
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
File: 9305060e-d479-4a8f-8eba-23b31106c750.cer (raw, json)
Hash identifier: F1SNu0oqqULhdWidhiwS7PHSjL8y1/pmiVvbf9HTwTw=
Subject key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D1B125674BFB7C14ADCF43380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Mar 2026 00:45:21 +0000
Certificate not after: Sun 11 Jun 2028 00:45:21 +0000
Subordinate resources: AS: 30596
IP: 2601:1900::/28
IP: 2620:12c:8000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:12:56:74:bf:b7:c1:4a:dc:f4:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 9 00:45:21 2026 GMT
Not After : Jun 11 00:45:21 2028 GMT
Subject: CN=9305060e-d479-4a8f-8eba-23b31106c750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:82:c2:aa:4e:12:dd:f1:39:66:ea:22:29:
87:bd:8d:dd:ff:ce:c0:18:86:e6:42:5c:65:ee:2f:
0b:d6:e4:8b:15:81:d7:94:37:ef:80:a4:a1:58:e7:
96:04:67:28:b3:3b:77:8c:65:48:7c:85:06:01:28:
11:d9:69:a3:74:3c:64:b4:f2:7b:45:a0:be:bb:ec:
19:ef:93:84:d9:2d:85:3f:99:74:e9:22:29:54:73:
ae:ce:38:a3:72:4e:f2:ce:b6:a6:58:6d:49:f3:c6:
57:c5:45:6f:51:eb:0d:bd:9f:33:0f:ae:21:d2:97:
76:97:0e:f8:42:03:c4:a2:62:ad:50:4f:a1:85:24:
bb:b4:17:e9:9e:e1:ad:c7:26:99:d9:66:7b:cb:61:
3a:c8:d8:d3:12:5d:3d:5e:85:ad:01:a7:bb:94:c6:
03:11:42:de:4f:20:2e:01:9d:93:29:2f:b0:8c:8e:
0b:5b:16:df:a2:e1:a7:93:7a:11:2f:82:8a:b7:b2:
cf:3d:ab:ae:d5:c9:21:ca:2a:02:3d:8e:f5:dc:d3:
17:a4:3c:8e:24:0e:fa:a9:e3:09:b7:87:2c:55:aa:
e0:7c:0f:9f:5b:b3:27:0d:db:de:fb:ea:00:3d:0d:
87:09:b2:7d:1c:93:40:d2:9c:5d:ac:4f:2c:e7:50:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:1900::/28
2620:12c:8000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30596
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:0b:e9:5f:d4:44:00:cd:ac:94:5c:fd:7e:26:9b:07:44:f7:
19:ea:9b:4a:5e:dc:a6:e8:ef:07:84:1f:30:73:30:26:6f:94:
7a:1e:bb:55:a9:4d:01:39:e0:f7:f7:b7:9b:10:7d:6a:fc:b5:
2c:cf:74:c1:6d:60:5f:21:be:5e:fa:ca:1c:26:1f:ec:58:9c:
81:11:a4:ef:a4:a0:74:f0:7d:8b:fb:56:92:28:cf:fb:c3:ff:
ea:5d:db:92:a7:01:67:b8:b8:25:e5:51:fd:6a:50:29:a6:af:
32:04:19:16:93:39:4c:2d:ca:6b:dc:5b:75:34:98:5b:7f:f3:
98:df:39:48:a4:05:93:5b:fc:3f:ce:85:26:7a:2c:26:5f:b2:
c9:34:bd:68:af:2d:0f:0a:ea:de:72:ae:cb:9c:cd:08:6b:ec:
a9:60:8c:0d:35:8f:7c:e0:7b:c9:ca:5a:05:ba:3e:bd:77:6d:
fb:7c:0d:40:22:55:92:3e:ba:50:24:1a:b1:ef:07:ac:f0:e9:
f8:59:25:1f:55:10:e2:8b:b7:9c:f9:ae:53:04:2b:49:b2:7f:
db:90:aa:b3:b0:05:a3:56:0b:b4:ca:48:d5:32:cd:c2:5c:30:
4a:b4:d0:85:55:76:4c:dc:db:73:0e:6d:db:fc:4b:fb:70:b1:
e9:5b:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:29 2026 by rpki-client