
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691.cer
File: 8bd56a04-2ad4-4f34-b979-58f0a9509691.cer (raw, json)
Hash identifier: Awt9nkM57uQSozLcWuISn7lapXuDbu0zFtetx1TCk2I=
Subject key identifier: A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F628B3A44D10E1AFE535E3B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 04 Oct 2026 00:45:12 +0000
Certificate not after: Sat 06 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 22511
AS: 29762
IP: 64.191.3.0/24
IP: 74.114.128.0/22
IP: 198.89.15.0/24
IP: 198.232.220.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:8b:3a:44:d1:0e:1a:fe:53:5e:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Oct 4 00:45:12 2026 GMT
Not After : Jan 6 01:45:12 2029 GMT
Subject: CN=8bd56a04-2ad4-4f34-b979-58f0a9509691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:7b:74:fa:c4:db:fc:1b:57:36:66:a6:07:
52:e3:3c:d9:33:00:27:c8:a3:24:68:ca:f0:38:10:
26:b3:18:da:52:61:2b:e7:37:2e:fb:10:ec:38:95:
12:3b:8e:24:a4:8a:59:89:4a:f4:f9:7b:59:b5:e9:
59:19:d2:e1:1e:a6:a6:02:05:7b:92:42:8b:ba:82:
62:ef:b8:d9:6c:21:4e:c3:63:bb:19:94:83:82:b9:
11:87:f8:13:f0:84:a5:9a:76:98:6e:6e:9a:9a:98:
fb:54:6a:9b:1c:d8:60:ca:87:e8:94:8d:3e:36:c5:
1a:93:81:5f:a7:f9:5f:cc:87:ef:8d:9c:6e:05:a8:
bd:d1:2b:2d:7e:ee:49:af:95:08:ce:d9:1e:14:85:
5f:8b:a4:60:f8:ce:b2:f0:15:fb:be:12:08:cc:b9:
34:2f:a4:76:12:e9:6a:08:92:0b:25:0a:73:0e:c4:
45:f0:58:d6:32:df:cb:fb:12:d9:27:27:50:40:30:
a6:fc:37:e7:90:b7:eb:e0:38:ff:77:d9:ed:32:8d:
92:26:6f:80:b3:39:17:75:e1:36:2d:31:29:50:27:
03:0f:db:47:2e:f3:f8:6a:d6:6d:a8:d3:62:6f:cf:
3e:4b:3b:d1:8f:b0:1c:57:19:c2:94:45:2f:76:65:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C9:1A:7B:FB:8D:F6:3B:61:1F:30:82:64:0C:51:7A:A3:B6:96:14
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd56a04-2ad4-4f34-b979-58f0a9509691/8bd56a04-2ad4-4f34-b979-58f0a9509691.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.191.3.0/24
74.114.128.0/22
198.89.15.0/24
198.232.220.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22511
29762
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:9e:e5:ba:d8:3d:5d:d3:ad:55:e2:fc:b6:7f:b2:5d:30:98:
75:c1:e9:12:30:df:f9:2a:87:05:d0:0a:7b:38:91:4a:f2:50:
0a:5d:68:93:a2:47:5a:72:1b:9a:a6:d0:0b:eb:74:dd:cd:86:
75:23:07:0a:5f:5c:99:99:18:13:ad:ff:41:70:30:e7:0a:76:
29:b5:93:df:bc:ef:33:95:d1:c2:e0:1b:27:05:3c:51:e6:33:
cc:a1:c4:26:51:75:8a:4d:1d:ee:26:3b:50:c4:e4:d6:e8:cd:
80:e4:e9:c9:f4:37:3c:d2:dc:8c:b7:9c:52:c2:1e:84:13:9a:
30:a8:4f:eb:81:e9:df:8e:cf:cf:93:97:1c:94:b9:a2:02:92:
bd:ce:54:8b:98:6e:d9:90:bd:ba:d6:2a:0c:d4:fe:1f:d8:54:
05:a5:42:2b:a0:d5:0b:3c:c6:dc:70:6b:d1:55:90:00:bd:a2:
bd:72:b5:1a:14:f3:e5:37:07:33:b7:a8:38:3d:2f:34:60:cd:
1e:35:8b:9e:d5:6d:d2:9a:f5:c0:c3:de:8f:8a:8c:e9:33:9d:
7e:47:3f:49:66:8a:64:64:cc:44:b6:1c:74:c8:12:3d:02:21:
a9:db:37:4e:2e:e0:fc:7d:93:87:2c:ff:ef:d9:c5:c4:0b:16:
b3:5c:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:37 2026 by rpki-client