
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer
File: a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer (raw, json)
Hash identifier: Av683Bg4PUBSSyR6YjZF9Zl1tU+M3A39aV0RYJ+ZhZs=
Subject key identifier: EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584FC02EEE5D4EFE6DEF2F27C8F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 06 Nov 2026 13:45:13 +0000
Certificate not after: Thu 08 Feb 2029 13:45:13 +0000
Subordinate resources: AS: 401017
IP: 23.176.248.0/24
IP: 2607:ae40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:c0:2e:ee:5d:4e:fe:6d:ef:2f:27:c8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Nov 6 13:45:13 2026 GMT
Not After : Feb 8 13:45:13 2029 GMT
Subject: CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:74:54:94:de:6f:db:a2:1d:4b:8f:4b:47:
e0:94:af:98:76:be:86:43:98:95:ab:c3:90:ef:37:
53:1e:2c:52:8e:22:0e:a2:9b:42:51:f9:9e:a3:52:
a9:1a:fe:ff:c3:55:d9:a6:2e:78:4f:48:d6:7d:8e:
9e:29:23:5a:6b:ea:a2:55:41:77:47:b1:1a:fd:e7:
5c:d9:f2:88:ac:fc:05:a4:ba:ed:a9:78:29:03:52:
0a:d2:32:9b:91:85:27:fd:1d:f0:60:2e:29:ce:07:
77:f3:59:46:02:4d:d7:2d:62:9f:c5:68:fd:00:91:
9f:86:df:b8:20:08:c1:9a:43:59:ba:c7:2b:b8:a5:
93:b0:0f:19:87:65:1d:9d:64:47:65:6f:92:4c:be:
db:6f:d5:96:2d:9c:ce:e4:ea:4b:f2:89:b6:ab:a0:
86:02:91:16:0d:d9:f3:52:45:27:c0:34:c1:eb:fc:
16:33:fa:dc:95:b9:60:22:ef:ac:df:a9:d3:5e:21:
af:47:2c:ab:dd:cc:ff:c2:fe:ea:ff:5e:e3:a3:32:
6b:cd:b6:99:2c:6f:f1:bb:09:34:27:e7:ae:26:0d:
15:ec:5f:bf:e5:9e:42:16:9e:da:c2:6b:3d:76:a8:
07:b8:d7:4a:28:c0:40:66:69:77:cf:5f:a7:86:1a:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.248.0/24
IPv6:
2607:ae40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401017
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:af:90:3c:cc:88:0c:6b:b2:51:ef:66:47:ba:8d:43:4a:59:
4a:a7:93:d5:ee:27:05:4b:a9:3e:8e:b1:5c:4d:e5:f4:bd:64:
b1:a4:44:5c:8a:d1:fb:b5:ae:86:6c:03:2d:e5:7e:26:29:d0:
e2:8f:5a:71:2c:38:76:ec:e1:16:d7:d6:7e:2e:cc:c3:f2:70:
36:f8:0f:64:61:48:0e:24:6e:4c:97:b1:a6:e3:45:fd:1b:a8:
d9:50:90:4e:34:75:b8:a9:81:88:33:3a:c6:a0:8c:f3:c9:32:
80:4f:05:47:64:b4:ea:08:f8:66:1b:44:db:22:4e:43:74:17:
17:76:cf:fc:0b:38:60:b7:78:1b:a4:67:af:a8:90:d8:1d:f4:
82:b4:13:55:8a:22:24:95:09:47:67:68:62:fa:88:68:3c:71:
e0:42:40:e5:04:dc:d6:a3:95:3d:92:82:82:83:37:31:b5:6d:
40:09:b0:d3:f5:08:f0:8c:2b:88:db:cc:95:86:f0:37:35:88:
fd:85:fa:22:0d:24:8b:7c:d2:d9:f6:53:30:90:42:eb:e1:82:
ff:cb:a6:fe:58:f8:a6:d5:5c:ae:74:bd:63:b2:69:a6:81:a6:
b5:be:2e:7b:2a:dd:4b:98:a8:99:b9:3e:c1:7b:08:99:b3:c9:
dd:1c:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:09:33 2026 by rpki-client