
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer
File: a987c446-5fc2-44b0-9a41-65296d90d0c2.cer (raw, json)
Hash identifier: 7in9Oco3fUvOydCoNs+eOnHOEy2SqYWo3ngaxigVOOg=
Subject key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E6B0290BE39FA9D22CC528540
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Jul 2026 08:45:10 +0000
Certificate not after: Mon 09 Oct 2028 08:45:10 +0000
Subordinate resources: AS: 393373
IP: 23.136.180.0/24
IP: 2602:f69c::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:02:90:be:39:fa:9d:22:cc:52:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 7 08:45:10 2026 GMT
Not After : Oct 9 08:45:10 2028 GMT
Subject: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:88:35:fa:19:ec:0e:ae:d4:ab:67:6f:99:
ec:a6:4d:9f:f5:4d:e6:97:58:cb:b0:84:3e:3a:ea:
a5:80:8b:46:46:e2:64:9b:e1:b8:17:65:ab:3b:95:
2b:fb:32:67:54:f8:cb:78:47:0d:24:0e:34:88:fc:
28:ef:2c:3e:0a:0b:37:07:ef:5a:43:e0:78:f9:73:
b0:74:a1:e4:8f:13:06:68:cf:72:67:f8:63:c5:8e:
de:5d:19:99:ad:72:e8:46:fd:e0:21:d7:f9:fe:40:
df:49:f7:6c:8c:39:f0:f3:bc:d8:1a:d4:49:5f:e9:
92:23:d3:1c:9d:91:7c:48:30:80:0d:88:33:92:65:
23:d6:5b:ed:c8:19:b1:d8:4b:9b:b6:ad:34:f2:ab:
a0:29:c1:d5:d2:47:d5:ef:e6:83:3e:f2:10:82:96:
47:ac:61:f1:15:f6:e7:8a:9a:ea:17:23:69:0f:ab:
ff:92:8b:59:8f:46:8e:57:aa:9f:70:8b:91:c3:16:
18:3f:cf:d5:80:c7:1d:14:05:b6:89:b4:8a:dc:9d:
4f:e2:b4:b7:c7:f2:7e:b9:ba:29:c2:ff:90:ab:15:
07:8f:94:1b:e9:bd:92:55:25:56:a6:93:c3:b9:ad:
47:42:c7:ba:23:56:1c:f7:6e:80:4b:97:41:da:bd:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.180.0/24
IPv6:
2602:f69c::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393373
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:73:11:67:e9:b3:34:17:de:bd:f3:60:23:34:0e:c6:31:eb:
1b:f4:0d:e3:37:4c:4c:31:c3:a2:66:35:60:26:59:88:f0:15:
6d:e8:b6:62:d4:66:7a:94:a9:38:45:2b:9e:1f:23:1f:b3:0d:
1c:aa:6c:c7:42:8d:98:ab:6d:e5:ce:4b:8a:a1:3f:91:70:c0:
56:cc:4f:1c:cc:2f:b4:e3:1b:ab:93:eb:f1:c3:60:bd:66:a6:
42:61:ef:53:39:c9:91:07:d6:7b:5b:9c:9c:55:47:15:72:67:
cd:af:34:8e:b0:18:90:43:1f:a0:91:f4:de:2f:0c:1f:95:a0:
fd:c4:36:f3:cf:d0:ff:bd:f3:bf:6c:ac:34:86:4a:bd:11:9b:
37:3f:9a:78:10:3d:21:c6:c9:5a:f7:ce:35:b8:34:06:48:e2:
fc:ae:d1:23:50:3e:3f:52:ae:cd:d7:f7:17:60:55:16:4e:b5:
bc:04:10:83:77:11:a4:fe:ba:25:91:9e:c8:6f:b5:59:5f:50:
92:2e:67:1b:a9:0f:24:0f:e8:87:56:87:a4:f8:46:b1:50:15:
0b:b0:0b:87:ba:5a:e1:b3:b7:58:d9:c1:2c:a6:9e:ef:b0:b4:
c2:47:a6:9e:f9:e4:47:d1:c8:53:12:fa:33:a3:37:9b:51:55:
68:46:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:56 2026 by rpki-client