
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer
File: a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer (raw, json)
Hash identifier: SVwKK/VTpBLIDmq5tdzj/CB02Ya7Uujnjv+3unu+w0g=
Subject key identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F7E761188D040988F000ADBC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 14 Oct 2026 00:45:12 +0000
Certificate not after: Tue 16 Jan 2029 01:45:12 +0000
Subordinate resources: IP: 67.208.32.0/20
IP: 2607:bc80::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:76:11:88:d0:40:98:8f:00:0a:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 14 00:45:12 2026 GMT
Not After : Jan 16 01:45:12 2029 GMT
Subject: CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:94:7c:64:55:82:ac:0d:ba:3e:93:f3:f6:
8f:0e:cc:42:68:a8:93:0a:4a:cf:c4:3e:e7:1b:95:
24:9a:0b:6c:a7:8a:1c:b4:7c:9b:35:9a:62:35:e2:
8b:a2:0d:a2:cb:57:a3:ef:37:78:85:c4:c1:0f:f2:
97:55:a7:6f:0a:4f:2e:7c:6e:3e:43:cc:5a:39:e4:
ec:d0:fc:91:c2:9b:00:6f:3f:ad:47:8c:ee:8f:5e:
a6:1f:e0:cb:b2:e3:96:8d:02:ae:d4:8d:42:cb:9f:
b8:37:03:e5:71:60:e0:44:ff:be:83:5f:90:16:a0:
14:47:62:f8:6d:2c:d7:54:c6:a0:1e:eb:39:ea:37:
c2:00:db:e5:23:e7:8e:b9:83:9c:92:53:b0:cd:df:
9f:a7:6e:b0:90:f7:3a:c4:dd:59:6d:35:b1:3e:67:
10:40:2c:ca:13:96:75:8b:a1:26:a1:dc:0b:77:4f:
b2:d4:b3:9b:29:09:76:19:b1:7d:3d:8f:5e:7c:6a:
25:cd:e3:51:a7:1e:e4:cb:0b:33:17:24:77:cd:5a:
56:03:e3:3f:52:e0:cc:42:1b:f5:83:e2:0e:aa:07:
9c:8c:68:31:f9:97:ef:50:be:bd:7b:02:cf:61:a7:
12:e6:85:00:84:a2:86:94:e4:29:a4:4b:46:f7:78:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
67.208.32.0/20
IPv6:
2607:bc80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:0e:5c:91:eb:97:e1:4f:c6:ac:9e:16:b8:c5:7d:d1:83:6a:
9f:68:e7:3d:db:0c:c3:61:30:4b:ce:18:0e:ab:5c:0d:89:17:
c9:65:13:2f:ce:a7:ad:09:6c:bb:df:a7:a7:4f:df:bf:f9:90:
a8:03:e8:33:d7:ff:f9:d8:f5:a9:bb:92:67:6a:a6:55:28:8f:
d2:64:b1:0d:14:9e:fe:f7:fa:ec:49:3a:ae:f3:75:c0:82:24:
77:9d:ac:c9:84:f4:60:33:1e:6e:12:13:7b:b7:fb:bc:cb:ef:
a8:76:19:15:bb:68:aa:c2:b2:37:75:d6:9e:cb:c0:f7:07:23:
e9:36:1a:44:02:3d:13:6c:ca:b2:cc:70:2a:8b:15:a5:00:95:
79:b0:34:2f:72:44:cd:f0:e5:75:fe:50:47:7b:9d:ff:b4:00:
40:c8:08:2b:34:67:fc:ad:ee:46:2e:97:e1:c5:6d:04:e9:3b:
27:c4:74:00:f6:19:30:45:a9:5f:03:e1:db:bc:cb:3a:dc:3f:
fc:8c:37:7e:ea:8b:aa:b4:1c:40:5d:e4:2c:46:0c:c3:42:45:
54:ad:95:20:86:e7:fa:bc:01:cc:a7:78:4d:a0:01:09:cc:ce:
c1:21:9d:d4:7f:09:da:71:28:da:3e:1a:55:a0:78:b0:31:c3:
15:24:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:51 2026 by rpki-client