
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
File: fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer (raw, json)
Hash identifier: T1gaCxuVwSO59yhbInqnXw52AfDvP5KBUSGMbokKuso=
Subject key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E7BC2B052E798EFFFACF00D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Jul 2026 08:45:13 +0000
Certificate not after: Sun 15 Oct 2028 08:45:13 +0000
Subordinate resources: AS: 399333
IP: 2602:f9ad::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7b:c2:b0:52:e7:98:ef:ff:ac:f0:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 13 08:45:13 2026 GMT
Not After : Oct 15 08:45:13 2028 GMT
Subject: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:79:22:b6:bc:4a:b7:5b:a4:10:63:d5:9c:
54:01:65:cb:6e:7f:bf:0a:c5:f6:c3:ad:69:af:c6:
1d:29:ac:dd:71:78:be:0e:05:d0:88:23:3b:dc:10:
c2:27:6f:fd:26:37:be:22:b9:49:05:d2:10:7f:cf:
6b:2a:0b:c0:8d:98:5c:c6:29:a9:c6:52:9f:02:b3:
b0:e2:44:a5:0b:88:82:e5:10:78:af:b2:74:b9:e7:
af:6f:9b:f6:c5:ff:05:cf:e8:3e:d0:61:2a:92:38:
a0:9b:31:05:f0:64:f7:5c:dc:52:dd:60:3b:6d:03:
51:a7:f5:41:7d:64:ce:70:10:56:40:fe:bd:97:c9:
7f:0b:e4:a9:37:8f:4f:a6:6e:a5:3e:d8:f0:5f:07:
41:2f:1a:51:24:11:28:d3:8c:67:0f:4f:8a:86:3a:
9b:6c:11:b3:16:99:62:92:b0:95:f6:4f:4f:b7:bb:
43:0d:84:04:43:35:10:d8:24:1a:67:b0:27:59:10:
be:dd:f8:42:9e:93:11:ef:df:ef:12:2e:a0:e2:e0:
31:7f:84:8e:f0:dc:85:0b:49:f5:8d:1a:01:0c:c7:
57:2a:4c:d3:26:46:26:23:0d:8e:af:18:c7:fd:9e:
10:43:7a:f2:e5:7d:5f:61:a0:31:ca:45:4c:f0:6f:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9ad::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399333
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f1:51:dc:29:58:d2:e4:cc:65:e2:4d:f7:91:e8:44:95:94:
ef:75:10:1d:8c:04:35:9a:67:23:52:f3:a8:bb:6f:02:60:cb:
50:7a:e3:2e:24:ab:c5:97:18:22:db:6c:82:fc:ed:92:db:f4:
e4:0f:78:ed:b8:61:e7:28:7b:b4:b7:e7:4b:7c:b6:36:50:3a:
62:6e:3c:bf:8b:51:23:f9:40:e3:ea:ae:9a:84:cc:6b:20:22:
04:a0:00:e7:c3:2a:79:b0:d8:a9:59:1e:bf:43:68:2d:5f:bb:
c7:4a:d9:1b:b8:40:34:49:66:cf:72:f8:ba:39:be:16:b4:97:
1d:a4:da:7a:0f:4c:9f:36:ed:02:04:20:fc:39:3a:da:6b:bc:
66:96:bf:28:b1:95:d0:78:89:b5:e9:4c:20:9e:60:b6:b8:22:
a1:60:fd:bf:63:39:04:0e:d8:cf:c9:28:3e:b0:c7:2a:62:3a:
34:41:c2:00:c8:e8:74:ec:75:ff:75:f8:da:6f:8c:65:c2:be:
d2:97:56:41:7e:33:b6:aa:72:cf:c8:69:77:76:b7:5c:b7:d8:
8c:70:dc:36:27:74:23:ef:9c:d7:fd:de:82:aa:28:aa:66:52:
f0:41:59:fe:f2:5b:14:04:04:8e:5b:fc:05:db:09:60:7b:d1:
fe:ef:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:46 2026 by rpki-client