
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a.cer
File: 01b6bcf9-4d43-44c5-8250-3042fd741a4a.cer (raw, json)
Hash identifier: QEXuXdbjATtrlij+aAXoMc7M+ep45nPlb+NST33DFZM=
Subject key identifier: 3E:7F:76:12:B6:EF:49:04:9A:07:B1:C3:A1:45:CA:22:5E:C9:C4:8B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584DCEF9B96CC646490E7F831140
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/01b6bcf9-4d43-44c5-8250-3042fd741a4a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 12 May 2026 11:21:16 +0000
Certificate not after: Thu 09 Sep 2027 15:20:12 +0000
Subordinate resources: AS: 402506
IP: 23.139.212.0/24
IP: 2602:f625::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ce:f9:b9:6c:c6:46:49:0e:7f:83:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: May 12 11:21:16 2026 GMT
Not After : Sep 9 15:20:12 2027 GMT
Subject: CN=01b6bcf9-4d43-44c5-8250-3042fd741a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:38:a5:aa:28:5f:96:4d:8c:98:53:b2:3b:
01:26:d3:61:ec:2e:ba:9d:7b:3b:4a:ed:3d:85:4d:
d8:95:0a:d4:67:4a:e1:5c:15:29:25:3d:78:7a:08:
65:1b:27:ca:40:4e:2c:c9:af:b5:ae:ab:a8:7a:5a:
a3:cd:70:83:d5:f8:07:72:29:cf:cb:c0:b7:07:cc:
ab:c3:da:04:46:77:95:40:2d:31:17:5c:b2:91:75:
10:07:9b:5c:07:a8:d4:6b:fb:91:16:69:8f:6f:68:
1d:23:76:04:13:a0:20:13:22:92:da:d7:28:16:68:
4a:e0:78:b8:02:91:a3:e7:cc:1f:2c:3b:22:42:b3:
a7:d5:bb:06:7d:fd:4d:5d:7d:28:16:cd:27:c3:e7:
1c:a8:eb:2f:14:9b:70:16:61:dc:4a:0d:53:a5:9f:
81:e0:9f:d6:02:3e:ff:ff:26:82:ce:35:00:6d:98:
3f:ec:39:81:a4:cc:8f:79:7f:76:9b:b9:12:0f:4a:
2e:26:a8:37:da:97:11:2e:df:82:08:41:20:2b:5d:
64:87:ff:c7:e1:b8:73:1a:ed:aa:85:74:26:2d:43:
a5:d0:49:d6:a8:9a:f9:74:74:bc:fc:d4:af:2a:9b:
63:61:be:26:0d:27:bc:cb:2a:e0:c8:df:38:1f:a3:
30:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:76:12:B6:EF:49:04:9A:07:B1:C3:A1:45:CA:22:5E:C9:C4:8B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/01b6bcf9-4d43-44c5-8250-3042fd741a4a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.212.0/24
IPv6:
2602:f625::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402506
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:cc:47:a3:78:ff:10:ba:a3:5f:53:fb:5c:6d:75:fb:1c:75:
72:1c:fd:5c:6d:87:e5:f3:19:30:e9:14:58:fe:ae:79:e5:66:
14:9b:5e:4e:33:34:41:86:a8:ef:84:8a:bf:31:c5:66:c8:9c:
a8:df:9d:66:21:09:31:0b:41:5c:02:66:ff:0d:42:91:e2:3b:
74:17:a6:c7:57:82:5e:ea:83:a9:12:f2:d4:42:dc:d0:b5:9e:
ee:46:67:a3:fa:d0:ef:60:2c:8c:71:dc:0b:30:ab:18:51:22:
a0:ee:92:8c:49:f4:a9:8a:f8:ad:0e:6d:f9:75:b5:1f:e2:90:
96:cd:49:66:41:e9:e0:c8:df:8a:a2:c3:fc:ff:89:61:cc:fa:
b6:a0:1b:cc:ae:a2:e3:1c:d3:6d:67:b7:57:34:43:ab:08:d1:
75:07:af:17:d3:b9:b8:80:44:5f:73:da:08:6f:a3:16:02:4e:
ff:6b:8c:35:30:11:3f:1a:52:f5:3c:22:02:fe:46:85:90:a2:
f2:92:d7:a6:e4:12:2c:2a:cd:ba:b2:e9:46:fa:cf:f6:68:75:
bb:31:c8:63:35:18:1b:a3:6d:73:4c:13:6c:92:41:e0:22:7a:
52:28:ff:80:f7:04:d3:76:50:1c:49:4a:39:42:d8:44:49:28:
cd:ce:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:47 2026 by rpki-client