
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94.cer
File: 802c21f0-6b99-4fac-bc2f-67d0945b4b94.cer (raw, json)
Hash identifier: PSjv/6ZgjF1QMsEpbIFhLNK2u4zFpcn7g8Btzmi4mGg=
Subject key identifier: 94:D3:F4:CF:3D:18:C9:F9:EA:B8:79:01:5E:B6:46:51:B4:7F:F8:72
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E5DBB66A0FA9E3E1A7F320480
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/802c21f0-6b99-4fac-bc2f-67d0945b4b94.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Jul 2026 14:36:17 +0000
Certificate not after: Wed 29 Dec 2027 17:13:54 +0000
Subordinate resources: AS: 401977
IP: 192.42.50.0/24
IP: 2602:fa04::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:bb:66:a0:fa:9e:3e:1a:7f:32:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 2 14:36:17 2026 GMT
Not After : Dec 29 17:13:54 2027 GMT
Subject: CN=802c21f0-6b99-4fac-bc2f-67d0945b4b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:24:f5:62:54:cd:3b:10:87:31:e0:14:1f:
25:10:e9:d4:13:01:a4:e2:03:f4:8c:26:4f:e9:10:
80:0f:c2:12:6e:7e:13:3c:d8:84:92:a4:8c:7c:2c:
be:63:52:1b:f3:95:b1:5d:13:ff:85:98:ef:8b:04:
b7:45:9c:33:c4:b1:24:3d:e8:c2:3c:0a:00:c7:8c:
c1:a5:2d:f5:00:13:b6:6a:3c:51:ae:21:54:77:4f:
c5:f2:0d:0b:2d:7e:71:e0:e2:28:76:1b:c2:e3:b5:
e0:81:d8:a4:06:a2:96:04:f7:b1:b3:34:d6:c0:33:
d2:91:60:11:12:9e:c4:45:84:bb:9e:69:89:12:37:
1e:ba:d3:fc:8b:a3:89:4f:f3:d0:6b:b0:a8:8e:88:
7b:82:e8:d9:28:e0:a0:16:bc:3e:d5:52:80:fa:2d:
d3:65:31:f1:47:f6:04:dc:42:59:31:af:1d:a6:de:
c6:05:16:a3:eb:96:a7:48:44:39:ca:2a:0a:3a:d5:
03:64:79:6d:b5:8c:fc:00:77:12:45:24:5a:7c:95:
22:9f:82:75:75:ff:dd:0a:99:0e:0c:14:be:35:e9:
04:0a:09:12:03:fe:9a:4b:5f:dc:0a:5c:e5:11:57:
13:9f:cb:f5:dd:0a:5c:6e:f7:c1:7c:13:f9:09:dc:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:F4:CF:3D:18:C9:F9:EA:B8:79:01:5E:B6:46:51:B4:7F:F8:72
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/802c21f0-6b99-4fac-bc2f-67d0945b4b94.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.42.50.0/24
IPv6:
2602:fa04::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401977
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:37:70:3a:e3:53:c0:d0:78:20:51:fe:2f:2d:7a:e1:23:2b:
05:00:97:47:48:0c:1b:07:60:d6:31:6f:f8:9c:28:fc:ae:9d:
c9:fb:a3:7e:f3:11:90:65:70:d2:6c:7a:aa:19:fb:47:8c:e4:
a1:ea:fc:25:7e:f9:9a:6b:f6:21:ec:14:86:c6:f3:3f:1c:30:
11:18:fe:4a:b8:bd:52:5a:d5:0f:11:7b:22:b9:2c:22:00:27:
ca:27:f3:82:1e:c7:3b:5e:68:27:5d:55:31:de:70:38:c4:52:
f3:63:8c:48:3e:6b:22:f1:75:2e:30:7e:28:87:3a:d4:9e:3b:
8a:6a:0c:0b:ed:ab:28:78:8a:ac:91:6f:4f:09:32:21:5e:3d:
08:8a:8a:1e:93:99:cb:26:b4:5f:3d:58:44:cb:ba:d0:dd:df:
75:55:f7:69:09:87:67:39:34:c9:78:a8:7f:b5:a9:05:e4:43:
97:0d:40:48:ca:dd:64:f7:8c:91:2c:16:c7:e1:ec:26:bf:5b:
d5:e4:b8:c6:e7:9f:d9:b3:66:6a:7e:0e:3d:a2:88:52:7a:ee:
dd:a0:5e:6e:47:be:3b:09:16:2a:cb:b9:81:47:5b:6d:c9:ea:
cc:28:3e:43:4c:3a:f1:c9:76:83:b6:9d:11:71:17:90:67:ec:
78:0d:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:04 2026 by rpki-client