
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer
File: 6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.cer (raw, json)
Hash identifier: mvWDsoqqhIbeUXl/hZlf1R6E0xwHsNx/xCafkTt2XYk=
Subject key identifier: 5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E7BC2B0925608266E52328C80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Jul 2026 08:45:13 +0000
Certificate not after: Sun 15 Oct 2028 08:45:13 +0000
Subordinate resources: AS: 22931
AS: 397809
IP: 72.10.176.0/20
IP: 2620:c1:8000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7b:c2:b0:92:56:08:26:6e:52:32:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 13 08:45:13 2026 GMT
Not After : Oct 15 08:45:13 2028 GMT
Subject: CN=6afd62dd-ec3c-44d7-93fe-81efca4b3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:10:11:36:68:e5:cf:2a:f4:16:3b:8e:62:
fc:0a:ca:80:2a:0f:c4:09:a2:89:31:d2:02:fa:9e:
ae:13:fa:2b:28:cd:10:1b:4b:7f:b0:b9:2b:13:e3:
87:05:dc:a2:5e:31:85:50:90:12:46:67:c0:55:b9:
99:40:77:11:0c:b7:12:5d:d8:c1:21:4d:40:68:38:
89:23:3d:92:6e:66:d9:d3:70:ab:26:6e:03:5f:0e:
42:38:53:f2:f8:08:9c:f3:56:bb:c5:d7:2c:85:b9:
e2:de:cf:37:a1:f8:11:0f:5f:92:4e:78:f0:e6:2d:
52:a7:72:41:68:29:f3:c5:0f:fb:7e:7d:5a:d9:60:
d8:71:e9:de:ba:b8:af:73:c1:be:76:99:33:aa:47:
16:c3:fa:5d:59:e6:ff:21:44:14:b7:2b:6d:84:f6:
b2:9f:b2:68:67:2d:86:34:64:03:c2:27:0e:40:4f:
ac:56:52:8b:ed:d5:ca:ce:0d:c5:79:5f:82:69:51:
9d:34:98:8e:2f:be:ba:7f:47:69:f4:4c:37:e3:e2:
09:ad:a7:3d:e2:71:4f:ef:74:1d:b1:d4:f6:b9:86:
f5:2b:92:82:53:05:29:33:5d:2f:a1:86:08:bc:e2:
db:49:fa:31:f7:ed:52:45:4e:d0:12:e6:31:6c:f2:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:5D:CA:E7:BA:C5:90:FD:1C:E8:E4:17:1E:55:E7:02:6E:E2:AC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe/6afd62dd-ec3c-44d7-93fe-81efca4b3dfe.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.176.0/20
IPv6:
2620:c1:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22931
397809
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:dd:ab:e5:8e:f1:4a:8e:2f:09:00:53:0c:6b:a0:33:e6:8a:
5c:4b:86:69:b6:dd:8e:81:b6:78:4d:c2:d9:21:ac:c6:08:4f:
17:c1:74:42:48:81:f2:ad:a1:6b:40:97:f8:cd:64:cc:81:eb:
10:15:cc:e9:8d:17:2d:60:67:44:d1:de:ae:01:1d:87:d0:bb:
ed:0e:fd:b8:34:95:c7:c5:4b:0d:c7:99:71:86:cc:e4:4d:d7:
11:7d:32:29:0d:d9:13:f0:b9:a7:a4:d0:77:1a:85:d5:5d:9b:
13:41:ab:c5:a6:87:bd:a7:23:d8:90:cd:94:12:6d:06:b8:db:
42:42:88:cf:3e:67:57:32:f3:f0:35:a8:dd:cf:41:9d:9b:62:
e5:d3:14:5c:67:d2:38:1d:2d:aa:ff:96:e3:e0:e8:b1:80:62:
ff:22:0c:d8:e1:9b:6a:33:38:7c:f8:a9:66:c8:11:9a:10:46:
b8:8c:2c:9c:45:75:23:1a:40:ec:65:2a:93:21:90:4b:52:15:
c7:5d:32:42:63:10:93:5a:4a:fc:52:20:92:43:80:d7:d6:fe:
5c:0c:83:f4:57:eb:27:1d:99:83:0c:fb:54:65:cd:fa:52:d0:
98:24:6b:0b:79:20:f0:c0:d1:27:32:46:1c:9a:ef:33:2d:71:
08:91:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:58 2026 by rpki-client