
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer
File: 69ac72ca-306e-4b10-91fd-f4fd56e5124b.cer (raw, json)
Hash identifier: XjkhXFRgNJDbn/Zhx4YiMOIxWHVPA5y1Huhaf99W6uw=
Subject key identifier: 6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DA3DDD352F8696829B4D5E480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Apr 2026 00:45:17 +0000
Certificate not after: Sun 30 Jul 2028 00:45:17 +0000
Subordinate resources: AS: 401632
IP: 23.132.188.0/24
IP: 2602:f72a::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a3:dd:d3:52:f8:69:68:29:b4:d5:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Apr 27 00:45:17 2026 GMT
Not After : Jul 30 00:45:17 2028 GMT
Subject: CN=69ac72ca-306e-4b10-91fd-f4fd56e5124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:e2:72:9b:f2:81:29:4b:ab:17:f2:71:c5:
50:f7:54:ed:6c:c4:65:1d:89:66:7e:cb:6e:14:4a:
63:a7:46:94:f5:34:a6:24:8b:68:04:25:b5:e2:a7:
d6:77:03:f4:ef:9f:4b:fe:77:0b:8b:41:29:2b:ce:
a1:76:42:cd:3f:8a:8a:aa:72:4b:51:ee:c1:a8:0e:
48:66:3a:31:1e:8a:33:2f:4f:0f:f0:66:69:97:56:
f1:82:a8:22:26:71:84:94:05:88:3d:e4:35:17:f5:
ee:dd:c3:b0:6a:03:e3:98:ad:5c:a1:6c:d8:b1:03:
91:0e:f6:58:68:e5:0a:2f:f9:d1:69:42:02:8a:60:
92:63:2a:1e:a4:b8:10:80:df:f2:76:ea:ce:2c:af:
14:0e:e2:14:57:96:d2:68:18:01:ea:18:19:83:90:
d5:98:f7:a8:a7:67:9e:1e:53:5c:11:d2:51:dd:b1:
5e:4c:26:26:44:6b:e8:b8:7f:47:56:06:60:65:27:
89:06:b9:df:10:83:03:b7:9c:75:dd:fa:96:8f:56:
d0:dd:e7:4e:c0:cd:a7:8b:45:f6:9c:0d:cb:b8:24:
bf:b1:e9:0c:a8:3c:ca:a0:31:65:57:db:15:04:40:
ba:a8:4a:c7:95:ac:a2:13:3a:81:b5:c0:ef:70:84:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:DC:66:62:81:84:F7:F2:63:C8:A5:CD:73:6B:EA:5B:3C:CA:BF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ac72ca-306e-4b10-91fd-f4fd56e5124b/69ac72ca-306e-4b10-91fd-f4fd56e5124b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.188.0/24
IPv6:
2602:f72a::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401632
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:bb:ba:21:4b:5f:d6:2d:c0:78:65:a6:1c:ea:6b:37:e0:d4:
bd:d2:a1:5a:cb:9b:eb:49:5d:7a:eb:96:47:2b:2c:ba:39:9d:
9f:98:e4:13:47:3b:2c:ed:2c:8c:8c:79:12:c8:b9:34:9a:78:
b6:02:62:9f:3e:89:22:da:d0:a1:ab:0f:7b:90:e1:df:69:ca:
eb:c8:8a:2c:20:10:14:19:c3:18:f5:36:f8:84:b3:a9:50:e1:
90:6f:ad:2e:73:08:c4:8f:01:b1:97:94:66:f6:91:35:9d:f4:
33:9a:62:08:22:2e:c4:04:18:f3:92:c3:77:6a:8e:41:15:ff:
d2:fb:dd:0d:c1:6a:3f:be:33:0c:e4:5a:6e:45:17:c3:7a:e3:
47:75:ab:d0:36:7d:b0:eb:63:d7:d0:ba:b5:5d:22:18:74:39:
d3:61:81:27:e1:03:5b:ab:71:e7:43:48:f0:a7:4b:0b:d5:e9:
38:e9:6c:34:ec:c9:0d:7a:c3:b3:30:ff:a6:a8:ad:be:a8:84:
f7:65:30:1a:84:b6:71:10:49:b0:d0:38:4d:73:c9:5d:bd:d2:
a7:01:a5:78:e7:3f:17:a4:51:c5:38:e0:a2:56:df:2e:12:b7:
91:20:a8:40:4a:eb:63:3f:29:fd:ab:a0:94:f4:78:e7:90:72:
7d:d6:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 23:20:09 2026 by rpki-client