
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba1f1104-1979-4b59-8695-10af9b10ac01.cer
File: ba1f1104-1979-4b59-8695-10af9b10ac01.cer (raw, json)
Hash identifier: wtwkhF+av3IkVPjJjEGwZBAIZbTNFNV8OrBqn/bvcSk=
Subject key identifier: 7A:1A:3A:D9:A4:60:F7:E6:22:1B:12:63:41:B3:1C:83:2B:C3:CF:BB
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F587AE407D42F6C7D7E5D0980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba1f1104-1979-4b59-8695-10af9b10ac01/ba1f1104-1979-4b59-8695-10af9b10ac01.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba1f1104-1979-4b59-8695-10af9b10ac01/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 30 Sep 2026 10:14:12 +0000
Certificate not after: Tue 02 Jan 2029 11:14:12 +0000
Subordinate resources: AS: 13819
IP: 66.170.32.0/19
IP: 66.249.224.0/19
IP: 2001:4928::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:7a:e4:07:d4:2f:6c:7d:7e:5d:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 30 10:14:12 2026 GMT
Not After : Jan 2 11:14:12 2029 GMT
Subject: CN=ba1f1104-1979-4b59-8695-10af9b10ac01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:ff:17:76:02:ee:e3:15:e9:88:cf:8b:97:
cc:95:99:f7:ff:79:fe:ab:3d:1e:ed:31:8b:e3:66:
0f:10:ca:6f:83:41:ce:ab:fc:58:52:eb:7b:ba:23:
b8:43:7e:c6:7c:e8:b4:3a:bb:e0:94:e8:29:c0:84:
46:b0:1c:51:ba:ee:59:a2:8a:0e:d3:91:09:17:44:
f6:92:c9:09:cf:ea:dd:82:79:6e:dc:ad:d2:81:1a:
33:2a:b3:8d:9d:b9:3e:90:f9:30:57:d9:0e:48:f7:
e1:3e:d6:3f:66:5d:e6:b9:2f:11:8f:6d:ca:4b:20:
bb:bd:a7:2c:dc:5b:8c:23:5c:4a:33:8e:1d:4a:c9:
1c:c3:43:97:2a:7e:48:13:6c:1b:95:45:05:2c:38:
18:7f:fd:21:16:bc:d4:b9:9f:1f:27:cd:13:75:29:
82:eb:23:bb:7c:21:8e:2e:01:d6:8c:6d:ae:23:cf:
6c:95:cb:89:56:fd:10:b6:5f:a8:28:e5:60:0c:2b:
7d:0c:3d:d6:1b:13:87:c1:eb:a9:af:9a:fd:34:02:
aa:38:19:5c:e8:51:0d:9d:f2:50:d8:5c:74:fa:56:
da:39:bc:01:54:c0:70:d7:1e:f7:1e:b4:97:0e:5c:
20:31:eb:db:ae:c2:f9:dd:af:ca:58:0e:01:d4:3d:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1A:3A:D9:A4:60:F7:E6:22:1B:12:63:41:B3:1C:83:2B:C3:CF:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba1f1104-1979-4b59-8695-10af9b10ac01/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ba1f1104-1979-4b59-8695-10af9b10ac01/ba1f1104-1979-4b59-8695-10af9b10ac01.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
66.170.32.0/19
66.249.224.0/19
IPv6:
2001:4928::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13819
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:69:54:d0:a0:c0:0c:7a:53:0a:2e:60:2b:95:f8:e6:07:2b:
7c:d2:7f:03:4f:64:4a:05:40:8b:c8:2c:7b:b4:ed:b8:a1:65:
a1:4a:06:5c:e5:e2:a0:d2:49:3b:a7:69:90:88:e7:e8:ae:54:
85:19:46:de:81:59:82:fc:7c:19:a4:fe:31:2c:8f:e4:5e:da:
97:a9:02:20:89:e9:8e:df:ea:84:ef:3b:c3:12:8c:b7:9b:36:
a0:10:50:60:fe:e3:61:f9:af:c2:73:6a:fa:68:7a:25:15:bd:
14:81:15:3b:a0:db:24:8a:15:17:3b:54:c0:61:82:60:2e:9f:
89:49:a2:9a:51:83:fa:61:d0:38:9e:d5:39:9a:dc:cc:d9:23:
36:21:2e:ec:af:06:66:d9:84:96:55:c2:62:29:5c:f3:1c:f0:
0d:37:77:6d:79:08:1b:7c:d2:f1:bb:fd:b9:03:2f:ad:1b:f9:
24:71:79:3f:14:eb:00:6e:ad:af:25:2e:4b:f2:95:9b:4d:fa:
c1:22:17:c0:3f:6d:38:4b:d3:23:50:0c:e3:74:c4:25:b1:fa:
f7:ae:11:5f:02:e0:9a:35:22:bd:34:b0:bd:be:64:c7:f0:17:
ed:89:17:31:b7:fd:b2:70:28:ca:48:dc:b7:87:e7:14:bf:bc:
94:22:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:06:05 2026 by rpki-client