
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.cer
File: 8b07b6ac-105e-4d1b-9fca-4a568b4001b8.cer (raw, json)
Hash identifier: wuriL6fKeM4TXAAKLVX1cjuouV+SfAyy8cm4k1oweNI=
Subject key identifier: CD:C8:6F:37:E5:90:55:B1:2E:41:DA:56:AC:65:6D:17:46:67:68:16
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E74C7F865474A91A2871785C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Jul 2026 20:45:12 +0000
Certificate not after: Thu 12 Oct 2028 20:45:12 +0000
Subordinate resources: IP: 23.178.232.0/24
IP: 2602:f8e6::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:74:c7:f8:65:47:4a:91:a2:87:17:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 10 20:45:12 2026 GMT
Not After : Oct 12 20:45:12 2028 GMT
Subject: CN=8b07b6ac-105e-4d1b-9fca-4a568b4001b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:b4:dd:bf:de:cb:ef:c2:69:f5:71:a5:e8:
df:50:86:fd:f4:8b:fa:b7:3f:23:50:2c:86:b2:fd:
f1:88:99:9a:fa:5f:76:95:95:56:ee:8e:b1:d6:b0:
62:72:33:5f:f4:3c:b8:de:5a:e9:02:13:f2:da:55:
ca:80:45:42:02:42:c7:5a:64:2a:f7:a8:cf:46:13:
16:7e:32:f4:0e:bd:d5:07:58:e0:e2:ce:93:c5:cd:
66:31:3f:e4:38:4f:26:84:5e:48:57:45:40:97:6f:
78:5f:44:fb:31:9a:3f:1f:b7:ed:f6:05:4c:49:7e:
f3:49:63:90:11:13:63:b5:c8:01:ef:2e:93:cc:79:
04:64:70:48:35:b0:6b:2a:5c:9a:8e:6a:35:91:61:
de:2d:81:6f:5c:7f:e4:d3:e8:0f:ee:e6:7c:6b:f9:
8f:cc:92:20:30:5f:ab:fe:13:55:99:61:73:90:06:
7d:10:36:38:94:f2:6d:21:93:66:cc:64:09:01:8f:
1c:4d:1f:4b:63:f2:59:5b:ee:d6:13:64:e5:93:a2:
e9:99:38:4b:42:50:cd:76:dc:01:85:43:85:cc:0f:
3b:b6:c8:cd:7c:e0:5d:8c:12:37:a5:4b:f0:56:04:
c5:6e:e3:a4:9c:b5:82:f1:33:98:bc:4e:8b:3b:dd:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:6F:37:E5:90:55:B1:2E:41:DA:56:AC:65:6D:17:46:67:68:16
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b07b6ac-105e-4d1b-9fca-4a568b4001b8/8b07b6ac-105e-4d1b-9fca-4a568b4001b8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.178.232.0/24
IPv6:
2602:f8e6::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:42:9a:a1:90:1d:7f:eb:0c:58:ec:b2:74:ab:d5:fa:a0:ea:
0c:e8:f4:fa:17:67:b3:fa:ce:cb:15:7f:9c:11:bf:4a:00:dc:
11:b0:ed:d6:01:5e:2e:ae:9b:3a:68:7a:04:ba:3c:35:88:b6:
78:09:77:f8:8c:5c:87:d9:4f:0a:59:0c:3a:dc:88:8a:e8:c4:
29:e8:ce:02:24:d2:9a:8a:50:ab:1a:a5:78:c1:60:7a:3e:60:
22:96:17:7e:09:e6:4c:8e:82:6a:e1:88:3d:ce:ec:8c:43:f0:
f5:3b:90:08:7c:d2:cd:67:a3:c5:c1:b9:2b:2d:4c:ba:b2:a9:
63:14:c6:a9:b3:99:cd:a5:f3:c6:fe:68:9b:27:97:d0:63:18:
9b:c6:47:47:6c:f4:73:96:17:86:a2:08:5d:cb:f9:80:88:9f:
ba:9e:e7:17:d2:f7:c9:4a:14:4c:db:0a:22:0e:66:0c:17:a5:
63:0f:0f:a0:8d:ec:c8:37:85:a6:6d:cd:32:25:44:69:3b:87:
47:b1:3b:cc:4f:a7:98:fb:b4:2f:28:41:94:06:ae:e6:55:e5:
0f:aa:ae:d1:fb:0e:36:94:49:c1:bc:c9:9f:ed:46:a9:7e:e5:
87:34:b1:26:60:a2:87:60:5d:f2:d4:40:f2:70:7d:bf:39:f1:
52:9f:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:53 2026 by rpki-client