
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3fdba59b-eab0-4207-b389-9989808a8e86.cer
File: 3fdba59b-eab0-4207-b389-9989808a8e86.cer (raw, json)
Hash identifier: 3Dvzk7Y7B5VexBalf3n8H6r26hUy6ZwcJR21RzaJhzY=
Subject key identifier: EB:56:7F:CC:70:1D:C7:18:8A:BF:70:F2:1D:70:A3:C8:08:C4:A8:FB
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D543B5F8A685BEB807903D540
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3fdba59b-eab0-4207-b389-9989808a8e86/3fdba59b-eab0-4207-b389-9989808a8e86.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3fdba59b-eab0-4207-b389-9989808a8e86/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 29 Mar 2026 12:09:06 +0000
Certificate not after: Sat 01 Jul 2028 12:09:06 +0000
Subordinate resources: AS: 25743
IP: 2602:f9b2::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:54:3b:5f:8a:68:5b:eb:80:79:03:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 29 12:09:06 2026 GMT
Not After : Jul 1 12:09:06 2028 GMT
Subject: CN=3fdba59b-eab0-4207-b389-9989808a8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:49:89:94:09:3d:94:e9:20:6a:3c:f8:97:
2f:9d:59:4a:ba:df:aa:c1:80:fe:04:d7:3e:53:69:
31:25:64:ca:36:d4:48:a9:c0:2f:6f:3e:ff:a4:08:
13:68:92:1f:da:51:0b:f9:82:39:ad:87:8f:c9:23:
70:78:8c:19:98:11:4e:a5:02:f2:86:6f:dc:e2:6b:
c0:6d:3a:55:de:16:68:2b:30:97:ed:dd:3a:53:f0:
fc:59:89:43:3e:9a:90:d5:bf:92:de:c8:8e:1a:21:
68:f0:82:68:0f:53:c2:02:38:7f:d2:5f:20:31:46:
64:53:3a:b0:2b:ff:b7:5d:a7:c8:19:32:95:c4:f9:
98:3a:2e:5e:6b:dd:94:56:10:0a:a4:2b:2f:17:8a:
fa:aa:82:49:3b:18:11:77:b3:20:22:ac:71:73:29:
36:3d:19:3e:a7:26:94:e5:dd:eb:da:5f:0f:b5:94:
ad:d0:35:57:06:f6:a9:ac:70:0e:75:1c:10:d9:ba:
cf:f1:84:38:0b:c4:19:12:cd:d7:bf:d7:ea:f5:4f:
f3:83:1d:ec:db:f0:9d:32:9d:2c:e6:c0:ed:32:98:
f2:80:8a:cb:dc:99:c3:e2:5f:00:dc:59:8f:1f:cb:
9c:87:56:00:f3:88:46:9a:d3:a4:bf:37:82:72:dc:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:7F:CC:70:1D:C7:18:8A:BF:70:F2:1D:70:A3:C8:08:C4:A8:FB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3fdba59b-eab0-4207-b389-9989808a8e86/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3fdba59b-eab0-4207-b389-9989808a8e86/3fdba59b-eab0-4207-b389-9989808a8e86.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9b2::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25743
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6c:41:1c:92:71:77:c6:42:a8:32:68:8d:a7:e6:3d:78:80:
2c:02:75:1f:38:68:0c:8b:67:57:57:e5:c2:4d:c9:17:4d:ad:
d5:b2:eb:4e:a5:ce:7b:21:59:fb:47:c2:52:04:15:14:07:f1:
59:2e:5f:a1:bf:14:74:67:bf:89:02:b9:88:95:75:72:51:f2:
1c:e9:08:66:f0:69:db:9a:e2:99:ee:b0:8b:a8:7b:70:07:ef:
a2:fd:e1:60:51:99:ee:7e:86:2f:85:3c:3c:7b:1d:a7:de:56:
47:8d:ae:62:d3:27:75:2c:8c:63:a6:c2:c5:ba:c2:1d:bb:c3:
66:ef:6b:8b:68:98:1c:bc:86:07:41:fd:40:f7:52:4d:55:0f:
b1:de:39:95:ac:6b:83:77:41:c9:16:9f:dc:18:0e:6f:b9:9c:
ad:c8:cf:1b:a2:2e:3e:9d:d5:44:bd:df:2d:ee:a8:72:be:24:
fa:9e:ee:86:be:1e:c7:01:4b:47:11:27:69:cb:8b:d6:e5:1f:
a1:04:a1:09:28:b6:97:2f:57:1d:9f:ae:3a:8a:6c:5e:8d:02:
47:b1:be:62:2f:d5:18:8a:ec:21:fc:9e:86:9b:0b:37:a1:1d:
bc:fc:ae:2a:da:7f:5a:00:1e:bf:96:dd:1c:4d:f7:f8:b6:dd:
18:c4:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:47 2026 by rpki-client