
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
File: 956c8740-f351-4625-a3ff-54fb1e6a5b97.cer (raw, json)
Hash identifier: 47H39PF+gccHnRsKV4X8niVbHWcpQmezwTZPubItHQI=
Subject key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E4552553F36525160198065A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 23 Jun 2026 20:45:11 +0000
Certificate not after: Mon 25 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 11715
AS: 25957
IP: 23.136.92.0/24
IP: 155.103.190.0/24
IP: 2602:f6ae::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:52:55:3f:36:52:51:60:19:80:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 23 20:45:11 2026 GMT
Not After : Sep 25 20:45:11 2028 GMT
Subject: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:00:ca:bc:2e:62:a9:40:61:34:f2:a2:ee:
65:ee:00:b7:3e:36:8f:d1:33:8a:f9:df:a1:83:75:
33:16:e5:74:fb:bf:66:47:8b:e1:e7:37:b7:31:da:
91:b7:92:73:6c:f6:c9:67:3c:a5:85:ae:ee:ea:61:
d6:dc:a6:ed:7a:9d:78:ed:4a:08:c4:1d:03:8a:14:
b8:f2:66:4d:72:eb:06:d2:32:ca:a3:2c:bd:06:df:
03:a3:a3:2b:df:64:58:bb:65:92:9c:df:22:39:5c:
f6:be:ff:cd:2e:e3:5e:35:f4:fe:c7:80:7b:83:99:
b0:5f:63:81:c9:3e:91:18:f2:cf:7c:53:ba:40:74:
2c:8f:ab:01:d3:64:09:dc:6c:59:9d:de:8d:c1:1d:
77:0b:bd:98:6c:21:af:ba:f3:e0:6d:d3:68:4b:ae:
99:05:d9:ec:ad:ab:b3:07:3e:b6:fa:04:98:1d:07:
1f:ff:b0:fe:2e:64:cb:a8:48:4a:80:b2:ab:25:5d:
4b:39:b5:a8:b6:21:65:d9:28:36:4f:f0:0e:31:26:
ee:ee:a8:f6:ba:5f:8b:23:42:34:cd:42:b7:dd:1d:
20:e5:fd:a3:a2:15:a2:68:0a:e6:c6:cc:9d:d5:cf:
10:a4:8f:cf:a8:77:b4:44:1d:e6:18:9f:09:7b:cc:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.92.0/24
155.103.190.0/24
IPv6:
2602:f6ae::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11715
25957
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:98:84:5d:95:38:9c:b8:f5:78:b3:93:27:3f:a0:b7:72:4e:
5a:88:ad:89:e2:b9:34:91:f4:66:0a:e9:5a:28:45:4f:37:7a:
6e:61:ac:b4:77:08:89:1b:fd:2b:f8:bd:86:e0:ea:77:9f:e4:
fe:4b:87:d8:fe:24:a2:25:77:e0:8d:cc:f2:c2:ca:e8:48:10:
34:49:42:ef:bc:c9:61:77:24:b9:6a:28:b8:67:47:ca:38:f6:
5c:2e:40:96:0a:78:29:0d:48:31:38:32:4f:bf:20:39:b5:cc:
de:a7:db:72:2d:8a:60:b4:53:33:c1:ea:36:0a:7a:1d:12:0b:
9d:a2:d2:b0:5d:f4:02:9a:4c:6e:1b:e8:c2:6b:88:b9:ca:d9:
f9:82:d9:e4:9e:96:37:7e:44:38:9f:76:33:02:fb:fd:e7:27:
b0:0d:85:d2:46:e1:2c:f9:f6:8c:5b:b4:94:ab:ec:c3:80:1f:
b4:ed:a2:b0:00:55:0c:f0:6c:6d:55:13:3e:c1:f1:6b:c8:c0:
c6:fa:75:7a:be:fd:03:5d:c9:9b:0d:ab:35:63:97:f1:38:17:
3c:43:0b:af:89:f2:8d:a9:e9:53:a9:f1:e5:ae:76:2f:fb:be:
3c:7b:02:ea:f8:22:ef:07:b5:51:cf:71:bf:f7:72:25:0f:b5:
ba:4e:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:32 2026 by rpki-client