
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3.cer
File: fc2d6757-3acb-470f-8a5f-d350e3cd53c3.cer (raw, json)
Hash identifier: yqCdnYvBRgMJvvQpJwMMEEMAdyZ8ZEonHf3c9lPtEcY=
Subject key identifier: C6:57:98:CA:5C:62:53:2D:30:32:AF:3E:95:2C:DE:EA:D9:83:F0:80
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E7792A617ED5C20B2C894C500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 11 Jul 2026 20:45:11 +0000
Certificate not after: Fri 13 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 33134
IP: 199.190.242.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:77:92:a6:17:ed:5c:20:b2:c8:94:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 11 20:45:11 2026 GMT
Not After : Oct 13 20:45:11 2028 GMT
Subject: CN=fc2d6757-3acb-470f-8a5f-d350e3cd53c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:95:ca:82:b4:20:c6:0d:30:7d:23:5d:3d:
ae:83:41:50:d7:a8:e8:8a:4b:60:40:93:6a:9a:3d:
b7:35:2d:4d:f3:a7:81:7f:62:c6:50:43:f3:18:96:
f9:33:6f:21:55:7c:50:23:7b:53:4f:48:9f:4c:71:
d5:a0:d0:8b:eb:ae:20:f7:01:2f:e5:24:d1:be:68:
e6:bd:61:9b:e8:32:59:b0:fb:62:32:e7:e5:01:10:
98:cb:02:65:d0:f7:64:32:0b:ce:02:70:09:89:3d:
a8:7d:79:67:84:7c:d8:54:40:87:10:89:34:20:e6:
45:1f:c3:25:65:be:39:9f:82:13:93:06:25:fc:08:
09:20:d7:30:6a:2e:ef:ac:26:6e:89:a8:ad:7e:dd:
5d:28:ac:4f:9d:73:bb:67:49:06:9f:8d:a9:2d:e9:
55:32:51:27:78:6d:c1:0d:01:3e:4a:92:11:6f:41:
ef:bb:dc:12:30:91:d5:07:9a:32:f0:c7:44:a1:e7:
38:0e:f7:20:9e:5b:a8:85:aa:74:8e:71:a6:a6:c5:
ed:21:31:b7:a0:9d:87:d4:d9:4c:11:bf:f1:ff:97:
46:88:a5:e8:f7:f9:46:b7:b5:36:f1:31:8b:4a:e9:
91:14:99:64:f3:c3:7d:e5:a8:08:e0:66:33:d7:1f:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:57:98:CA:5C:62:53:2D:30:32:AF:3E:95:2C:DE:EA:D9:83:F0:80
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3/fc2d6757-3acb-470f-8a5f-d350e3cd53c3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.190.242.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33134
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d2:8a:06:82:89:58:74:e0:be:53:60:31:7a:bd:ba:3b:6b:
da:20:77:3b:21:b1:be:74:9c:c3:fc:e2:3b:b9:f8:29:22:76:
0e:6e:25:08:55:5c:b1:26:5a:bb:8c:71:9e:f8:ef:2d:dc:e6:
b7:48:8b:4c:5b:a3:2e:94:ba:fc:5d:ab:f4:11:2b:8e:69:fc:
6b:22:7b:fb:b3:94:8d:a4:cb:7f:f9:e7:10:70:08:e2:58:6c:
53:4e:71:5f:3e:6d:73:a1:42:b9:4f:57:29:54:f9:e1:73:d2:
9c:35:eb:a3:20:0c:60:c2:61:21:41:0e:c9:06:1f:1a:87:b2:
2e:e2:b8:82:4d:32:b1:28:24:07:a4:71:4c:4d:c0:ac:a6:70:
bd:51:99:8f:a6:11:3e:70:e0:9e:e4:50:c0:0d:b1:25:7f:9f:
58:0e:95:72:0d:f9:4e:95:fb:7f:58:b1:19:1d:36:39:c3:8b:
5c:93:76:cc:25:b4:2f:2e:d1:7b:5c:fa:1b:75:ef:7b:3d:f6:
56:8e:fd:e8:cc:4b:ca:33:a8:bd:3d:8a:e2:eb:f2:5b:0e:43:
c7:29:24:a5:15:fc:e5:5d:4f:0b:65:5b:54:0d:d7:e7:09:a9:
5d:eb:0f:dd:04:9b:49:b3:a5:1f:65:69:47:9b:d5:11:e6:f0:
96:c5:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:00:01 2026 by rpki-client