
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
File: 9df142df-6de2-47dc-be4f-bf09bdec0551.cer (raw, json)
Hash identifier: ihB5ahWFEwX+fzPp1FogOAQOivrPD17X53lT/zkiyWo=
Subject key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D32CD2C429E31A5A8A37CD980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 17 Mar 2026 12:45:23 +0000
Certificate not after: Mon 19 Jun 2028 12:45:23 +0000
Subordinate resources: AS: 19187
AS: 19229
AS: 19379
AS: 27184
AS: 394453
IP: 69.4.0.0/19
IP: 170.118.0.0/17
IP: 171.74.0.0/16
IP: 198.134.142.0/24
IP: 198.160.64.0/19
IP: 198.212.157.0 -- 198.212.158.255
IP: 199.253.136.0/21
IP: 216.157.224.0/19
IP: 2604:97c0::/32
IP: 2607:2e00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:cd:2c:42:9e:31:a5:a8:a3:7c:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 17 12:45:23 2026 GMT
Not After : Jun 19 12:45:23 2028 GMT
Subject: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:3d:ef:e6:ce:79:d9:35:54:42:52:69:9d:
63:78:b2:31:68:41:2c:17:4f:0d:98:d7:c8:2e:f2:
9c:ac:b0:8e:41:2d:5d:3e:e3:da:34:43:35:45:e1:
78:41:31:69:31:4a:c6:fe:49:2d:aa:31:3f:bc:0a:
bc:7e:87:f0:97:35:03:e0:1a:f5:31:ba:83:ef:2e:
f6:c3:1e:23:b8:27:94:97:99:32:bf:b0:c1:75:66:
cc:3d:34:cb:19:e3:22:11:0f:8a:9a:c0:6a:10:0a:
00:30:14:e3:0e:77:e5:54:6d:1f:e2:55:7d:f2:b2:
6b:57:d1:f2:f8:cf:07:6b:7a:d5:7e:c9:99:10:63:
ad:68:82:17:a5:dd:b9:c0:88:f6:3f:74:93:3f:e4:
33:97:26:67:5a:f6:6a:26:6c:50:51:3a:38:e4:f1:
97:72:95:c6:3f:6c:c3:53:58:a4:88:ed:37:56:b7:
c6:83:ee:54:66:c0:3d:22:01:a7:da:f4:8d:cc:42:
33:aa:47:68:09:a8:5c:b6:90:e7:83:44:98:58:96:
ca:60:f4:f0:85:2b:2c:ed:6d:7a:5b:c2:8f:a8:73:
f2:f4:ef:9f:ee:e8:2a:35:0a:fa:1c:56:f1:9d:60:
21:cf:31:ce:9b:fa:5c:24:5f:16:e6:e6:21:61:5d:
26:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
69.4.0.0/19
170.118.0.0/17
171.74.0.0/16
198.134.142.0/24
198.160.64.0/19
198.212.157.0-198.212.158.255
199.253.136.0/21
216.157.224.0/19
IPv6:
2604:97c0::/32
2607:2e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19187
19229
19379
27184
394453
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:cf:52:42:f6:27:6d:b5:62:3e:fa:c3:40:d3:d7:ac:e3:c3:
73:4a:d9:06:3c:b2:85:d0:0b:b9:9b:07:3e:32:c3:36:79:a8:
cd:1a:ba:3e:b6:4f:3b:d8:e7:48:da:ee:11:f7:ee:e8:9f:32:
29:ed:09:bb:cb:7e:90:62:d4:b6:15:b3:f8:45:55:62:1a:2f:
db:4c:c2:70:f5:61:cd:c2:93:44:c3:2d:cb:c1:04:0d:59:69:
c8:5f:3f:be:3f:28:cb:a8:ed:06:f4:ae:6e:81:b0:06:45:f7:
80:63:cf:13:6e:e5:cb:a4:30:ad:73:4e:ce:f6:00:6e:e0:30:
69:2a:71:6d:30:0d:18:96:b9:41:f0:5d:92:cf:84:3f:4e:67:
56:d2:4a:3b:2f:74:2b:62:52:75:08:3c:45:e6:cd:f3:21:10:
fa:53:8f:1d:90:e7:38:c3:e4:ee:31:6d:62:33:bd:0f:bf:66:
ee:97:42:38:c1:60:d6:9b:1a:b7:aa:02:27:f9:1b:28:2c:30:
d6:7b:f9:b8:8c:63:fc:bd:33:75:eb:4d:09:b6:50:ec:a8:b9:
9f:18:35:84:c3:b9:07:c3:93:9a:49:4c:0f:fa:64:a1:34:55:
46:44:5c:cf:1f:4c:53:37:28:2a:8c:e4:e2:be:0c:8a:67:33:
f0:b5:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:26 2026 by rpki-client