
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
File: 2bf72053-6e89-4e8b-8a04-02150ff7c010.cer (raw, json)
Hash identifier: OzQy5muxsk4/zyjWHsw3fAF7ZU6e6micpZurNl63q2M=
Subject key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F57607F0B10C9C61F14398050
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 30 Sep 2026 00:45:12 +0000
Certificate not after: Tue 02 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 398338
IP: 23.140.212.0/24
IP: 2602:f605::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 03 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:60:7f:0b:10:c9:c6:1f:14:39:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 30 00:45:12 2026 GMT
Not After : Jan 2 01:45:12 2029 GMT
Subject: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:63:ab:81:69:d5:58:33:1b:7c:b9:87:e9:
93:29:dd:6c:0d:04:c4:eb:79:f8:d4:10:8e:88:73:
9a:6c:09:ff:1a:29:33:d2:cd:7b:96:61:f3:d0:97:
55:fe:0b:16:3b:d2:6e:1e:4c:da:cc:8f:0b:82:ce:
e9:a9:53:89:92:78:c2:f6:54:91:1b:36:85:76:b2:
72:0d:29:4d:9d:b9:3b:0e:0a:30:b7:d4:37:22:e2:
ac:f0:05:4b:83:d9:52:18:3d:51:1c:ed:aa:c4:4e:
59:d4:91:04:e2:f6:27:15:14:c9:f3:f5:95:7e:c7:
95:89:b9:ce:40:59:4c:42:c1:be:7c:d6:5a:9a:7a:
78:40:7a:36:e0:b0:e8:84:73:28:3e:a9:1b:1a:d9:
f5:c6:f1:3a:96:2f:47:45:a1:84:e5:6b:24:90:90:
c9:8a:49:63:3b:f2:72:af:d1:f7:0c:ab:d8:8a:0f:
84:0d:ce:67:2e:4f:9f:c5:f5:8a:da:f2:91:9b:66:
6f:23:71:0a:cf:d7:4a:e2:46:ef:9e:1e:aa:db:de:
a0:01:25:96:86:d6:e6:4b:c8:6e:eb:ce:98:8c:e7:
29:63:8c:7e:0c:06:6c:22:87:8c:d6:e6:40:03:55:
fe:a5:21:17:7f:d4:8c:d8:97:f5:2e:e7:e4:5d:c3:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.212.0/24
IPv6:
2602:f605::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398338
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ba:6e:f0:27:b1:d4:88:56:e3:14:b2:14:c9:ef:c2:24:52:
c5:23:28:bb:79:9e:32:63:0d:b5:91:f9:1e:57:2a:1a:f4:47:
72:ab:c4:7e:6d:c5:fd:ae:95:fa:35:1c:ee:a8:4c:18:dd:d0:
5c:8c:ef:28:5d:2a:7d:a0:b6:80:7d:b6:8d:1d:b1:0c:5b:12:
54:2a:84:ad:e7:68:f0:60:0d:10:0a:69:f8:31:40:17:f8:98:
f3:18:d7:2a:10:75:23:35:a5:08:33:3f:d3:22:4a:7e:ee:61:
59:49:f7:c9:9f:53:58:a0:11:9a:37:02:81:0f:e2:21:10:af:
ed:9c:6b:1b:41:5e:4f:f0:b7:e2:3a:a6:8e:83:a6:f6:4f:87:
ef:fd:6f:18:ba:9d:a3:ad:ac:38:95:02:db:d6:63:99:c4:dc:
81:bf:69:fa:c6:3c:0e:d6:32:c6:9c:5c:c6:52:8b:37:0e:33:
29:13:4d:d2:37:90:7c:e5:7e:0d:21:29:d5:40:81:a3:2c:64:
f9:e8:56:52:77:46:bf:ec:bf:fe:70:f9:84:d0:49:9d:86:b9:
fc:87:14:aa:f2:d7:be:44:c4:26:0c:a3:67:b1:db:15:a5:ec:
b8:12:b6:73:ad:59:a2:e2:d0:e4:4b:85:6b:4d:cc:08:1e:36:
42:01:cd:47
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9XYH8LEMnGHxQ5gFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDkzMDAwNDUxMloXDTI5MDEwMjAxNDUxMlowLzEtMCsGA1UEAxMk
MmJmNzIwNTMtNmU4OS00ZThiLThhMDQtMDIxNTBmZjdjMDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75jq4Fp1VgzG3y5h+mTKd1sDQTE63n41BCO
iHOabAn/Gikz0s17lmHz0JdV/gsWO9JuHkzazI8Lgs7pqVOJknjC9lSRGzaFdrJy
DSlNnbk7Dgowt9Q3IuKs8AVLg9lSGD1RHO2qxE5Z1JEE4vYnFRTJ8/WVfseVibnO
QFlMQsG+fNZamnp4QHo24LDohHMoPqkbGtn1xvE6li9HRaGE5WskkJDJikljO/Jy
r9H3DKvYig+EDc5nLk+fxfWK2vKRm2ZvI3EKz9dK4kbvnh6q296gASWWhtbmS8hu
686YjOcpY4x+DAZsIoeM1uZAA1X+pSEXf9SM2Jf1LufkXcPy9wIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFMX+LOU3Rk+Qq5hXz3jPFsyLgM//MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y
YmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZmN2MwMTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzJiZjcyMDUzLTZlODktNGU4Yi04
YTA0LTAyMTUwZmY3YzAxMC8yYmY3MjA1My02ZTg5LTRlOGItOGEwNC0wMjE1MGZm
N2MwMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXjNQwDgQCAAIwCAMGBCYC9gUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYUAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwum7wJ7HUiFbjFLIUye/CJFLF
Iyi7eZ4yYw21kfkeVyoa9Edyq8R+bcX9rpX6NRzuqEwY3dBcjO8oXSp9oLaAfbaN
HbEMWxJUKoSt52jwYA0QCmn4MUAX+JjzGNcqEHUjNaUIMz/TIkp+7mFZSffJn1NY
oBGaNwKBD+IhEK/tnGsbQV5P8LfiOqaOg6b2T4fv/W8Yup2jraw4lQLb1mOZxNyB
v2n6xjwO1jLGnFzGUos3DjMpE03SN5B85X4NISnVQIGjLGT56FZSd0a/7L/+cPmE
0Emdhrn8hxSq8te+RMQmDKNnsdsVpey4ErZzrVmi4tDkS4VrTcwIHjZCAc1H
-----END CERTIFICATE-----
Generated at Fri Oct 2 12:27:31 2026 by rpki-client