
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/464bf87f-1cf8-4994-9b2a-34157bf30b5b.cer
File: 464bf87f-1cf8-4994-9b2a-34157bf30b5b.cer (raw, json)
Hash identifier: GAJ40zWBQ3YuwTyzuJL3DFE714GRX7fn/otl9+Ld0xA=
Subject key identifier: 2B:18:E3:E4:46:C8:B8:4B:E5:1A:F2:12:D6:3E:02:A6:41:53:4D:7D
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584D3AF09BD908C007808DEBCD00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/464bf87f-1cf8-4994-9b2a-34157bf30b5b/464bf87f-1cf8-4994-9b2a-34157bf30b5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/464bf87f-1cf8-4994-9b2a-34157bf30b5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 20 Mar 2026 10:43:15 +0000
Certificate not after: Thu 22 Jun 2028 10:43:15 +0000
Subordinate resources: AS: 12118
IP: 69.161.224.0/19
IP: 72.50.128.0/18
IP: 2620:114:9000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3a:f0:9b:d9:08:c0:07:80:8d:eb:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Mar 20 10:43:15 2026 GMT
Not After : Jun 22 10:43:15 2028 GMT
Subject: CN=464bf87f-1cf8-4994-9b2a-34157bf30b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2a:bf:34:e0:86:12:df:9e:c3:8c:88:26:f2:
5f:84:2a:59:45:79:39:24:13:5b:93:13:45:69:cc:
5f:4d:4e:66:c2:3c:7b:8f:dd:61:be:ed:85:d2:d2:
f2:f7:b8:9f:e0:73:9c:e7:2f:1c:9e:db:55:8d:0c:
85:35:54:86:99:0b:30:0b:1a:06:bc:8a:e7:d0:1a:
6c:42:04:29:38:75:e9:a8:6e:23:47:7a:be:22:09:
5c:21:ab:e9:8c:40:45:bb:a6:0e:b1:43:d2:64:e9:
b9:b6:66:9a:a4:ce:bb:9e:da:b0:9a:98:63:8c:62:
62:a7:92:16:01:f6:58:5c:49:b3:fa:0c:b8:1b:39:
ce:d5:dd:e4:9c:71:76:a4:0b:7e:a6:f6:4c:fe:65:
39:2e:4d:9f:c8:27:63:7e:24:f4:0c:a6:29:d3:9e:
74:e9:2e:fe:43:cb:e4:ad:19:2c:67:9f:45:8f:63:
b7:1b:05:1a:de:62:46:f5:23:ee:2c:ff:53:60:68:
2c:ee:09:7c:fd:50:c0:66:d1:69:61:02:a2:0a:a3:
9d:0a:eb:40:19:6e:80:e9:78:23:0f:c1:51:4d:81:
36:8c:33:17:87:54:5b:0a:04:18:53:e1:bc:69:37:
f9:df:6f:ca:97:f5:80:99:9e:ed:df:e6:d2:35:a9:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:E3:E4:46:C8:B8:4B:E5:1A:F2:12:D6:3E:02:A6:41:53:4D:7D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/464bf87f-1cf8-4994-9b2a-34157bf30b5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/464bf87f-1cf8-4994-9b2a-34157bf30b5b/464bf87f-1cf8-4994-9b2a-34157bf30b5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.161.224.0/19
72.50.128.0/18
IPv6:
2620:114:9000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12118
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:cf:43:91:a5:a9:97:9a:8e:ab:bb:56:ef:27:51:1f:ea:f1:
24:98:99:34:8e:14:7d:e2:b6:f6:75:b2:bf:11:f7:1f:d6:6a:
5a:93:33:0a:42:a4:8c:ed:b1:3c:a5:fa:f7:cb:ab:b5:95:4e:
34:68:8f:5b:d0:ee:50:af:4c:7d:d7:af:a6:1a:b7:9f:dd:98:
4d:49:3c:19:8a:06:5c:fd:cb:6e:80:8c:2e:a8:f3:b9:3c:b5:
3a:21:b9:f6:9f:52:3a:dd:7f:57:e4:ac:b1:71:a0:b1:4c:ec:
ce:6f:bf:d9:0d:f3:0b:81:00:14:a0:54:88:80:5d:4a:7d:74:
5f:64:a8:66:17:bc:05:ae:56:31:c8:9f:af:57:cc:93:47:1d:
58:f2:e9:c0:8d:bf:5a:c7:ba:56:be:bf:82:b7:5d:b0:42:63:
1c:45:fd:c1:e6:8f:cd:a9:34:04:d3:28:a3:ae:3b:59:97:38:
23:46:27:f8:61:9b:2b:f6:cb:33:9b:aa:c4:a5:38:76:59:62:
f4:a7:da:a8:4c:6f:77:4a:54:db:21:b0:99:dd:34:1d:3e:b1:
5c:9d:a8:9d:3d:b8:e9:61:6c:be:30:9e:18:85:2c:88:38:36:
56:02:dc:da:93:42:17:a5:67:4a:17:cf:e5:2c:dd:9a:b7:27:
d7:42:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:33 2026 by rpki-client