
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605.cer
File: f9d82c71-366a-467f-9b6c-3667d1ae7605.cer (raw, json)
Hash identifier: YJ2ua6uaZ9jMvJTrXBVqQ7fRLVkaKXSck8NiVOt3AB8=
Subject key identifier: 8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584E2D97865CF365506CF9468140
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 15 Jun 2026 08:45:11 +0000
Certificate not after: Sun 17 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 32083
IP: 66.158.192.0/18
IP: 173.46.160.0/19
IP: 208.111.0.0/19
IP: 2604:b8c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:97:86:5c:f3:65:50:6c:f9:46:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Jun 15 08:45:11 2026 GMT
Not After : Sep 17 08:45:11 2028 GMT
Subject: CN=f9d82c71-366a-467f-9b6c-3667d1ae7605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:6f:63:83:73:70:33:73:ad:ab:4c:ea:a3:
a7:ae:3e:50:f0:40:44:ff:dd:1c:95:6d:3b:5c:42:
a2:19:18:74:5a:e1:f6:6e:42:03:9d:d9:53:93:f0:
c7:44:bf:16:d0:5b:1d:8c:b9:87:91:75:f0:25:2e:
cb:8b:1d:41:7c:f1:46:c0:44:4f:a1:b7:b3:1b:67:
93:04:29:30:27:7c:83:5b:c0:46:1a:a0:d9:99:3f:
84:a2:19:89:ba:19:24:9c:b3:a7:e3:15:0c:a1:6f:
4b:17:49:86:1c:3c:4a:bd:76:15:1c:97:f3:1d:97:
51:96:83:62:a2:ef:15:22:b3:55:7e:62:0c:2b:e7:
0c:7a:0e:05:e4:3e:c1:54:54:ab:11:71:99:ba:3d:
b9:e3:65:03:2c:b0:b2:9c:85:73:ed:0e:5f:c9:07:
29:9a:ba:8a:5b:74:28:54:01:8b:27:07:ed:c3:ad:
1d:54:4e:07:dc:fe:15:aa:fc:d0:92:ef:97:70:9f:
3d:ae:cc:2d:8e:a3:fd:be:48:0e:6b:ec:56:6d:20:
ff:f5:c8:0d:31:ad:5f:cd:e7:84:27:5b:20:22:86:
cd:1d:b4:df:8c:b6:c5:9f:81:98:bf:0a:52:4f:84:
78:bb:a8:34:94:2c:4b:e1:8a:cf:55:bb:7b:06:55:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:AB:9E:B6:76:28:B8:31:1E:EA:07:D3:3C:77:D9:A5:01:F7:7A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9d82c71-366a-467f-9b6c-3667d1ae7605/f9d82c71-366a-467f-9b6c-3667d1ae7605.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.192.0/18
173.46.160.0/19
208.111.0.0/19
IPv6:
2604:b8c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32083
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:96:a6:d7:bd:15:f7:5e:d6:4e:26:5a:69:5a:2f:c8:31:ed:
ea:b9:3f:98:65:7c:d0:08:4d:d2:f4:5d:c4:19:f3:7d:ae:f1:
71:20:75:c1:8f:3d:05:71:ad:8a:01:d0:db:cd:af:ad:ca:2a:
bb:2a:5d:a7:e4:0d:77:af:8e:85:86:da:49:b2:25:3e:a5:95:
e8:98:2f:68:26:a7:d6:6d:be:48:16:75:17:f2:25:b8:99:d6:
d9:fb:f5:b1:69:7c:52:06:3f:51:25:09:8b:15:42:07:17:5f:
f1:79:92:c3:22:19:fc:33:9f:41:67:98:f1:a8:ff:6f:ac:02:
5b:78:5e:74:c2:a7:a7:eb:0b:e8:1f:9a:2e:41:6d:db:ca:2e:
27:a2:27:c3:a9:e7:2d:5b:df:b0:9c:da:1e:a9:ff:7c:00:42:
ea:82:21:aa:a2:af:a8:7c:fa:34:c8:7e:1c:63:e6:f9:ef:4e:
04:f3:e2:97:d0:29:6b:e7:6a:47:b2:21:24:9a:76:14:07:45:
5b:56:40:73:aa:19:f9:e5:fc:7f:e8:13:4a:ab:c4:c5:be:59:
73:dc:97:da:3e:d2:0b:3c:e4:8b:8b:00:3e:29:fe:f1:a5:ae:
a2:dd:20:c9:a8:90:ee:d7:76:c5:48:97:01:3c:0d:6b:27:8a:
25:50:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:10 2026 by rpki-client