
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer
File: a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer (raw, json)
Hash identifier: 8PSa4AV9BOUIEizAJLipAl61X7KjgvFQz4bx0u2xAZY=
Subject key identifier: 54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E81580B358D344735D9A59180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 15 Jul 2026 08:45:11 +0000
Certificate not after: Tue 17 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 401616
IP: 23.137.100.0/24
IP: 2602:f68a::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:81:58:0b:35:8d:34:47:35:d9:a5:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 15 08:45:11 2026 GMT
Not After : Oct 17 08:45:11 2028 GMT
Subject: CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:8f:98:36:9c:82:39:16:74:37:ff:1e:b8:
b5:26:54:3b:0b:72:6c:d1:1e:7d:41:c6:f5:98:48:
f1:41:50:a1:dd:55:e2:c4:e0:d1:4d:11:3a:99:f3:
89:01:e7:dd:ca:ba:43:e7:86:99:fa:ce:c0:68:b4:
e5:6e:5d:fb:68:ed:94:ca:4d:85:d4:38:77:e6:a1:
79:e4:b8:0b:89:47:f9:08:de:19:9f:f0:be:aa:2d:
6e:74:05:f4:73:b0:c5:f4:93:71:93:52:79:10:bd:
58:41:37:ed:6f:f8:ea:64:48:23:dd:6e:73:7b:b5:
84:e7:c7:20:98:72:7c:37:13:64:47:e4:ba:35:30:
70:7e:1e:eb:6a:d0:06:58:39:f2:cc:ec:e0:10:a8:
52:a9:95:b9:36:be:e2:ca:be:ce:38:4b:cc:2a:b8:
fc:e6:3c:ce:fd:71:32:64:43:40:bf:bb:75:31:9d:
51:8a:68:db:48:94:b4:65:86:4d:87:9e:30:bd:e5:
36:30:08:86:13:79:42:2e:93:18:c7:5f:35:59:10:
a0:b6:43:d5:08:1e:d1:0e:31:5b:8a:ea:8a:86:b5:
f0:80:e5:07:4e:4b:a8:2f:3e:52:d0:b3:d8:d0:75:
79:c9:ed:40:ea:71:69:89:a6:cd:e1:24:9e:e9:7f:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.100.0/24
IPv6:
2602:f68a::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401616
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:2d:2e:af:9e:de:ce:5d:29:84:4e:e8:52:52:15:18:bc:86:
51:58:62:0d:6d:30:0b:55:21:2c:86:e4:b7:d4:42:f5:7f:bc:
ce:c2:b1:42:4e:e9:27:d9:ca:b3:e1:42:19:73:0d:c6:1b:13:
d0:5b:f7:f2:fe:2a:02:a3:ce:6e:47:94:1c:ad:c0:4c:da:9e:
5f:de:08:97:f7:6c:00:59:e6:37:99:15:c7:da:c8:f9:75:f4:
c2:c5:16:1f:51:90:b5:9f:3c:d1:60:49:c6:f4:48:20:bb:e0:
89:bd:58:3b:c3:e6:e9:a1:9d:10:03:48:d4:41:53:a1:d7:b3:
2e:22:db:9f:59:ed:fd:cb:75:18:80:e6:5a:b4:74:98:e6:1c:
d6:68:9d:b0:c7:2d:94:30:9e:56:93:c3:6b:13:c2:42:a6:4b:
b4:33:bd:e2:50:79:96:32:e2:75:bd:36:83:d8:77:29:ab:66:
f6:1a:16:b2:71:a1:a0:4e:5f:90:4b:d9:ec:87:11:e4:c9:5e:
5a:88:47:63:1f:14:2e:ec:5d:c4:2b:4c:1c:48:66:5f:b9:3d:
6f:d7:8a:78:ab:73:f8:48:5f:67:07:83:f2:78:a8:52:48:73:
6f:b8:ba:67:b8:16:e4:3c:37:c2:54:e2:fa:88:f7:e9:b9:d4:
ae:50:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:34 2026 by rpki-client