
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
File: 98fa46f5-eef1-4569-9795-c233e7e74658.cer (raw, json)
Hash identifier: s9Ar5BNVyzbXlvjo/8zh51Yg5Q6+m7xCpM3qynF6cg8=
Subject key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584E57C8366D52B0DCD7F98B2400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 30 Jun 2026 11:27:15 +0000
Certificate not after: Wed 04 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 55244
AS: 402656
IP: 192.16.76.0/22
IP: 209.35.192.0/22
IP: 2602:802:2000::/40
IP: 2607:c900::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:57:c8:36:6d:52:b0:dc:d7:f9:8b:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jun 30 11:27:15 2026 GMT
Not After : Aug 4 00:45:34 2027 GMT
Subject: CN=98fa46f5-eef1-4569-9795-c233e7e74658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:1a:41:b6:e1:57:1c:f8:1c:78:3f:56:74:
68:ef:7a:85:e8:ba:45:ee:2c:b5:52:25:72:27:a6:
ed:4d:8d:45:4c:7a:86:a4:9f:51:2d:4f:53:ed:80:
8d:d4:f9:b7:93:22:63:70:64:74:47:c2:94:2d:bd:
ad:ee:e4:bf:b3:4e:55:60:fc:27:59:10:08:0c:3b:
a7:6a:98:c5:eb:5b:b5:3f:b8:7d:1f:0d:fc:60:a1:
d6:8c:62:14:0f:93:e5:9a:18:8f:bb:59:d9:ec:ce:
16:79:98:d8:6e:5c:2b:33:0d:d3:69:98:c1:da:67:
5c:f8:2d:63:56:75:77:d8:ac:a9:11:2a:1a:2e:80:
11:12:98:4a:63:a2:ae:04:49:d4:64:cd:33:87:fc:
b0:94:bd:21:bc:93:fa:a5:62:52:61:77:01:2c:07:
54:a5:92:77:e4:b6:e0:42:34:46:57:ca:29:8f:53:
2c:64:98:a0:21:0b:fd:af:3e:3a:78:15:2d:8b:a3:
9c:41:7b:79:b4:83:a9:46:8b:9b:06:d9:5f:e8:84:
cd:3f:83:5a:c2:41:9d:13:9b:a2:ba:83:57:25:16:
f3:16:55:f6:57:85:5c:6f:90:1e:93:89:58:5e:8a:
6a:66:11:3b:82:b5:fd:77:29:b3:d7:2a:58:2d:f2:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.16.76.0/22
209.35.192.0/22
IPv6:
2602:802:2000::/40
2607:c900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55244
402656
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f1:82:e3:3a:2c:50:60:0e:d5:60:d2:06:06:06:fe:a7:8f:
5a:66:af:7c:dc:cd:1b:f8:a7:63:1a:e7:a3:dd:b9:70:2a:9b:
f6:5a:00:e1:33:0c:ea:b5:03:18:83:9c:4c:b2:86:0d:63:3b:
eb:59:97:99:5f:b1:72:b5:a2:03:cf:dc:32:34:b5:3e:74:1d:
d6:29:dc:df:7b:d2:46:05:d0:17:da:7a:58:d6:f6:8f:fb:6d:
aa:38:26:c4:94:38:84:5c:5a:53:80:44:d8:1a:6c:25:14:e0:
57:c2:2b:e7:d7:4e:74:2d:98:c7:5b:e2:71:4b:98:51:a2:b0:
a7:66:9a:13:74:73:2b:bb:29:4b:08:91:95:fa:25:75:bc:e4:
48:d2:f2:46:e5:12:13:f5:f7:04:69:a0:84:e5:00:6c:62:f6:
a7:2d:90:d5:f1:1c:ee:9a:12:9d:79:c5:c3:80:9a:da:57:eb:
9e:55:c3:08:90:ae:98:ca:e2:a2:08:23:aa:ac:81:10:ef:62:
4d:19:e2:6a:8f:3f:18:ce:a2:91:6c:da:ba:40:92:c8:1a:88:
9d:33:95:af:1e:b5:0d:dd:da:49:36:0e:ae:76:a2:0f:a5:9f:
42:6e:7f:32:d4:89:89:82:e0:69:dc:e9:b4:5a:b5:27:fe:78:
59:55:7a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:13 2026 by rpki-client