
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e8dcf36d-6518-419e-8260-9c30221c0381.cer
File: e8dcf36d-6518-419e-8260-9c30221c0381.cer (raw, json)
Hash identifier: H++ot2SarI8Rd8qdAbkp/ocgsLbAZ7bLzevLWfdANx4=
Subject key identifier: BC:0D:25:59:2A:B1:77:83:6C:ED:78:2D:3C:E3:F0:97:47:D9:4E:9A
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E71FD47E349B15CE5ECA5D780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e8dcf36d-6518-419e-8260-9c30221c0381/e8dcf36d-6518-419e-8260-9c30221c0381.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e8dcf36d-6518-419e-8260-9c30221c0381/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 09 Jul 2026 20:45:11 +0000
Certificate not after: Wed 11 Oct 2028 20:45:11 +0000
Subordinate resources: IP: 23.181.40.0/24
IP: 2602:f8b9::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:71:fd:47:e3:49:b1:5c:e5:ec:a5:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 9 20:45:11 2026 GMT
Not After : Oct 11 20:45:11 2028 GMT
Subject: CN=e8dcf36d-6518-419e-8260-9c30221c0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:f8:1b:54:b2:09:54:20:02:56:be:cd:64:
2a:7c:65:75:9a:51:4b:34:ba:76:20:ab:d2:ab:01:
96:dc:c1:fc:ec:24:f5:8c:13:2e:d0:1e:ee:8a:a5:
a5:78:a6:d6:5b:a5:76:36:c7:b8:b6:37:9b:8a:91:
4f:0e:26:56:d7:94:09:8e:60:8e:24:ef:19:0f:f3:
76:c8:1e:a2:8c:b0:31:72:0f:26:cd:c9:54:11:af:
23:8d:5a:32:40:9d:81:6d:a5:4e:c3:42:61:bd:86:
86:1d:11:05:94:b4:43:45:ad:99:5d:5d:d2:98:62:
b4:d3:c6:dd:bf:dc:03:62:83:ac:c1:9e:ee:29:13:
2f:e1:b7:59:c2:08:64:5d:77:a7:a2:71:3b:32:bd:
76:a8:7b:f3:b7:cd:45:7a:eb:a1:51:4d:8e:bc:4d:
66:b0:e3:bf:3e:82:08:01:8d:4c:cd:74:b7:3e:bb:
c5:40:7a:64:37:75:80:fe:81:6a:89:e3:ac:51:01:
50:51:13:71:7d:6f:8b:f5:3c:e7:3e:01:d3:d3:f8:
56:10:fe:ba:0f:6a:07:12:29:22:0b:2d:dc:9f:6e:
39:ae:92:4d:9e:4c:8f:8b:31:98:db:f8:b3:dd:32:
67:e0:b6:68:07:c1:e8:08:94:4f:8c:ab:3b:e5:c9:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0D:25:59:2A:B1:77:83:6C:ED:78:2D:3C:E3:F0:97:47:D9:4E:9A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e8dcf36d-6518-419e-8260-9c30221c0381/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e8dcf36d-6518-419e-8260-9c30221c0381/e8dcf36d-6518-419e-8260-9c30221c0381.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.40.0/24
IPv6:
2602:f8b9::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:42:53:99:2d:50:5f:4e:4e:b9:55:ae:f7:77:29:8e:59:e9:
08:ca:4d:ac:ab:b7:9c:d7:21:3b:f9:37:5a:d4:d4:8f:e4:8e:
5c:49:bb:0f:f2:7b:4b:57:04:77:a7:59:e5:a6:e5:c2:95:b5:
7b:f2:96:e8:ae:6d:02:a3:00:61:4f:ca:28:e9:02:00:94:e6:
54:7a:b4:d3:d6:51:63:aa:b6:ac:d1:0a:0c:2e:40:b7:18:2d:
c8:17:79:07:9f:13:a9:29:c9:e3:3b:07:87:9c:99:b9:2b:3d:
7f:12:bc:cd:e4:8c:81:0e:0a:ad:65:07:25:5b:4a:76:9d:dc:
8b:8d:78:63:f5:6b:97:0a:80:97:7a:81:5b:b3:07:cd:55:14:
0d:58:da:2f:fd:7f:b2:7a:8a:3e:b6:1f:8f:5d:87:82:22:fb:
1c:60:32:46:0c:26:2e:5d:e1:69:26:a7:1e:a5:5d:d6:23:ea:
aa:43:96:5b:5c:ad:df:ff:2d:48:7f:92:48:71:93:e0:0d:18:
9b:7c:34:81:f5:59:85:a2:d4:94:fc:00:8b:ef:4d:97:8e:34:
0a:0a:87:12:61:d5:c2:51:81:f6:f5:35:1d:8a:14:28:7d:74:
20:20:6c:39:d7:e7:4e:a5:bd:dd:2c:8a:98:11:f5:bc:5e:97:
81:7b:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:07 2026 by rpki-client