
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
File: a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer (raw, json)
Hash identifier: qJlgzWxy8R+3RI7XfvxSarNrk9ousGiqsY3C5IvHJqg=
Subject key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D895855F8B55CFE1C4ABD8180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Apr 2026 12:45:18 +0000
Certificate not after: Thu 20 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 33108
IP: 149.112.96.0/22
IP: 206.81.80.0/22
IP: 2001:504:16::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:58:55:f8:b5:5c:fe:1c:4a:bd:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Apr 17 12:45:18 2026 GMT
Not After : Jul 20 12:45:18 2028 GMT
Subject: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:eb:2c:43:b5:9e:e5:61:f8:a7:9e:e7:11:
74:b0:d7:ba:ed:8c:c6:8c:1f:0e:cd:14:b5:4b:0f:
6a:a5:eb:89:47:32:d4:47:36:7d:34:d9:c8:ad:f2:
8d:86:b2:c8:a3:b2:9b:35:a9:7b:0f:66:a5:03:bd:
2e:b3:b1:95:f1:39:2a:1f:2b:71:85:4e:f9:e5:91:
f1:23:20:d4:1c:00:5b:ba:22:b8:22:b1:4d:3e:63:
8a:e6:5c:ea:68:1b:ea:ac:ac:09:92:63:85:93:3c:
12:46:8c:f9:cd:34:0e:b1:d6:76:51:08:d0:a2:f4:
b4:dc:16:0b:08:24:a7:99:41:5c:a6:85:98:8c:3f:
1b:3c:58:f6:e0:a8:9b:13:70:36:8d:7b:c4:dc:3d:
81:be:8f:ed:28:52:e9:a5:3e:0d:14:c3:e0:1e:88:
e1:54:c8:6b:49:8a:a5:64:5f:b5:b3:8a:e2:92:6f:
ee:79:5a:93:03:12:b8:3c:e8:98:f4:64:76:31:43:
ec:58:c2:b3:cb:ef:3a:2c:44:4a:bd:3e:2e:a5:ee:
36:ac:d0:0f:30:20:76:41:c4:02:7a:e8:fe:3e:94:
78:40:eb:7f:05:97:37:30:d3:54:a1:57:1c:18:b4:
20:56:b5:a8:db:f3:f3:61:9e:56:c8:bf:73:67:fd:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.96.0/22
206.81.80.0/22
IPv6:
2001:504:16::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33108
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8a:08:f9:ce:ef:7b:fc:55:7c:17:34:a4:4f:1b:dc:d3:0f:
17:e8:62:05:fa:7e:1b:63:9b:61:dd:4a:7b:5e:ad:b0:43:ca:
81:fe:d6:34:48:76:2f:24:a5:0c:4f:3b:5e:3f:5d:dd:79:b7:
35:d9:5a:1e:2c:6b:b3:51:b3:fb:b3:59:d2:6f:3c:6b:f0:75:
8e:4e:75:f6:aa:18:b2:60:33:f0:f7:4d:85:80:f4:9f:ca:29:
e1:1e:31:fd:8a:c8:54:8b:8d:37:0f:01:3e:49:b1:85:c8:58:
eb:09:2d:7e:0e:e1:a8:05:7a:d9:8c:20:7f:41:d5:8c:d5:b2:
5f:47:e5:cf:4d:45:d1:46:52:45:ac:ff:e4:79:15:b1:65:18:
5f:4f:55:3b:17:ea:fb:54:4c:23:49:28:98:d0:e6:a0:90:fa:
f8:e7:30:f6:5f:80:f0:e6:84:ed:27:3a:c1:38:10:dd:e3:fb:
8f:73:eb:da:f2:6d:b5:e1:61:2b:57:2b:a5:50:7e:30:59:06:
cb:39:71:52:60:4c:7d:7e:3a:56:04:70:d6:eb:da:77:77:3d:
71:0c:6c:6f:71:73:6d:d3:97:b0:4b:45:ea:fe:ad:7e:79:a6:
af:9f:b7:3d:e6:74:80:02:17:52:dd:21:67:1b:66:9f:57:f6:
08:09:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:51 2026 by rpki-client