
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer
File: bc3aa731-9547-4b21-8f65-60f3717ca369.cer (raw, json)
Hash identifier: mcBbNmF43t057qLoaV8jMv4A+jFcKPK7pCc8jcMwkfw=
Subject key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E7362A0CE3A85A66211538F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Jul 2026 08:45:12 +0000
Certificate not after: Thu 12 Oct 2028 08:45:12 +0000
Subordinate resources: IP: 23.182.136.0/24
IP: 2602:f89b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:73:62:a0:ce:3a:85:a6:62:11:53:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 10 08:45:12 2026 GMT
Not After : Oct 12 08:45:12 2028 GMT
Subject: CN=bc3aa731-9547-4b21-8f65-60f3717ca369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:dd:73:73:31:43:6b:9d:24:30:11:e0:cf:
d4:25:da:70:2b:6c:04:10:7b:e7:ac:d3:da:bb:92:
60:50:cc:c5:2f:6d:7e:38:d1:8f:69:84:2c:bb:c1:
f5:3b:d1:70:87:1e:9a:f2:64:fd:27:2f:56:af:92:
97:38:b3:1c:36:2f:69:1e:c1:8c:b2:1e:a7:2d:a3:
93:15:75:75:0d:11:ba:e0:74:96:58:08:43:7d:fe:
a0:e6:7d:c2:1b:cd:1b:c3:87:80:11:d2:6d:c6:15:
d8:48:e6:c0:e4:b1:bb:3f:1a:e5:70:d1:10:63:61:
f2:97:27:a4:77:0c:c2:bb:aa:64:f2:8a:f3:a1:4d:
f3:7d:a5:53:5d:ba:fc:05:d8:00:46:9e:9e:ed:06:
2d:5e:23:58:89:1c:9d:e9:11:c8:9e:30:96:da:22:
91:47:f8:e0:3b:f1:bf:cf:ec:0a:ab:4f:a6:81:c1:
c4:ad:1e:9d:69:28:d7:59:b9:45:5f:54:ea:69:f3:
4d:6e:83:40:5f:59:63:b4:09:e1:36:e6:99:2b:2b:
6d:8a:e8:39:21:d3:ca:97:24:bf:ba:97:b0:ec:78:
0c:dc:2f:72:17:ea:d4:76:60:40:f1:a6:9b:5c:80:
3d:dd:90:b2:8f:a9:11:01:67:b2:b2:94:f4:43:b7:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.182.136.0/24
IPv6:
2602:f89b::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c3:9c:af:94:c3:4c:38:55:3c:eb:8b:6c:dd:fb:65:6e:e5:
84:38:78:94:cc:62:0e:5b:f0:cf:64:6e:90:a2:5b:69:f4:d1:
d8:36:5e:e7:68:61:d1:18:b9:2a:66:e6:c3:f2:40:01:5b:98:
59:47:46:5b:6b:41:25:bc:e8:96:9c:a7:43:9e:08:9a:41:50:
da:9b:c7:e8:0b:ed:48:20:0d:b6:ba:c0:51:c3:b9:f2:39:e9:
5f:10:4d:1e:7b:a1:7a:ee:41:71:1c:37:1c:c9:5d:7d:ef:6c:
f0:83:49:d2:f2:4b:56:d1:4d:19:5b:a9:1b:a4:50:99:7a:74:
46:aa:4a:bd:cf:41:85:e2:50:f7:6a:43:fc:ad:f8:66:e9:47:
36:87:9d:1a:38:b2:73:44:5b:5e:9a:dd:e2:94:cb:6b:d9:38:
78:fc:9a:d4:b6:0d:f2:2f:be:22:ad:cd:65:32:c8:67:0c:98:
f7:4e:2f:5e:19:19:b3:3d:04:61:c2:96:50:f4:8e:91:44:2b:
58:83:69:99:8f:7e:d4:a1:bc:2d:68:d7:6a:96:f8:a9:f5:cb:
1f:77:ae:cf:41:7e:fb:4d:e5:c4:f7:05:9e:92:60:62:04:53:
4f:89:c7:7a:d1:85:af:bc:e9:16:40:a3:6e:ac:91:95:d5:f4:
75:63:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:36 2026 by rpki-client