
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22606d8-2fb3-442d-9123-de3fa04cc2d9.cer
File: f22606d8-2fb3-442d-9123-de3fa04cc2d9.cer (raw, json)
Hash identifier: EW1S5GFExt61pmi8h/V9Wn1hF60rcYYNii+eoZR90gA=
Subject key identifier: 22:0A:F2:1F:64:7F:FA:7C:53:DF:9E:64:1C:1A:4A:81:8C:63:47:37
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584EED4A7F50FA5CEA83B993EA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22606d8-2fb3-442d-9123-de3fa04cc2d9/f22606d8-2fb3-442d-9123-de3fa04cc2d9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22606d8-2fb3-442d-9123-de3fa04cc2d9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 23 Aug 2026 00:45:11 +0000
Certificate not after: Sat 25 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 401706
IP: 2602:f64c::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:4a:7f:50:fa:5c:ea:83:b9:93:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 23 00:45:11 2026 GMT
Not After : Nov 25 01:45:11 2028 GMT
Subject: CN=f22606d8-2fb3-442d-9123-de3fa04cc2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:68:7e:73:8f:7e:6c:ed:44:d0:06:2b:46:
ce:31:6e:a8:d0:f2:dd:44:18:58:ff:03:f4:92:eb:
aa:36:b0:20:00:20:53:7c:49:5f:5e:a3:fc:01:44:
e9:1d:ff:26:ec:9a:fc:f6:e2:83:f2:ec:d0:9d:64:
e7:52:3b:74:a1:0d:97:34:6d:ff:65:9e:d4:d7:67:
0e:65:3e:24:41:77:d7:cc:a1:e3:0b:07:98:c8:46:
23:61:f5:58:09:7c:76:67:a6:ca:70:62:df:69:8d:
97:64:fc:06:8c:87:e6:c8:1c:7c:cb:77:cf:1a:61:
e9:64:59:ca:68:b2:96:6a:98:1b:c2:48:1a:40:53:
2b:d2:61:17:3d:20:8f:d1:ed:b2:72:6d:b8:44:46:
7a:b6:19:3a:29:20:0b:d2:97:3d:a4:6a:09:c2:7a:
e3:41:c6:b7:ca:cf:d5:2d:9f:3b:88:6c:53:4a:da:
92:14:52:f9:2d:2a:c4:c9:a2:6e:41:13:f0:1b:08:
9d:14:b7:de:1f:32:a2:0d:a9:77:3c:4a:95:8d:bc:
5f:23:3d:50:87:d0:4b:4f:a3:3b:03:25:43:85:df:
e1:2e:8f:a1:df:20:aa:4e:3a:9d:e8:ef:57:2a:f2:
64:2d:24:57:84:ea:82:f3:82:82:12:0c:8e:6d:04:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:F2:1F:64:7F:FA:7C:53:DF:9E:64:1C:1A:4A:81:8C:63:47:37
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22606d8-2fb3-442d-9123-de3fa04cc2d9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22606d8-2fb3-442d-9123-de3fa04cc2d9/f22606d8-2fb3-442d-9123-de3fa04cc2d9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f64c::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401706
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:ef:4d:89:a0:ea:21:a7:3f:c4:d6:d4:99:8b:c9:18:08:42:
aa:fb:0d:8d:dc:bf:4e:dd:1b:aa:42:99:f9:d1:37:76:73:4e:
2b:af:e8:66:36:6e:19:76:36:a3:86:5c:27:79:8d:d9:3f:36:
91:11:39:1e:84:b9:f5:6d:3d:a6:b8:84:e4:06:a9:5e:fd:31:
a5:dd:34:e5:27:2f:8e:3b:a9:7e:2c:d6:4d:49:2f:72:5c:86:
56:3d:48:e7:1a:a1:b3:9c:18:1f:a6:cd:61:a3:3d:60:35:7e:
75:8e:96:c5:f5:2b:97:a5:00:6e:cc:23:54:e7:fb:88:6d:e3:
c7:65:40:fd:d0:6b:aa:86:bf:f4:0c:41:8e:1d:0b:eb:f0:ab:
3a:e3:cb:31:7f:91:39:6d:23:ad:be:f5:43:d4:fd:a4:3d:f2:
c7:20:5c:69:d0:86:4d:9a:a3:ee:1c:7d:1c:6d:44:14:e3:bf:
a8:2e:9d:60:c9:d0:58:7b:18:26:e4:75:b7:3b:cd:20:58:83:
c5:d3:8b:4f:3d:5d:77:0a:9a:d6:f5:dc:05:3a:9f:5d:42:aa:
6f:53:d1:43:cd:84:44:18:7d:a1:62:c5:f3:4a:f7:03:27:a6:
c1:3b:10:67:e5:30:6b:e6:b9:79:84:3c:18:92:dd:d9:f2:6b:
c1:82:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:46:45 2026 by rpki-client