
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
File: bfe6b5ce-b18b-4608-80c9-5651cde85219.cer (raw, json)
Hash identifier: +sxGdolTYM36dL6Uh4sN9nxg2UaKEjPBZNyoKU7DL4s=
Subject key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DAF08909EE57A54F2C5F9E780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 01 May 2026 00:45:18 +0000
Certificate not after: Thu 03 Aug 2028 00:45:18 +0000
Subordinate resources: AS: 396100
IP: 23.164.168.0/24
IP: 141.193.0.0/23
IP: 2607:7540::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:af:08:90:9e:e5:7a:54:f2:c5:f9:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 1 00:45:18 2026 GMT
Not After : Aug 3 00:45:18 2028 GMT
Subject: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:be:72:a8:26:af:48:70:b4:18:82:58:7d:
8a:f4:2a:d1:66:dd:ce:1f:b2:89:b3:8b:e8:a1:03:
e4:a8:80:c1:34:6d:9b:98:78:71:e0:ce:09:de:66:
0c:07:f5:29:b7:f6:d4:44:f3:6a:46:63:ef:b5:7e:
ca:b4:39:0c:64:d4:0d:2a:18:98:9f:cf:53:01:ef:
e8:f0:a4:8d:37:3e:1a:53:ab:02:af:8d:f3:58:08:
88:a0:ca:59:c8:73:fb:44:72:f9:bb:a4:5b:0d:c9:
13:13:60:77:ae:20:64:bb:3f:c0:1d:38:d0:03:74:
98:40:1e:94:9e:e4:29:a7:b3:87:bc:04:68:8c:06:
62:94:16:56:ef:b2:d0:34:50:99:b5:d5:0a:d9:d6:
33:18:d7:48:63:f4:09:ab:6d:fc:d6:1f:aa:96:d7:
0b:83:f9:cc:8b:e6:31:dc:70:91:30:28:6b:af:5b:
1f:fd:f1:cc:90:0a:8f:7e:c1:41:0c:cd:7d:d5:b9:
cc:06:3c:8a:bf:a1:c6:83:77:fb:a0:78:d8:0d:3d:
e4:bc:af:1e:07:a1:f2:15:4a:17:dc:4d:c6:b7:c5:
97:fd:9b:44:bb:b0:6d:e2:f1:65:64:3d:c2:d0:9f:
b9:d9:33:4b:4d:79:f6:e0:ee:a9:70:26:40:f0:54:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.168.0/24
141.193.0.0/23
IPv6:
2607:7540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
396100
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:65:5e:56:a6:60:1f:a3:c0:00:c0:8d:87:7f:34:4e:8d:eb:
b1:8b:5c:35:6a:f8:9c:ca:c4:ad:81:c0:4b:dd:f7:38:55:5a:
51:3f:98:2c:40:4f:27:42:57:3f:32:ef:18:2e:f8:e6:e8:79:
44:0f:98:0b:ca:e9:17:50:01:f6:66:cb:96:7d:65:4a:27:73:
b8:85:76:38:ed:de:0b:3e:35:57:6b:37:8e:2a:a4:7e:45:81:
ff:df:12:32:57:e7:81:57:1f:fc:c2:c3:5e:f8:d5:98:ec:65:
7f:9e:bc:0e:d6:90:4f:b9:fe:4a:94:b6:e2:cf:0d:33:69:a1:
62:c1:42:2e:d3:e8:a1:ac:27:a0:80:0d:e3:7a:c7:dd:9b:a6:
e9:55:59:20:cc:88:88:cf:b8:2e:08:fc:fa:43:e1:a7:ab:7c:
a7:b1:38:f2:9c:7d:b0:e2:2e:40:ec:72:f7:3d:9e:91:af:e4:
50:a0:47:04:4e:1f:0b:2d:74:a5:bb:fc:15:d2:ff:bf:85:ad:
2c:aa:5e:cd:e1:a1:73:a1:d8:91:af:60:47:30:63:27:ee:8c:
99:04:48:24:8c:46:02:48:70:ad:61:39:09:94:5c:47:7a:43:
ec:4e:54:ab:23:a0:0c:4c:01:7d:96:b6:c4:e7:56:70:bd:d7:
b0:a5:de:ce
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE2vCJCe5XpU8sX554AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDUwMTAwNDUxOFoXDTI4MDgwMzAwNDUxOFowLzEtMCsGA1UEAxMk
YmZlNmI1Y2UtYjE4Yi00NjA4LTgwYzktNTY1MWNkZTg1MjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6i+cqgmr0hwtBiCWH2K9CrRZt3OH7KJs4vo
oQPkqIDBNG2bmHhx4M4J3mYMB/Upt/bURPNqRmPvtX7KtDkMZNQNKhiYn89TAe/o
8KSNNz4aU6sCr43zWAiIoMpZyHP7RHL5u6RbDckTE2B3riBkuz/AHTjQA3SYQB6U
nuQpp7OHvARojAZilBZW77LQNFCZtdUK2dYzGNdIY/QJq2381h+qltcLg/nMi+Yx
3HCRMChrr1sf/fHMkAqPfsFBDM191bnMBjyKv6HGg3f7oHjYDT3kvK8eB6HyFUoX
3E3Gt8WX/ZtEu7Bt4vFlZD3C0J+52TNLTXn24O6pcCZA8FQ9+QIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFOME1efkWxnMnH1ho6qkHJmLSLWnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i
ZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2RlODUyMTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JmZTZiNWNlLWIxOGItNDYwOC04
MGM5LTU2NTFjZGU4NTIxOS9iZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2Rl
ODUyMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAAXpKgDBAGNwQAwDQQCAAIwBwMFACYHdUAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgtEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZlXlamYB+jwADAjYd/
NE6N67GLXDVq+JzKxK2BwEvd9zhVWlE/mCxATydCVz8y7xgu+OboeUQPmAvK6RdQ
AfZmy5Z9ZUonc7iFdjjt3gs+NVdrN44qpH5Fgf/fEjJX54FXH/zCw1741ZjsZX+e
vA7WkE+5/kqUtuLPDTNpoWLBQi7T6KGsJ6CADeN6x92bpulVWSDMiIjPuC4I/PpD
4aerfKexOPKcfbDiLkDscvc9npGv5FCgRwROHwstdKW7/BXS/7+FrSyqXs3hoXOh
2JGvYEcwYyfujJkESCSMRgJIcK1hOQmUXEd6Q+xOVKsjoAxMAX2WtsTnVnC917Cl
3s4=
-----END CERTIFICATE-----
Generated at Wed May 13 07:13:49 2026 by rpki-client