
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
File: b673aad8-2248-407c-90e8-0781473d6616.cer (raw, json)
Hash identifier: sLGp5Xz3vzYfx9kmrECX+H83DUpG+YKunodyPubTVUs=
Subject key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E96482DD885BFDB50DCA53D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 22 Jul 2026 20:45:12 +0000
Certificate not after: Tue 24 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 19922
AS: 401676
IP: 23.138.4.0/24
IP: 2602:f676::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:96:48:2d:d8:85:bf:db:50:dc:a5:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 22 20:45:12 2026 GMT
Not After : Oct 24 20:45:12 2028 GMT
Subject: CN=b673aad8-2248-407c-90e8-0781473d6616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:0d:d0:dd:c4:6d:19:de:32:cd:38:89:4d:
24:da:10:71:fc:f7:f5:4a:67:bd:11:03:0b:9e:7a:
87:8e:c1:4e:c8:eb:d4:67:85:c0:8a:15:dd:7f:89:
8c:44:d5:cf:53:a9:c7:72:56:bc:c2:4d:25:52:a6:
7e:99:1c:a0:ff:7b:1b:2d:10:00:21:77:b1:e7:59:
30:3f:a1:42:1b:61:af:41:c0:e3:a5:f8:2f:1a:1c:
b0:c9:40:a5:59:97:76:f0:e9:06:72:5b:40:c8:3a:
d8:ee:36:5e:82:4e:6d:5d:38:63:30:39:84:59:97:
0f:6b:5b:c0:2e:0b:be:7f:80:14:29:7d:7c:d9:fe:
29:53:a6:d7:cd:e8:05:29:17:97:5c:e8:a9:66:23:
fc:0a:1e:a6:44:be:3f:69:da:bc:7a:94:3c:4a:e6:
e3:20:66:17:b4:50:32:b0:1a:94:40:c8:4a:0d:07:
d0:86:2c:b3:5c:c0:b5:91:a5:70:97:29:76:1b:ae:
d3:64:df:8a:d5:4b:19:f1:2d:1b:6c:2c:d4:88:44:
3f:42:80:fe:78:e2:d5:8a:17:05:2c:a3:07:54:cc:
b4:08:78:3f:62:67:c9:6e:32:cb:ac:bd:fc:ea:3b:
ec:96:0b:1e:10:df:6f:7d:1c:37:fa:67:64:1d:37:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.4.0/24
IPv6:
2602:f676::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19922
401676
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:53:f8:3b:41:4f:20:5a:13:b2:fb:62:c6:7d:73:ac:0b:70:
55:7d:73:fd:ba:cd:f4:7e:20:f7:b5:27:d4:1e:4f:91:84:02:
41:52:43:33:90:22:c2:62:96:04:b8:45:ba:b6:f2:73:65:e7:
f9:ad:20:90:c6:a1:a9:c3:4e:d4:86:d8:b1:3e:02:4e:71:f9:
90:65:9a:55:77:71:dc:ca:ce:97:3b:96:16:f2:0f:d4:c0:6d:
24:ab:75:a6:28:31:b3:bb:69:bc:9a:9f:9d:a8:03:68:42:a0:
f4:99:93:40:84:9a:99:6f:75:f5:cb:55:d4:13:07:11:b4:0a:
26:cb:18:0a:20:75:5b:44:81:20:d9:09:cb:e8:d1:06:ac:e4:
e7:03:17:a5:d7:38:c7:fb:ff:de:51:64:cb:77:33:b0:25:67:
87:fc:49:4b:be:b2:6a:88:f7:9d:1c:a0:24:e9:92:8c:8b:d8:
e3:e8:8f:b2:ac:a8:67:c3:db:46:1a:1b:13:cb:fa:85:30:73:
da:7f:50:78:8a:66:7c:a5:b3:2d:e0:b0:70:2b:d4:61:02:78:
74:f2:3e:d8:85:24:98:dd:82:fa:ee:a9:be:f4:97:c1:e9:08:
44:36:4a:07:89:bf:21:09:a0:66:3c:1b:87:9a:01:fd:35:16:
f6:06:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:46 2026 by rpki-client