Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
File: 3daec053-17f8-47be-a17c-d2007ce5700c.cer (raw, json)
Hash identifier: 9XuJB4s0Srn1aS8YHt0bTbMyPRyQdWJiiEXLLq/idKg=
Subject key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584F8140C0403606BA240B941300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 15 Oct 2026 00:45:12 +0000
Certificate not after: Wed 17 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 11185
IP: 167.253.144.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:81:40:c0:40:36:06:ba:24:0b:94:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Oct 15 00:45:12 2026 GMT
Not After : Jan 17 01:45:12 2029 GMT
Subject: CN=3daec053-17f8-47be-a17c-d2007ce5700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:8e:00:53:ba:90:1f:e7:e6:be:81:6d:70:
ee:df:4e:a9:49:29:fe:30:60:29:0d:73:e3:e8:fb:
61:d2:a3:bf:53:49:fa:b6:90:75:63:44:2b:4c:56:
e5:ce:8e:29:0d:6b:5c:50:92:ac:96:f4:83:78:2b:
17:51:75:ad:15:3c:bc:02:a0:01:d8:af:a7:49:13:
d3:9f:5b:62:7d:a1:b5:6e:6a:28:30:53:01:5a:5b:
30:e7:96:cd:c8:f1:ea:37:37:a9:9c:aa:bd:72:ff:
ea:e4:5d:cf:89:2a:2a:f1:aa:13:49:af:71:42:ce:
1e:a6:8a:99:1e:b2:0a:44:98:3c:4e:8d:73:0a:54:
fe:8c:4e:a9:ca:be:78:8b:3c:fb:d2:59:c8:05:cc:
11:4a:23:4c:87:90:b9:37:86:34:c7:d1:1b:7c:28:
d0:29:d4:9d:81:5b:37:81:ab:59:30:a6:57:77:de:
9c:28:62:41:ff:f3:5b:7e:b5:2e:1e:10:90:bc:f7:
a8:c3:63:ce:28:a6:e9:c5:84:be:87:7e:94:64:c8:
b3:f0:bf:c9:f1:24:36:f8:b3:3d:79:dc:8b:00:76:
f7:eb:a5:e3:01:ef:5d:1c:c1:15:6d:e4:1a:97:d6:
68:ea:2c:27:ab:2b:b3:e3:69:23:40:54:1a:5d:9c:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.144.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11185
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:8e:de:a2:15:c4:a4:9f:df:5d:a1:81:d1:e7:01:27:38:aa:
b1:30:0f:79:eb:bf:54:c3:2c:64:41:00:87:45:d4:9f:6f:d7:
58:b9:f5:05:bf:a7:68:98:61:93:af:cd:a3:29:a3:66:f2:46:
de:77:a3:16:d5:08:9b:b8:89:9a:38:59:1d:a7:4b:b9:39:48:
3c:c7:e9:98:36:05:e7:41:50:bd:9e:c1:29:40:1b:2d:a0:3a:
d0:4c:a0:b2:9e:7d:a6:2c:dc:96:c7:cb:d3:65:54:eb:d3:61:
48:3e:75:ff:53:07:39:eb:47:6d:ad:25:84:4f:93:0d:74:cb:
28:79:78:d9:45:fe:26:25:f8:96:e3:c1:46:b2:e2:0e:97:4b:
db:98:7f:3b:78:48:c2:8e:ea:57:ac:62:60:6e:02:4a:d1:58:
db:e8:37:01:cd:9c:01:fd:52:16:0b:35:2a:c4:c4:09:f8:d0:
29:37:5c:83:94:d9:e3:8f:54:0b:8b:15:42:41:f5:1c:24:9f:
89:6e:7b:9d:be:4e:e9:fe:e8:f7:be:a1:04:f0:a4:d8:9f:de:
39:46:d2:6e:94:33:14:52:98:3b:fc:22:f9:3b:56:31:2c:ed:
cb:85:d8:41:61:79:9e:0c:7c:5b:07:3c:e6:52:73:e9:a1:05:
c6:1f:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:37 2026 by rpki-client