
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.cer
File: cc9578b8-1ce4-4d31-9753-bc111a3af6b9.cer (raw, json)
Hash identifier: t+mIb+MO4V6UkEiaF0bPti0Pzj/EMyKEidSnNUoE1eY=
Subject key identifier: 18:DF:81:00:EC:73:7C:BD:5F:8B:75:AE:13:EA:2D:E5:6B:BA:AF:B7
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584DCEF83D719D8207A5B940C9C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 12 May 2026 11:18:16 +0000
Certificate not after: Sun 14 May 2028 22:11:08 +0000
Subordinate resources: AS: 402196
AS: 402504
IP: 2602:f460::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ce:f8:3d:71:9d:82:07:a5:b9:40:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: May 12 11:18:16 2026 GMT
Not After : May 14 22:11:08 2028 GMT
Subject: CN=cc9578b8-1ce4-4d31-9753-bc111a3af6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:9d:fe:c6:c4:2b:cf:d8:0e:a7:67:78:c8:
42:68:57:63:79:f1:84:9d:10:12:6c:e8:3b:ed:5c:
f7:e6:25:6a:20:17:dc:56:88:d2:6c:da:51:7c:6e:
e9:6e:3a:dc:77:7a:c1:da:61:b4:c4:c9:06:3d:8a:
09:64:fa:df:5b:c0:e7:c7:dc:fa:29:c4:c2:f6:f0:
37:c9:50:36:83:74:b8:47:d8:1a:d5:79:0f:77:c0:
f3:8b:78:67:be:39:07:cf:ed:75:59:a5:29:30:fb:
1e:9c:2b:93:eb:3c:da:57:6e:49:4f:e2:c4:e1:4e:
23:c0:a3:5a:95:8c:4a:3c:f5:fb:ec:e2:24:b6:f3:
87:5b:bd:db:34:f9:14:70:bf:c4:09:0e:a3:7a:10:
a9:1d:ca:47:49:55:3f:a3:a6:51:97:81:41:ba:41:
77:92:81:55:18:62:88:99:bf:e6:3b:6d:61:ef:79:
31:34:e5:38:75:4a:aa:11:30:95:c4:7c:c0:90:04:
26:cb:e6:34:7c:ac:9b:99:b1:8a:42:5a:5c:c4:ad:
e1:a7:06:9f:ae:39:ba:d0:5e:86:ca:a4:9e:99:8a:
b5:0d:2e:6c:2b:f7:8b:fc:89:2b:20:0e:fc:e5:76:
e0:4b:25:74:b0:38:a3:9e:5e:b0:0b:cd:48:02:6c:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DF:81:00:EC:73:7C:BD:5F:8B:75:AE:13:EA:2D:E5:6B:BA:AF:B7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cc9578b8-1ce4-4d31-9753-bc111a3af6b9/cc9578b8-1ce4-4d31-9753-bc111a3af6b9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f460::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402196
402504
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:26:e9:f3:de:66:01:56:0a:24:e8:a9:7b:7b:c7:35:de:70:
09:ea:3e:07:64:86:39:40:ef:2d:93:28:69:63:5c:80:3f:1c:
96:a1:80:1d:34:e2:a2:80:ec:bc:40:16:2c:1b:5e:c2:70:c7:
fb:05:da:e5:3c:58:dc:d2:4a:52:6b:dc:62:58:aa:50:65:63:
73:97:71:c0:5e:45:69:5c:4a:ab:49:9d:e6:6a:60:cd:85:c5:
90:24:b0:1b:63:1d:2d:d6:11:fe:56:f4:9d:db:d2:96:93:e2:
44:74:3e:bf:a1:d4:0a:45:e4:bc:4d:12:74:26:99:3d:22:eb:
ad:93:2b:15:16:0f:f7:39:fb:7c:a7:a4:f7:4d:36:a6:c7:aa:
87:0a:5d:b1:74:a4:6d:54:7d:5a:49:ca:63:77:8c:e4:d4:5e:
a4:4b:af:ae:67:23:cd:a8:48:e6:94:48:47:ce:e3:f5:1a:70:
e0:00:b2:ad:4e:33:ab:c4:2b:fa:97:a7:ee:1a:02:30:85:2e:
3c:da:d1:f0:bc:ed:bb:9f:46:ca:86:0e:7f:85:fb:cb:17:ca:
b5:0c:16:3d:25:8a:e4:72:4f:a2:6d:c0:1f:d7:57:86:67:b7:
06:e9:11:6c:e0:ed:cc:47:62:c4:45:82:9b:0a:9b:ec:6c:43:
97:fc:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:52 2026 by rpki-client