
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7.cer
File: 040ef740-8591-41e5-89d0-9b0266d3fcf7.cer (raw, json)
Hash identifier: b9u6rO6DP4/sQ3kPu7a+3HsSmrWjMbHdT/TcYkFyULg=
Subject key identifier: E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E6F329AD0875EE714B01AC7E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 08 Jul 2026 20:45:12 +0000
Certificate not after: Tue 10 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 11370
IP: 199.201.225.0/24
IP: 2602:fa50::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:32:9a:d0:87:5e:e7:14:b0:1a:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 8 20:45:12 2026 GMT
Not After : Oct 10 20:45:12 2028 GMT
Subject: CN=040ef740-8591-41e5-89d0-9b0266d3fcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:be:a1:ea:c3:44:45:00:05:fb:f9:3b:a7:
f2:ab:74:a7:b3:5d:0f:a6:bf:b4:20:f6:0f:a7:61:
55:7e:50:d5:b8:8b:f6:20:84:3d:20:40:1d:0a:08:
f8:91:71:59:b4:d1:cc:14:42:f1:ba:72:2e:0c:47:
24:d9:9b:90:f2:ba:06:12:a7:04:de:65:77:a3:14:
a6:2d:b0:38:71:2a:6d:a6:65:51:0d:de:ec:22:5c:
d9:6b:8a:94:45:17:92:3a:b8:e0:d0:e9:a7:35:0c:
00:0c:a0:bd:ed:b0:ff:f9:e2:ae:1b:38:b6:fd:10:
e1:12:7c:c7:ed:38:5b:b1:d9:8e:d1:9f:e4:25:e2:
03:87:87:18:df:42:5e:84:9e:24:67:84:39:13:aa:
de:64:dd:d5:b7:83:23:dd:24:46:6c:39:62:94:d7:
b4:55:9d:45:c1:fb:6c:89:74:d6:8c:38:dd:4f:a1:
ba:7c:f7:96:2b:52:5b:26:2f:80:f0:1c:c3:f0:ed:
5e:da:87:14:72:61:37:e4:7b:88:fe:a3:35:6f:b6:
f0:d9:98:3c:a6:38:87:b9:76:12:9a:b5:be:37:a4:
4b:0b:76:cf:5c:1d:fc:ac:07:ac:d3:7c:90:50:44:
cb:b1:ab:40:41:9f:b3:8f:32:28:3a:35:22:36:22:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:45:02:A4:9D:FB:12:D1:F5:3F:49:F1:59:65:E3:B4:7F:81:48
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040ef740-8591-41e5-89d0-9b0266d3fcf7/040ef740-8591-41e5-89d0-9b0266d3fcf7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.201.225.0/24
IPv6:
2602:fa50::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11370
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a7:d9:89:51:3b:48:18:77:a9:d8:c8:62:63:0c:a9:97:46:
39:1f:32:f5:eb:d8:e8:17:88:47:a9:f4:a9:07:68:17:6b:6d:
dc:35:5e:2e:d4:75:5c:22:8d:f7:04:d4:15:cb:0b:e8:aa:66:
fa:65:fb:37:b5:49:ee:c3:bf:43:ee:cd:1f:46:29:6a:53:dc:
b6:51:f4:93:fd:2d:9a:0f:3d:48:a0:fa:1c:c2:1f:e9:10:0c:
03:2e:07:d7:b8:46:a8:cd:a2:94:b3:7a:e1:26:85:b6:1e:1b:
01:83:20:ce:19:7e:75:60:3f:f2:de:8a:5b:00:6e:a7:4a:3a:
21:cd:f2:4e:19:af:c6:d6:05:4b:52:62:a8:1e:c8:73:00:bc:
53:bf:28:81:65:d1:84:3c:94:cf:fa:be:1c:88:a9:64:e3:34:
80:49:2d:94:4b:16:93:3f:47:01:50:2d:5d:3e:d5:02:33:fe:
84:23:70:81:64:15:66:46:a8:65:fb:59:45:7f:eb:3c:d1:47:
69:6c:1b:ca:4c:31:b1:93:06:36:ac:4c:2d:b3:41:b9:f9:dd:
57:d8:3e:c1:d2:db:fd:cd:79:32:e2:fb:9d:a0:2c:e7:d3:24:
d7:59:52:2d:c1:94:0b:c1:a7:6d:09:48:f1:79:be:ab:59:3d:
56:3f:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:24 2026 by rpki-client