
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
File: 9e246efa-84c5-416a-bc6c-a7163432845f.cer (raw, json)
Hash identifier: AnbVFmQ/s/YwHkDly6AKJd7fq444qWCiqHOpVeWWcbU=
Subject key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584DADA3389BEA3CCCC553E4B6E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 30 Apr 2026 12:45:17 +0000
Certificate not after: Wed 02 Aug 2028 12:45:17 +0000
Subordinate resources: IP: 64.93.92.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:a3:38:9b:ea:3c:cc:c5:53:e4:b6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Apr 30 12:45:17 2026 GMT
Not After : Aug 2 12:45:17 2028 GMT
Subject: CN=9e246efa-84c5-416a-bc6c-a7163432845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:66:b8:9b:4f:08:bb:5e:9d:0a:30:35:a4:
56:fd:ed:00:3e:53:f8:5a:87:6f:de:a6:2c:67:06:
cd:56:af:78:a3:62:03:8c:24:04:57:6e:e6:65:01:
14:47:14:28:9d:39:92:93:71:c5:53:b5:11:ca:f9:
a9:0d:aa:8c:fe:34:8d:f0:60:13:77:5c:24:ba:12:
d4:20:86:51:7c:2f:56:84:2b:c9:81:fc:0f:12:76:
f4:d5:21:95:1c:3c:85:f2:d5:b2:77:21:b0:c3:e9:
70:4c:57:f2:86:29:9d:f4:d1:2b:d2:95:6a:4e:58:
80:8a:a5:0f:06:4c:c2:fb:f3:35:90:e4:a3:64:bb:
8f:d7:1a:f1:6e:45:b0:29:34:4f:7d:8b:9a:64:b5:
3f:81:84:b0:9e:c1:ab:11:28:31:ca:0f:07:b9:ac:
05:f5:42:c0:c2:0a:12:18:23:38:78:4c:52:ad:87:
43:2d:7c:d0:32:23:15:54:18:a6:1b:53:12:0c:96:
48:5f:a9:0a:84:cc:ef:9a:b8:58:44:0b:14:54:96:
36:cb:d7:fa:74:57:5e:c6:a2:4b:0a:a4:e8:f4:cc:
d7:c7:56:65:be:1e:13:eb:cd:db:d2:2e:a7:d4:e4:
07:23:89:7a:ed:5b:93:24:3d:50:bd:e1:73:5d:55:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.93.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:82:47:fb:6e:67:76:7d:8f:1c:91:5d:3b:1b:c9:8f:96:af:
7d:5a:85:ea:db:96:10:9b:48:90:8e:8f:0f:1c:a0:8c:60:32:
82:82:66:b3:d3:bd:92:aa:c1:6d:d0:77:dc:57:b2:4f:38:0e:
57:7b:d4:c3:3a:87:66:6d:ec:04:98:5e:3b:d2:bc:45:da:5d:
9e:50:05:55:c1:a1:a0:23:86:97:60:83:ce:63:75:1c:43:6b:
ec:b6:e8:c3:11:ad:ae:73:cc:bb:43:86:2f:9e:45:d3:6d:de:
44:a5:85:1f:56:e2:43:4f:f3:96:aa:a8:db:7d:ce:a1:f5:d2:
b8:22:0f:38:3b:7e:ca:03:d8:ef:f8:85:a5:41:a2:59:c6:5e:
b2:db:f7:f1:ad:a3:36:cd:10:ff:f3:81:97:50:ea:0f:5f:de:
c6:ea:2f:fb:32:4a:b2:59:ef:f5:aa:c3:8c:c5:d6:7e:36:a8:
48:68:36:75:d8:49:a7:99:0a:74:c9:5d:43:ad:f6:7c:96:2e:
69:89:5b:8c:e4:f8:b7:95:1e:84:16:eb:7e:bc:5b:20:a6:d1:
4d:9f:f3:20:56:b6:c5:4c:fc:93:d5:0f:64:af:30:d3:11:ce:
17:79:25:41:f7:53:74:8a:08:6e:28:6c:05:93:cc:6d:bf:a0:
16:62:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:43 2026 by rpki-client