
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804.cer
File: 918aa42a-20cc-4d33-9cbb-056cffa16804.cer (raw, json)
Hash identifier: Z0dwUV1RHRlK2dQfA41sRVxv9G1LZeUL6m0JhmDHllo=
Subject key identifier: 22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D9CE31D80356094A3B72C8000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 24 Apr 2026 12:45:17 +0000
Certificate not after: Thu 27 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 32151
IP: 192.245.168.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9c:e3:1d:80:35:60:94:a3:b7:2c:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 24 12:45:17 2026 GMT
Not After : Jul 27 12:45:17 2028 GMT
Subject: CN=918aa42a-20cc-4d33-9cbb-056cffa16804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:0c:e1:69:ce:a3:f1:5a:0f:5a:aa:be:ef:
b5:16:90:13:95:6a:28:36:6c:0a:73:06:d2:a0:e0:
c9:ce:48:c2:07:07:96:d2:e6:1e:12:d3:07:ec:07:
f6:94:10:26:fc:3a:88:e0:a1:bd:30:1c:fe:22:62:
6a:00:71:d7:ef:15:75:33:d5:e5:71:ba:a5:38:73:
d0:d9:96:07:17:33:f3:19:07:38:a1:f1:76:f1:29:
fc:d5:47:31:02:1a:4a:7f:50:77:9b:6b:f4:06:25:
26:e3:51:a0:2d:4e:9d:9f:bc:bc:6b:40:69:e7:22:
e6:34:43:9f:82:ec:28:1c:e4:b8:78:0b:3c:3d:de:
b0:b7:51:c8:37:dd:0f:77:77:ed:c6:1b:13:5c:1d:
50:e3:66:ed:4b:87:3e:bc:f1:27:03:ab:60:cd:cf:
e0:96:32:a2:be:31:93:8a:39:fa:45:0d:cb:24:07:
b8:54:84:52:9b:4e:f0:9c:de:54:52:b0:00:4d:76:
d7:d1:13:01:f8:82:13:62:91:54:28:6f:10:a0:19:
5a:51:31:c0:bf:95:a0:1d:8e:fb:fb:c2:e1:52:d9:
6e:16:bf:e6:95:ef:a0:66:f4:5b:a7:f2:ac:53:cd:
26:e2:16:2a:91:ef:d9:68:e4:df:d3:ed:fb:dd:47:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:49:7B:7B:A0:F3:2A:27:98:4E:09:9C:38:F6:F5:30:E7:45:EF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/918aa42a-20cc-4d33-9cbb-056cffa16804/918aa42a-20cc-4d33-9cbb-056cffa16804.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
192.245.168.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32151
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b4:f4:ef:67:ad:f7:9b:06:12:7a:19:c2:8d:2e:14:5a:76:
8e:9b:47:ab:ec:d1:2f:ad:c4:a6:7f:8d:57:fa:f3:60:d0:7a:
e8:e8:23:f6:a5:ec:94:2b:06:a4:e3:cc:70:eb:f8:a0:1a:10:
61:29:a7:4b:23:60:33:70:7a:61:45:bb:ee:66:1f:c0:21:5e:
e6:60:b1:f3:bc:9e:9a:b5:be:ce:74:3c:1d:06:0c:79:54:d1:
5f:98:f7:21:15:ed:f4:a6:51:35:46:22:57:71:67:1d:fa:9a:
05:82:aa:09:77:7f:be:46:4c:94:1f:65:15:42:5d:37:82:a2:
7c:71:eb:60:3a:fd:e2:b8:44:58:b6:59:a1:bc:00:d7:7a:b7:
29:dd:20:15:96:82:23:dd:be:2b:ee:e7:60:5d:e9:c0:32:47:
1f:d1:68:f0:7c:f7:4c:14:49:cd:d2:fe:dc:ae:ba:c7:9a:a9:
b7:cf:b2:97:91:c0:0a:46:fa:26:40:54:84:a8:f7:67:60:f2:
18:25:b6:9d:f0:44:ad:16:fc:c3:40:83:6d:63:cb:57:c9:ad:
4c:d7:aa:08:49:b3:3b:9d:36:7a:db:f1:f7:01:ab:25:b6:c2:
64:80:4d:ba:9e:ce:90:f9:ff:5e:e2:df:0a:21:69:6e:1d:d5:
0f:75:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:54 2026 by rpki-client