00:d7:06:30:c2:00:26:5e:d4:c2:bf:3d:4b:
b4:82:aa:88:cf:33:5e:55:1d:c1:77:eb:c6:ff:c5:
a7:e7:0d:34:0a:a9:35:77:32:fd:43:c3:47:7d:77:
a4:04:ee:18:3b:ab:30:75:8f:f0:0e:51:40:c3:9e:
d2:a5:87:18:39:92:56:95:0c:f9:49:8f:6e:46:9f:
e4:fa:ed:49:52:39:55:74:37:78:90:71:13:72:37:
fe:40:01:49:5f:5c:f5:9e:ce:18:e3:4b:a6:b0:23:
34:dd:8b:d1:5f:24:41:2c:eb:a5:af:fb:7d:e1:0d:
cb:0b:46:04:52:f5:5e:23:db:86:06:db:d8:dd:80:
51:17:d5:1d:50:6f:be:92:24:0b:4a:5b:96:6c:13:
75:0d:a0:e0:07:2c:03:1c:a7:b4:9b:8e:f4:79:6c:
40:2f:1e:b3:50:a6:c9:f3:14:7e:58:d4:b6:7a:93:
0a:3a:25:5b:59:a3:ef:ae:37:75:87:56:19:11:e5:
0f:e9:d5:37:a8:bf:8f:0b:b3:e7:c6:8d:dc:97:a7:
30:18:7c:16:db:58:af:de:d7:85:16:ee:ce:75:85:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.188.0/24
142.248.92.0/23
IPv6:
2602:f797::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20118
402436
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b3:a8:2d:7b:3e:59:7c:11:73:71:ba:2f:8f:d1:00:af:07:
7b:ef:84:39:37:5d:0d:23:af:c3:3e:bb:14:cd:4f:71:f1:d8:
53:89:1e:a9:27:32:a2:0e:c0:11:6b:fc:a4:31:c2:9b:0e:9a:
7c:9b:9a:86:6d:6a:d5:ba:73:b5:d6:0c:36:76:31:94:2b:b5:
5c:f0:4f:e9:7f:22:54:17:e1:4b:68:59:53:f6:4b:c0:a1:c9:
09:64:b2:3d:14:79:9f:56:8f:20:c5:91:e7:ba:bb:9a:52:9a:
ad:df:c3:c2:d0:38:c1:15:af:54:7c:70:b9:a2:47:84:e4:78:
0b:3f:6f:95:f6:7d:f5:4b:65:c9:fc:fe:7e:30:cb:6d:0c:8f:
b9:09:72:36:00:15:c5:b9:11:84:b5:e9:44:ce:ac:6c:51:eb:
74:84:88:2b:e3:58:57:7e:44:a5:ab:04:b0:bf:05:f1:47:9f:
06:70:a0:c0:b7:29:5d:6c:b2:c0:b2:81:d5:8c:b6:34:0d:2f:
3d:51:53:f0:a4:2a:31:73:f9:2f:64:4f:5a:7c:d3:96:a8:f4:
b6:d3:04:30:59:58:c1:e8:b5:5a:c3:d6:fc:e5:5a:03:38:dc:
ae:ca:a2:77:94:24:e1:04:ab:a7:8d:97:f1:58:54:96:1a:24:
d8:bc:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:50:18 2026 by rpki-client