
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer
File: 762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer (raw, json)
Hash identifier: SnIyYOl4KlNNavttvE/NabksmJp53Yju1Rc9i6kiIW4=
Subject key identifier: 98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E561272532532F476A0FFE680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 29 Jun 2026 20:45:12 +0000
Certificate not after: Sun 01 Oct 2028 20:45:12 +0000
Subordinate resources: IP: 205.236.76.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:56:12:72:53:25:32:f4:76:a0:ff:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 29 20:45:12 2026 GMT
Not After : Oct 1 20:45:12 2028 GMT
Subject: CN=762fb9da-1e64-46dd-8f1f-dd257fd1cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:b2:03:e3:31:54:30:31:0f:8d:e5:bb:ae:
6d:b6:a4:71:4d:29:11:7a:ca:87:99:5b:a2:40:a7:
50:d5:d5:6b:08:40:fe:7b:01:56:c7:a6:c6:c9:cf:
a0:68:da:8e:07:14:5b:59:c3:73:e6:d5:7c:64:6b:
c2:72:35:7d:e5:d6:81:74:53:43:a7:52:4b:d0:89:
c5:c9:10:6c:63:28:67:10:70:e9:d6:c1:18:57:65:
a3:0f:a0:61:92:47:43:61:61:3a:12:a7:e9:cc:f8:
86:92:f7:f2:78:3f:72:f1:0e:d1:b0:56:9c:0a:05:
67:c1:cc:d1:07:79:d1:e4:02:56:b7:d3:7b:5b:b8:
7c:38:42:35:de:c3:28:c7:24:39:03:30:73:ed:c2:
36:6e:94:08:e1:eb:4e:03:fc:70:5c:92:a7:a3:31:
9e:cc:8d:1c:ca:46:b2:a6:54:e8:2f:71:48:50:9c:
05:de:c2:43:d0:3c:e4:d9:5e:cf:f7:22:bc:97:a9:
11:2f:55:c3:b1:62:8c:44:ae:4e:a8:79:32:62:b9:
fd:bc:a4:62:d7:b4:14:e6:03:5a:14:e4:e8:ad:1e:
d2:02:ed:36:13:c1:fe:e3:5f:30:2b:6e:8e:7c:a7:
8b:90:b9:e9:f0:3d:2f:79:15:50:d5:63:9c:09:e0:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.236.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f0:ae:24:69:1b:3d:e2:6e:c5:5d:dd:3e:eb:d9:e5:12:78:
a6:c7:6c:44:19:0f:04:51:c7:7f:2f:16:c1:ee:c5:c9:1d:6a:
0d:17:70:a1:d7:1b:2e:71:55:44:1b:7e:02:93:01:27:31:e1:
cb:8a:32:1b:fc:08:23:aa:20:7f:0a:0e:80:b8:69:e4:a3:6b:
c5:fd:e7:ad:9f:cf:cb:c1:18:26:d2:1b:09:b9:8f:ee:16:c9:
9e:68:00:cf:84:05:01:dc:da:33:2e:8e:0b:a9:85:5c:6e:58:
27:d0:56:85:ad:18:93:e6:c3:9c:6c:dd:28:42:d1:4f:8f:28:
8d:bc:02:55:cd:d8:cd:66:a4:fa:b2:dd:f7:0b:b1:5c:bc:54:
8d:40:36:73:57:e2:7e:78:3c:22:82:c7:fd:cf:05:82:77:8c:
97:71:0c:92:41:c5:7f:b2:76:76:b7:e6:d3:d3:8b:db:72:25:
05:d7:4a:89:cb:b2:86:56:71:7f:5f:f5:ad:97:97:d1:51:b9:
86:09:bc:14:e9:00:e4:0c:75:01:6c:12:03:96:ef:be:3e:96:
87:5a:a9:ec:2b:cf:1a:93:b1:cb:79:3f:d1:a1:53:f9:5b:06:
1e:f2:90:69:71:92:9f:e0:7d:9a:77:71:df:3d:35:68:2a:21:
26:ea:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:32 2026 by rpki-client