
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96.cer
File: 80b8d460-2636-44c3-9690-90f9cd598d96.cer (raw, json)
Hash identifier: s91KoV9jXVCore/6rT0brGB4eYNp1KMvfe4Vwk2NE7c=
Subject key identifier: 3C:EE:60:CA:A8:A0:66:A6:3B:F3:8D:E4:B6:4A:5D:2A:C9:C8:D0:F1
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D2D37CD7B9064390DD5C66A60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/80b8d460-2636-44c3-9690-90f9cd598d96.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 15 Mar 2026 12:45:23 +0000
Certificate not after: Sat 17 Jun 2028 12:45:23 +0000
Subordinate resources: AS: 396858
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2d:37:cd:7b:90:64:39:0d:d5:c6:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 15 12:45:23 2026 GMT
Not After : Jun 17 12:45:23 2028 GMT
Subject: CN=80b8d460-2636-44c3-9690-90f9cd598d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:e6:dd:45:78:13:14:6b:5a:ff:94:52:b8:
a2:34:12:7d:a7:fc:25:14:a6:1c:15:97:ba:b7:24:
c6:71:7d:07:f7:8e:8f:c3:99:f4:59:fd:76:03:35:
3e:76:17:c4:96:d3:98:e5:7a:9a:d9:e9:b1:ba:88:
45:07:d7:a6:24:55:57:37:9c:f7:17:84:1d:00:26:
97:e1:da:36:46:ab:cf:67:1d:77:16:a4:c2:e9:84:
ef:aa:1f:4b:bf:51:7b:0a:6b:bd:be:d6:7d:c4:8d:
13:de:9b:f5:48:21:b0:62:22:14:23:bb:6b:58:82:
19:d2:b0:fc:a0:93:bb:af:10:36:77:3f:e5:fb:2c:
b2:45:15:eb:46:98:da:9f:bf:f6:db:7c:79:56:29:
f2:df:d6:63:67:f7:2d:7d:24:71:7a:1a:e0:79:c2:
63:d3:25:33:42:03:70:1d:c2:ed:c5:59:90:7c:ce:
86:c2:b8:2c:66:c0:9d:46:53:11:b1:67:f0:1e:90:
d2:47:5a:e5:b5:53:51:7b:b1:d4:2d:62:28:fd:44:
da:58:51:4b:2c:a2:59:84:75:45:a6:c0:2f:86:16:
aa:fe:7f:d5:cc:f8:69:e2:d0:93:ec:36:6b:4a:7d:
db:de:c3:44:74:b7:df:20:49:b3:9c:1c:d2:53:ac:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EE:60:CA:A8:A0:66:A6:3B:F3:8D:E4:B6:4A:5D:2A:C9:C8:D0:F1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80b8d460-2636-44c3-9690-90f9cd598d96/80b8d460-2636-44c3-9690-90f9cd598d96.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396858
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:26:b6:ad:12:88:fb:7f:fd:f8:50:32:36:21:a7:a2:4c:f8:
3e:bc:3c:91:9e:d7:62:17:7c:98:c1:41:df:7b:7a:c9:2b:48:
f0:47:8f:99:fc:6e:b4:51:fb:27:08:b1:fb:d9:c6:24:10:cd:
ba:86:1d:be:b3:83:7f:63:ff:65:d1:6c:12:40:5c:78:a4:d5:
41:99:5f:e6:38:af:39:77:d6:14:1e:82:2a:d2:10:bf:42:9e:
3a:32:d6:7e:42:9c:58:73:27:30:e5:7e:50:58:31:29:1a:d3:
be:06:a0:70:68:5a:55:31:4c:ee:1f:e3:85:29:5a:f3:52:03:
51:15:81:53:d5:14:4b:be:74:b5:4b:ae:c2:84:a3:a6:75:4d:
ed:b5:17:20:34:4a:de:c0:ad:eb:58:9b:24:2e:80:37:30:6f:
b8:aa:e0:9a:21:c2:df:0c:68:e4:d6:31:d2:1e:23:cb:5e:d4:
a9:8e:54:0f:9e:98:1b:64:0b:91:0b:ac:73:37:7b:f6:31:34:
cb:21:0a:ec:8d:47:e4:3f:7f:0e:c8:21:44:85:92:7d:8d:81:
73:de:1f:b2:df:fd:37:e0:0d:f7:76:d7:f3:f1:cb:cb:df:e5:
a1:42:8c:13:c7:a3:52:a8:6e:23:90:4e:cb:8f:34:2b:df:73:
a6:d5:7c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:08 2026 by rpki-client