
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/35487c71-78ef-4188-81c6-6c68ab65ae5e.cer
File: 35487c71-78ef-4188-81c6-6c68ab65ae5e.cer (raw, json)
Hash identifier: f2XABcriksXSvyJnd5Y0xrWEPwMXDZds3LkLEpMrnYo=
Subject key identifier: 39:9E:0D:6D:9E:F2:4C:3D:13:C2:2B:EE:20:30:0D:87:73:D4:37:90
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F51CB1E8082F55DE038AA6F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/35487c71-78ef-4188-81c6-6c68ab65ae5e/35487c71-78ef-4188-81c6-6c68ab65ae5e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/35487c71-78ef-4188-81c6-6c68ab65ae5e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 28 Sep 2026 00:45:11 +0000
Certificate not after: Sun 31 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 394631
IP: 192.101.73.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:cb:1e:80:82:f5:5d:e0:38:aa:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 28 00:45:11 2026 GMT
Not After : Dec 31 01:45:11 2028 GMT
Subject: CN=35487c71-78ef-4188-81c6-6c68ab65ae5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:05:30:b0:f9:91:66:eb:b1:ee:78:b4:69:
02:f0:d3:60:1c:cc:b0:8d:19:86:ea:43:03:5e:8b:
2c:16:01:c5:2a:71:74:62:53:f3:67:01:2f:55:20:
73:95:09:17:00:fb:f9:56:0b:2c:fe:0e:7e:e0:06:
08:0b:e4:c6:96:e5:40:f0:e0:c1:f5:46:81:28:dc:
b4:37:ce:77:20:d0:5d:94:03:48:40:c4:27:20:46:
b0:34:fb:bb:88:1b:ea:77:4d:1c:bd:d8:49:b1:75:
bd:5b:59:37:73:76:94:68:34:8a:89:1e:60:3c:18:
86:47:35:16:db:45:08:a1:ad:2c:0e:12:e1:54:ab:
a7:a7:a1:64:31:9f:00:1f:04:38:41:8f:c1:3c:c6:
62:16:a5:69:27:7a:92:6d:60:78:9c:57:aa:bf:f6:
b9:6a:64:12:42:19:21:ae:79:33:01:0a:d7:68:92:
75:0e:17:d4:5d:de:4d:ff:c4:a5:da:8d:bc:50:ca:
60:b9:3f:e1:39:d3:30:e4:fb:73:a0:62:c3:bc:04:
7e:db:d6:b4:a9:72:f7:32:bc:1e:ce:fd:7a:a4:51:
64:5c:43:e9:39:c4:3b:2f:ab:2c:8e:5e:2e:a9:dc:
50:79:ed:4f:3a:74:9b:18:a4:34:90:76:f5:a8:da:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:0D:6D:9E:F2:4C:3D:13:C2:2B:EE:20:30:0D:87:73:D4:37:90
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/35487c71-78ef-4188-81c6-6c68ab65ae5e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/35487c71-78ef-4188-81c6-6c68ab65ae5e/35487c71-78ef-4188-81c6-6c68ab65ae5e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.73.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394631
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:14:55:81:e6:7b:64:84:f9:2f:56:1f:d7:ea:38:23:36:7b:
1a:05:fb:76:88:37:f5:32:9a:1f:fe:de:12:8c:e2:ad:1d:e3:
94:00:b9:86:0c:11:5c:a6:f0:52:7f:e0:66:78:00:0e:39:80:
b6:13:ec:f2:e7:e0:e7:6d:02:4a:1c:50:33:67:d7:da:ff:10:
58:ac:70:16:ee:45:80:55:08:0c:09:7a:93:d3:b9:2c:cc:c7:
0a:1f:c2:ec:1c:9c:31:d5:a4:8a:e3:62:53:56:af:bf:ed:98:
a0:de:e7:f8:e3:e0:7e:60:e6:cd:90:a5:33:0a:68:cb:7e:f3:
06:31:1f:8d:42:92:45:bd:d2:51:96:33:02:13:97:45:57:18:
3f:70:2c:71:56:9b:fa:72:d4:8a:5e:1f:e9:d2:6a:ae:a4:24:
d6:76:6b:82:65:9a:d5:e4:b4:e3:5c:84:5b:cd:9a:7f:a5:39:
9e:99:34:07:78:0d:ba:89:85:42:9d:f7:65:fc:02:fb:7f:50:
be:e6:15:d5:81:06:ac:62:88:4b:46:23:c5:17:28:5b:ef:5b:
2e:76:dd:28:bd:de:95:e9:ac:4e:07:e7:ad:ed:22:c7:67:e1:
cf:b2:23:51:da:e6:c0:f7:9a:8d:0d:19:41:c4:fa:d7:68:2e:
b0:3e:b1:77
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE9Ryx6AgvVd4DiqbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDkyODAwNDUxMVoXDTI4MTIzMTAxNDUxMVowLzEtMCsGA1UEAxMk
MzU0ODdjNzEtNzhlZi00MTg4LTgxYzYtNmM2OGFiNjVhZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysEFMLD5kWbrse54tGkC8NNgHMywjRmG6kMD
XossFgHFKnF0YlPzZwEvVSBzlQkXAPv5Vgss/g5+4AYIC+TGluVA8ODB9UaBKNy0
N853INBdlANIQMQnIEawNPu7iBvqd00cvdhJsXW9W1k3c3aUaDSKiR5gPBiGRzUW
20UIoa0sDhLhVKunp6FkMZ8AHwQ4QY/BPMZiFqVpJ3qSbWB4nFeqv/a5amQSQhkh
rnkzAQrXaJJ1DhfUXd5N/8Sl2o28UMpguT/hOdMw5PtzoGLDvAR+29a0qXL3Mrwe
zv16pFFkXEPpOcQ7L6ssjl4uqdxQee1POnSbGKQ0kHb1qNrHwQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFDmeDW2e8kw9E8Ir7iAwDYdz1DeQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z
NTQ4N2M3MS03OGVmLTQxODgtODFjNi02YzY4YWI2NWFlNWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM1NDg3YzcxLTc4ZWYtNDE4OC04
MWM2LTZjNjhhYjY1YWU1ZS8zNTQ4N2M3MS03OGVmLTQxODgtODFjNi02YzY4YWI2
NWFlNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAZUkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgWHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEcUVYHme2SE+S9WH9fqOCM2exoF+3aIN/Uymh/+3hKM4q0d
45QAuYYMEVym8FJ/4GZ4AA45gLYT7PLn4OdtAkocUDNn19r/EFiscBbuRYBVCAwJ
epPTuSzMxwofwuwcnDHVpIrjYlNWr7/tmKDe5/jj4H5g5s2QpTMKaMt+8wYxH41C
kkW90lGWMwITl0VXGD9wLHFWm/py1IpeH+nSaq6kJNZ2a4JlmtXktONchFvNmn+l
OZ6ZNAd4DbqJhUKd92X8Avt/UL7mFdWBBqxiiEtGI8UXKFvvWy523Si93pXprE4H
563tIsdn4c+yI1Ha5sD3mo0NGUHE+tdoLrA+sXc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:48:39 2026 by rpki-client