
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.cer
File: 72f18f4e-8c35-4c51-b181-8ea94f8ca59a.cer (raw, json)
Hash identifier: QXMngLGl4+5lk4anTM0gVJShZL4fkegJBSEoInVcNdM=
Subject key identifier: B2:CC:C0:93:71:AC:8B:8B:01:4E:CC:7F:37:6B:D9:C4:F1:A4:43:5C
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F51CB1E74070EE17DC1A7CB00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 28 Sep 2026 00:45:11 +0000
Certificate not after: Sun 31 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 35843
IP: 24.53.224.0/20
IP: 67.215.128.0/19
IP: 207.210.0.0/18
IP: 2604:1500::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:cb:1e:74:07:0e:e1:7d:c1:a7:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 28 00:45:11 2026 GMT
Not After : Dec 31 01:45:11 2028 GMT
Subject: CN=72f18f4e-8c35-4c51-b181-8ea94f8ca59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:54:23:cf:3a:37:a3:87:06:dc:a8:51:7d:
f3:45:9a:d5:da:e2:b3:de:09:41:7d:dd:ba:3b:e7:
f9:fe:7a:a9:4f:7f:7c:72:48:51:82:73:3d:e9:52:
2a:92:49:2b:30:b1:db:7b:52:6b:41:d8:98:e5:83:
f4:12:d3:a9:51:f8:65:a0:05:d2:f4:e8:08:b7:1f:
b3:ef:fb:3f:ba:49:e5:ef:6c:76:64:87:1b:be:a6:
bd:6a:90:21:0e:61:3a:3b:20:97:96:1a:9f:87:ef:
a2:0b:2a:2c:72:4c:3d:b2:44:85:46:66:38:96:0d:
4f:6d:9c:2f:2d:be:4b:ef:f9:1c:65:9c:ee:d8:7d:
9e:4d:56:e3:4d:36:29:23:77:41:c2:a9:0b:95:f1:
6c:50:cd:89:f4:0b:65:26:cb:dd:e3:48:07:0f:02:
ce:75:08:f7:d8:2e:10:16:c9:d5:cc:d8:a2:3c:36:
47:13:77:ea:63:b3:12:e4:69:d6:be:e0:d2:50:3e:
2e:ae:6a:7a:18:be:dd:38:d8:37:59:02:94:24:d7:
83:8f:5a:fb:f2:9b:fe:db:ce:97:32:56:83:e1:03:
c3:16:5a:12:fd:10:0d:d8:b7:0d:70:73:a2:55:04:
02:4b:87:40:77:4e:88:79:54:db:dc:53:33:29:c7:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:C0:93:71:AC:8B:8B:01:4E:CC:7F:37:6B:D9:C4:F1:A4:43:5C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.224.0/20
67.215.128.0/19
207.210.0.0/18
IPv6:
2604:1500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35843
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:2a:fd:2e:d2:e5:f5:1f:ac:ae:6e:d2:1a:6d:ac:56:66:de:
30:c2:a9:c0:ef:cc:34:7e:fd:87:a5:69:c7:88:3f:6e:98:d9:
a7:b7:29:8d:00:dd:5d:c0:42:49:f5:38:c8:98:a4:85:09:7c:
8b:54:88:b5:83:0a:98:13:fc:c2:ca:68:24:50:98:aa:6c:51:
97:8f:da:d6:1f:7f:8d:f9:99:74:ec:bb:40:27:72:02:2a:cc:
c5:46:fc:d6:be:5f:f9:ae:e5:ce:e2:52:7e:24:26:1c:2f:6b:
a4:95:34:35:e3:7f:d0:32:63:50:31:1d:aa:6e:02:6f:e5:20:
15:6e:90:8b:35:c6:94:ff:88:4b:2f:85:90:58:b3:05:07:a1:
b7:38:c0:0f:a0:48:f8:9d:47:74:92:27:f4:a0:bf:f4:3c:f8:
5a:46:fd:7b:f8:f3:67:8b:8b:51:eb:78:6a:d5:6d:b0:52:08:
9f:bc:71:c5:0a:56:d5:67:ca:ad:cb:cf:b4:27:9c:07:d7:fa:
66:b0:8f:8d:bf:98:ba:48:95:4e:b1:d6:b7:c3:c3:27:45:cd:
e1:2a:00:43:32:85:d1:7c:5a:47:a6:98:80:09:53:cd:30:4a:
95:bd:e2:3e:0e:b0:17:06:f0:1e:ae:61:9f:28:41:4c:4a:88:
e1:eb:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:00 2026 by rpki-client