
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/797ae6e7-67da-4a24-9f20-042481e13633.cer
File: 797ae6e7-67da-4a24-9f20-042481e13633.cer (raw, json)
Hash identifier: hanx37Ezrm2tuX8SYGna6IISEE04fByf2KYRanJh0Nw=
Subject key identifier: 3D:76:6D:E9:D1:43:5E:8F:2E:34:55:61:45:7A:08:89:35:4F:63:6B
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584DBD691184BF5FD61604B2DAE4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/797ae6e7-67da-4a24-9f20-042481e13633/797ae6e7-67da-4a24-9f20-042481e13633.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/797ae6e7-67da-4a24-9f20-042481e13633/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 06 May 2026 04:21:03 +0000
Certificate not after: Tue 08 Aug 2028 04:21:03 +0000
Subordinate resources: AS: 40178
IP: 23.145.156.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:69:11:84:bf:5f:d6:16:04:b2:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: May 6 04:21:03 2026 GMT
Not After : Aug 8 04:21:03 2028 GMT
Subject: CN=797ae6e7-67da-4a24-9f20-042481e13633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:f2:81:7a:ce:92:15:c6:27:14:ee:7a:4d:
06:f9:52:77:a4:51:c3:bc:a1:aa:10:44:fa:1a:86:
80:ba:59:e8:3a:2f:4e:94:b1:0a:47:b2:17:a8:e8:
79:72:8c:23:53:48:4a:21:83:b9:60:b5:7e:6f:62:
d9:ae:f5:85:48:5f:03:ae:bf:18:87:87:2f:5f:88:
90:da:8c:14:39:05:48:64:19:cb:9f:f3:8b:15:44:
50:10:94:04:e3:e5:ef:32:f1:d4:a6:c2:0b:a7:54:
dc:e7:c2:54:da:d0:08:af:64:cd:70:0d:6f:26:00:
69:46:c8:8a:ae:2c:8d:81:89:be:77:5b:00:c0:79:
7c:10:63:f5:e2:18:17:61:40:9f:56:cb:f2:2c:20:
fa:2d:cc:34:02:fd:46:e9:be:61:68:82:26:4c:c8:
2d:4b:8e:1c:c3:79:bb:d7:47:b9:a0:90:bf:42:b1:
fe:72:65:f0:89:8d:c0:89:73:6a:93:b4:37:0d:d4:
85:77:e1:ee:28:12:a9:04:05:5a:b9:34:34:1e:f6:
4d:ef:b3:db:eb:9e:59:17:53:0f:eb:ea:87:b9:43:
c1:b9:c7:9b:55:59:d9:eb:f8:10:2d:30:87:a0:d9:
ba:58:83:47:dd:f7:9e:6f:9d:c2:5d:df:9d:92:a3:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:6D:E9:D1:43:5E:8F:2E:34:55:61:45:7A:08:89:35:4F:63:6B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/797ae6e7-67da-4a24-9f20-042481e13633/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/797ae6e7-67da-4a24-9f20-042481e13633/797ae6e7-67da-4a24-9f20-042481e13633.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.156.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40178
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:35:b9:71:28:0f:77:71:20:00:f5:8f:7e:e0:f9:6d:d7:b1:
fa:24:2d:c4:04:e3:71:fc:e2:71:2d:d2:0a:00:a8:ba:50:ac:
38:ac:24:f9:c6:fe:0d:a8:23:c6:19:3c:31:bf:c0:10:a8:fd:
18:d3:fc:aa:8b:08:4b:9b:92:ff:48:77:a3:67:dc:dc:67:25:
63:23:66:94:8a:71:98:0a:29:c0:e8:cb:e6:86:fc:ad:ff:bf:
87:8a:c7:6a:ee:54:0c:7b:0b:14:55:79:fd:ca:08:4a:61:94:
38:e0:e8:fa:97:ec:53:a3:03:8c:ec:2e:59:86:cb:13:21:aa:
9b:df:2a:f7:26:6a:2f:42:e3:3c:a1:70:d7:1a:f7:0f:7a:83:
ec:2d:b9:4c:1c:06:69:aa:86:eb:50:e8:9a:ea:c5:82:9b:79:
bc:9e:99:39:50:20:4e:a7:61:36:09:f9:23:e2:7c:ee:85:fa:
a6:ad:ed:f6:5c:26:4c:df:14:92:73:aa:91:12:72:e3:1b:6b:
f2:69:ae:3f:1e:bf:8c:fb:64:d2:21:9a:93:21:46:ab:02:98:
89:fe:5e:63:3a:b3:87:18:a2:76:34:be:f0:25:a0:7b:a2:8b:
64:b3:31:5e:74:4e:f1:de:4f:94:9e:28:ba:15:4e:8f:db:8c:
de:bc:c0:14
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE29aRGEv1/WFgSy2uQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw
YjYyMB4XDTI2MDUwNjA0MjEwM1oXDTI4MDgwODA0MjEwM1owLzEtMCsGA1UEAxMk
Nzk3YWU2ZTctNjdkYS00YTI0LTlmMjAtMDQyNDgxZTEzNjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRzygXrOkhXGJxTuek0G+VJ3pFHDvKGqEET6
GoaAulnoOi9OlLEKR7IXqOh5cowjU0hKIYO5YLV+b2LZrvWFSF8Drr8Yh4cvX4iQ
2owUOQVIZBnLn/OLFURQEJQE4+XvMvHUpsILp1Tc58JU2tAIr2TNcA1vJgBpRsiK
riyNgYm+d1sAwHl8EGP14hgXYUCfVsvyLCD6Lcw0Av1G6b5haIImTMgtS44cw3m7
10e5oJC/QrH+cmXwiY3AiXNqk7Q3DdSFd+HuKBKpBAVauTQ0HvZN77Pb655ZF1MP
6+qHuUPBucebVVnZ6/gQLTCHoNm6WINH3feeb53CXd+dkqNH6QIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFD12benRQ16PLjRVYUV6CIk1T2NrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83
OTdhZTZlNy02N2RhLTRhMjQtOWYyMC0wNDI0ODFlMTM2MzMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt
OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyLzc5N2FlNmU3LTY3ZGEtNGEyNC05
ZjIwLTA0MjQ4MWUxMzYzMy83OTdhZTZlNy02N2RhLTRhMjQtOWYyMC0wNDI0ODFl
MTM2MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk
YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh
MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v
JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1
YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAXkZwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AJzyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAC01uXEoD3dxIAD1j37g+W3XsfokLcQE43H84nEt0goAqLpQ
rDisJPnG/g2oI8YZPDG/wBCo/RjT/KqLCEubkv9Id6Nn3NxnJWMjZpSKcZgKKcDo
y+aG/K3/v4eKx2ruVAx7CxRVef3KCEphlDjg6PqX7FOjA4zsLlmGyxMhqpvfKvcm
ai9C4zyhcNca9w96g+wtuUwcBmmqhutQ6JrqxYKbebyemTlQIE6nYTYJ+SPifO6F
+qat7fZcJkzfFJJzqpEScuMba/Jprj8ev4z7ZNIhmpMhRqsCmIn+XmM6s4cYonY0
vvAloHuii2SzMV50TvHeT5SeKLoVTo/bjN68wBQ=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:49 2026 by rpki-client