
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer
File: 9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer (raw, json)
Hash identifier: 3oFhhpyT9dZGRalQzqHd1wZu2Qa8CSM/pkYKaCQBoLA=
Subject key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E8DE8202AEB7789E3D05F0740
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 19 Jul 2026 20:45:12 +0000
Certificate not after: Sat 21 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 46170
IP: 192.154.80.0/24
IP: 2602:f70c::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:e8:20:2a:eb:77:89:e3:d0:5f:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 19 20:45:12 2026 GMT
Not After : Oct 21 20:45:12 2028 GMT
Subject: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:0f:3e:47:e4:f6:e2:20:71:8d:36:a7:0e:
c5:0c:1b:b4:36:3d:5c:98:82:37:28:9a:4b:30:dc:
ad:a2:c3:75:21:21:9e:db:23:00:12:09:a7:67:b5:
a4:81:85:50:9e:cd:e4:4e:ca:d8:1b:ba:2e:73:1d:
c4:4d:a6:0c:6e:cf:fc:51:59:69:f1:b6:c1:78:9d:
c1:d4:6d:0c:57:cc:21:0a:a8:9e:f6:94:7b:2a:ea:
0f:7f:fc:d9:16:8f:90:70:68:4c:3d:4b:1f:d2:c9:
0a:49:df:ff:ab:b9:ab:2c:01:22:48:b5:83:d2:23:
16:3b:5d:d6:22:a2:44:c7:37:39:92:ad:b5:80:47:
f7:95:6f:12:79:97:d1:77:f9:60:89:76:04:17:ba:
a8:ed:db:81:0a:1c:3c:e8:d4:a3:00:98:95:5c:3e:
06:93:ee:28:99:1f:42:12:98:30:68:1f:95:df:b0:
de:3a:54:f5:60:5b:70:c2:35:4b:04:c2:26:d1:c9:
8d:d0:5d:db:0f:dd:c1:9d:53:53:ef:c0:f9:e7:6e:
c3:56:e0:54:be:fb:7f:17:ad:b6:0d:9c:56:67:9f:
ab:5b:47:b5:02:7a:b0:d1:e8:8a:7b:d0:b4:f0:4c:
97:f7:c3:a1:eb:e6:16:4f:52:98:68:26:f8:7e:68:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.80.0/24
IPv6:
2602:f70c::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46170
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:3b:be:ec:0d:38:6f:8a:82:53:b7:a6:3d:9d:2b:2d:2a:65:
f2:e1:60:d0:14:7d:4e:93:7b:f1:d2:68:c0:99:18:41:4d:64:
61:3b:6a:b5:95:44:80:26:d2:98:14:9d:cf:5c:a4:1a:77:3b:
92:2c:ca:fa:ac:bf:16:0d:34:99:19:bd:b8:f8:ce:fb:7e:78:
30:98:b5:e2:3d:c0:6f:2d:7e:7c:1f:e0:8e:ab:e2:24:25:7b:
1b:5e:0b:73:07:11:d1:23:b7:a5:17:92:5e:59:1b:47:fc:e9:
27:b4:28:20:96:e2:2f:f6:6a:f3:35:27:54:7d:36:54:2c:d3:
8c:da:78:20:77:a6:d1:b0:f3:29:d5:1e:4a:88:30:f9:25:96:
ed:50:97:c9:d4:37:5e:77:4e:a6:c8:ea:78:3a:d5:c4:02:20:
ab:ff:1e:f7:c0:e5:f4:7d:4a:29:36:8b:31:da:e7:33:9f:d7:
51:6c:6e:1c:e2:b6:d8:c4:94:a1:ab:52:f2:44:b6:94:9c:32:
01:5b:12:7b:15:ae:25:a3:46:73:61:2e:51:d9:93:a5:3c:b1:
ed:c1:3c:22:e4:2e:cd:5f:d4:45:35:6e:fe:14:6f:aa:34:5a:
01:fb:05:fd:ce:c6:cc:50:89:3b:a0:3d:fe:8e:b3:2e:e1:c6:
ef:4c:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:43 2026 by rpki-client