
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer
File: 3299f656-5665-469b-8729-13b669bb2153.cer (raw, json)
Hash identifier: Dae+IhG7rWJ1HQY6prcc0A2lETj0kDF28vF6NrA8ghY=
Subject key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E3FBCF8B1F2909C39CB6179C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 21 Jun 2026 20:45:11 +0000
Certificate not after: Sat 23 Sep 2028 20:45:11 +0000
Subordinate resources: AS: 23294
IP: 2620:0:1a70::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3f:bc:f8:b1:f2:90:9c:39:cb:61:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 21 20:45:11 2026 GMT
Not After : Sep 23 20:45:11 2028 GMT
Subject: CN=3299f656-5665-469b-8729-13b669bb2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:42:cb:91:1f:27:b0:1e:cc:db:4f:cb:bc:
b0:c6:ac:7c:34:eb:b5:17:3a:29:7b:96:6d:a1:63:
78:32:ab:a8:a9:b6:54:47:68:41:de:85:4a:4a:1b:
80:24:70:30:78:90:07:d2:86:d8:eb:c5:96:77:34:
7e:d7:e4:23:b8:5c:3a:29:7a:ce:6c:aa:6e:94:16:
2e:eb:fb:ae:9a:4c:96:56:99:91:b4:f6:78:f1:d0:
9a:d3:b2:fe:54:4f:cb:2d:22:6c:94:17:5d:21:88:
95:c1:0e:76:f9:b8:2e:ae:23:59:83:f8:fc:4e:0f:
e8:ff:cf:b0:d9:28:79:8a:19:96:37:ca:47:2d:de:
81:f2:9b:47:a4:17:7f:8a:e8:24:1a:27:7b:ce:38:
14:5d:61:14:af:72:00:f2:e6:5f:f1:d8:e4:b1:6f:
01:9f:1c:b7:38:bc:d9:dd:65:40:ad:1b:de:65:29:
ce:60:8b:38:b0:f2:76:dc:37:15:7a:92:97:af:0b:
30:cf:77:c2:1d:df:73:b9:a1:bf:a5:02:8c:a8:6f:
84:23:55:47:4d:b3:22:ea:f7:1a:be:5d:19:99:24:
41:67:6d:1c:e4:19:21:74:0a:c5:e3:e4:f4:39:65:
3b:74:57:e6:72:91:f5:3b:d3:9b:01:3f:21:c1:dc:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:1a70::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23294
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:96:a3:02:36:91:48:c4:3e:8b:aa:1b:9d:d5:a3:1e:f0:cd:
c0:89:92:5a:1f:91:28:b0:c4:87:4b:84:1a:11:36:82:c4:b1:
20:11:dc:5e:54:eb:c3:b5:e5:01:62:04:5a:00:6b:ee:45:4d:
a4:51:09:ed:94:79:58:04:d2:d0:64:6f:77:24:03:ac:f2:c1:
91:d2:ed:97:db:2c:e4:4d:28:bd:83:fc:e3:bc:81:4c:6f:7a:
e3:46:de:51:e0:ee:73:44:61:fe:0c:3c:5b:bf:25:c6:24:bd:
ac:24:08:3d:be:65:4d:8b:be:50:ae:ae:23:e1:0d:72:b3:66:
f5:0d:b6:63:16:94:84:a2:79:cc:ee:80:c5:cd:66:3e:f8:06:
03:e1:8e:a3:11:7d:2b:54:32:a7:3c:11:ce:61:26:4b:83:1f:
7f:86:52:e5:af:94:a0:16:5e:d9:bf:1b:37:6d:18:63:1f:84:
e0:70:6d:f2:78:f2:ac:50:9e:b1:4e:38:70:98:fb:02:09:5a:
7e:ea:e3:2d:51:6c:0c:9a:dc:6a:81:e4:82:eb:70:49:31:74:
7e:f4:9f:8b:0e:6b:79:a3:3c:dd:49:db:e5:94:14:d9:45:81:
03:2d:9a:87:50:b6:8f:e6:2e:f4:eb:ce:eb:e0:c3:af:ff:52:
6e:ec:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:48 2026 by rpki-client