
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e.cer
File: 04d439cc-e13c-43bf-a782-47c58b71fb3e.cer (raw, json)
Hash identifier: kLv66oa4+jaFk1n9i4Ef74QLa4LhFyB5/DS0Rvnf15A=
Subject key identifier: B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DC047720ABD057665E5BD6A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 07 May 2026 05:00:44 +0000
Certificate not after: Wed 09 Aug 2028 05:00:44 +0000
Subordinate resources: AS: 398567
IP: 23.162.80.0/24
IP: 2602:fd2d::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c0:47:72:0a:bd:05:76:65:e5:bd:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 7 05:00:44 2026 GMT
Not After : Aug 9 05:00:44 2028 GMT
Subject: CN=04d439cc-e13c-43bf-a782-47c58b71fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:dd:32:06:8a:da:8c:2d:1c:7c:ae:fe:fb:
41:7b:f4:9a:97:b8:ed:2b:e8:5b:ca:9f:2c:31:0d:
76:53:3d:72:c7:fe:35:fa:99:d3:23:9a:6e:4b:3e:
2a:2d:2c:4d:a6:ed:90:18:1b:31:40:ba:6e:7f:49:
a7:6d:c0:44:08:4e:64:ad:bd:3d:5a:6d:7c:02:f7:
15:2a:02:37:0f:56:9d:83:d0:60:ba:ec:99:94:c6:
12:87:49:53:02:46:d9:ce:9b:41:b3:84:93:04:2b:
c5:17:b7:68:fc:ad:c3:e8:5f:34:2e:d9:22:d5:11:
5b:29:49:92:a1:f2:c0:d2:4c:af:3a:5b:eb:77:68:
41:29:10:db:19:af:84:a0:7d:71:64:eb:98:2d:d3:
c5:fb:1c:fb:3c:e1:c1:75:66:5e:09:f9:98:d5:fd:
23:eb:0b:ca:10:1a:bd:fa:f8:a5:48:c4:90:f5:5a:
a8:c7:84:cc:42:a0:9e:24:13:ae:9c:ca:bf:ce:5e:
c8:e1:7a:85:b7:fb:3b:61:5f:7c:cf:ef:5c:6a:35:
01:52:da:c1:bd:44:44:03:a9:98:37:2e:a4:8c:d8:
f5:31:6e:54:92:e0:f4:7e:d9:02:f6:c0:e8:34:c7:
a9:f6:fb:10:ac:17:b5:24:65:05:74:eb:ad:04:94:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:50:E4:6C:95:5E:6B:09:7B:DD:74:2F:EC:1A:93:71:0A:BF:DC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04d439cc-e13c-43bf-a782-47c58b71fb3e/04d439cc-e13c-43bf-a782-47c58b71fb3e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.162.80.0/24
IPv6:
2602:fd2d::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398567
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:9f:99:32:d5:1b:6c:e9:f1:8c:ce:4a:29:3f:cc:88:72:55:
9d:d2:bf:29:5b:34:83:22:76:a5:c0:30:6b:9e:2d:3e:07:37:
36:b6:1a:d9:53:72:c1:81:20:cf:68:92:f5:05:61:27:40:f8:
71:9d:61:ba:8b:f8:f8:8a:17:ed:2e:c6:e4:72:fa:d8:0b:5c:
42:cf:c1:1e:45:48:4b:6a:fe:42:df:34:70:a6:fe:d4:39:61:
2f:f5:de:8f:11:83:df:c9:d4:f0:8d:7d:29:13:06:1c:18:af:
8a:b8:1a:4d:84:8a:b6:bd:6e:67:dc:3b:20:b2:92:40:ed:23:
e3:31:15:ad:77:a9:9d:11:06:6d:6a:b5:86:23:2a:fe:f1:be:
17:5a:b4:91:04:36:d1:cb:03:83:59:7e:1c:26:96:5f:ea:52:
dc:65:9e:9a:52:b2:f4:9a:90:12:c4:53:56:4c:53:b1:a1:1d:
7b:49:c1:e5:1d:0f:53:8a:8c:67:1d:11:3f:b8:b9:38:40:f0:
18:e3:82:86:47:41:8c:c8:3c:2a:15:0f:0b:3f:c2:20:22:34:
85:96:5c:75:f9:e8:c5:71:59:72:ac:55:08:d1:b0:01:66:9f:
b7:da:df:a1:e2:7e:35:4a:42:79:b5:98:4a:1e:7b:fc:9e:88:
94:86:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:47 2026 by rpki-client