
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0.cer
File: 0342da0b-b5cd-422c-807b-e1b95cb877e0.cer (raw, json)
Hash identifier: hwtZVj1aGti4GcNhL5EmgzRxKkIVzZyyhn5aroWgiRE=
Subject key identifier: E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DD1EE1C9AA7BD8D444FABED80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 13 May 2026 12:45:17 +0000
Certificate not after: Tue 15 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 13365
IP: 192.206.28.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 26 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d1:ee:1c:9a:a7:bd:8d:44:4f:ab:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 13 12:45:17 2026 GMT
Not After : Aug 15 12:45:17 2028 GMT
Subject: CN=0342da0b-b5cd-422c-807b-e1b95cb877e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:4c:c1:09:84:97:ce:8c:51:8d:46:e9:39:
a7:65:2f:46:1e:97:2f:86:9f:25:c8:0e:3a:33:57:
0b:0f:f2:da:6f:ef:a9:45:38:bf:2a:08:62:50:bb:
3b:ac:9a:13:99:7e:8e:25:5c:c7:ba:1d:a9:19:93:
b9:95:82:51:d3:d3:99:7c:ff:0c:06:04:31:cd:f1:
f0:f5:d1:2f:d5:3d:bc:cb:af:9c:6f:61:ef:c3:51:
69:e2:a4:f3:44:f3:d2:43:55:ef:97:b7:4a:c6:ed:
24:b6:ff:99:90:80:d9:2b:14:65:c4:0a:4f:76:4b:
f0:bc:50:09:65:23:53:71:ad:fd:e4:35:c0:2e:d6:
7b:1b:06:25:5a:ff:e1:df:f5:48:03:0a:a0:81:b0:
38:e2:db:9c:a4:92:48:d6:eb:35:57:bd:3b:4a:c1:
eb:5b:37:62:bb:2f:92:35:77:ad:a4:e1:8f:8c:e2:
79:a8:1e:76:1e:db:ec:ab:21:ba:4c:d1:f4:b4:47:
b1:d9:5d:d7:fd:16:16:7d:14:83:9b:4c:70:3e:75:
9c:72:4d:1b:ff:ae:11:6d:db:f0:6b:3a:a0:b9:53:
57:53:62:d6:e0:2b:e9:e8:92:d0:6f:11:55:30:50:
40:3a:da:31:a8:13:59:eb:3d:94:0a:c9:9b:3e:ca:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:8F:48:28:27:43:1C:4A:9A:85:75:69:47:CF:96:1D:11:F1:E7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0342da0b-b5cd-422c-807b-e1b95cb877e0/0342da0b-b5cd-422c-807b-e1b95cb877e0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.206.28.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13365
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ae:f4:4f:4d:42:aa:0f:73:94:73:c6:06:69:28:79:7e:3b:
ff:b3:aa:a1:45:4d:4d:30:5f:c4:f3:ac:15:10:78:49:27:6c:
90:e4:ea:bc:44:9f:bc:2d:77:be:9b:86:b6:bf:03:68:97:7d:
01:84:44:6d:2d:17:71:5f:5b:0c:01:5d:29:3d:32:0d:44:80:
17:f9:88:f3:62:db:99:1a:02:f9:99:5a:f5:8c:b9:29:04:92:
78:a9:c7:6b:07:d4:7c:b2:81:35:35:f4:81:8e:01:09:71:d9:
56:ac:17:f5:c0:ba:3a:ca:d5:ca:2b:d9:ca:be:7b:b5:55:66:
41:00:c8:f7:bf:c7:68:b8:62:0b:d3:21:72:0b:f2:87:82:a0:
2a:e0:1a:c2:a7:11:50:38:15:f0:ba:1f:00:a3:90:78:fd:bb:
6e:bb:b6:e4:b0:8c:3c:b5:8a:aa:9a:24:1f:46:ae:5c:87:40:
80:8a:d8:42:48:e9:99:1e:f3:33:31:72:d7:40:23:ee:53:fe:
7f:1c:e4:3b:ba:9b:c7:57:8e:14:9a:a8:68:0d:d9:9b:9c:95:
b4:c2:f0:5b:9b:d3:c7:cd:eb:54:50:f7:24:13:53:db:53:5e:
76:ef:bb:9c:67:67:26:fd:8f:44:4f:77:f3:7b:94:0b:76:45:
a2:b5:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 04:26:01 2026 by rpki-client