
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
File: 76554884-d362-4eab-82d1-ed9e4c9b289a.cer (raw, json)
Hash identifier: bYwPaMesC+FaOhhTwwrpaadV+ApUy3aUWg6liqdzDxM=
Subject key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584DC828B7AA035B454803658AE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 10 May 2026 00:45:17 +0000
Certificate not after: Sat 12 Aug 2028 00:45:17 +0000
Subordinate resources: AS: 398238
IP: 216.170.121.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c8:28:b7:aa:03:5b:45:48:03:65:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: May 10 00:45:17 2026 GMT
Not After : Aug 12 00:45:17 2028 GMT
Subject: CN=76554884-d362-4eab-82d1-ed9e4c9b289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:66:76:e8:ac:55:fe:98:7f:30:3f:c0:ee:
77:ee:ec:92:fd:67:13:9c:65:51:12:7a:be:a0:b2:
9b:7e:9d:5c:0c:95:bb:93:4f:33:11:e2:97:67:ad:
cb:5b:85:e2:8d:63:03:0e:64:87:2d:b5:36:5c:b2:
38:9b:43:80:46:27:95:16:7c:ef:2a:34:97:c3:6f:
86:c9:34:b7:2d:22:6b:b2:89:86:03:58:93:e9:14:
e9:3a:70:20:20:5e:65:4b:3e:b9:21:92:3c:17:3e:
6b:e3:8b:a3:76:e1:3d:91:e4:49:31:d2:3c:57:a3:
d0:11:23:9a:59:31:9f:56:b1:0f:a9:e1:9e:de:b7:
bb:7e:37:c4:41:43:aa:c0:55:54:f8:21:46:39:98:
5c:c5:15:14:2b:29:8e:e4:5f:24:78:98:44:09:c2:
b5:e8:40:34:71:bd:dd:e9:93:c8:59:a4:ee:50:36:
c4:28:23:39:11:cb:a3:f5:8b:44:fc:26:61:2e:05:
75:4d:9a:da:05:75:19:5c:8c:ec:f3:bc:7b:26:1f:
31:37:20:24:69:36:4b:ef:33:8f:83:9a:be:00:98:
b0:16:da:5d:f4:58:c5:41:98:61:c5:81:5c:74:a0:
3a:de:78:28:c0:ee:58:0b:71:1d:75:3c:7d:48:fd:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.121.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398238
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:65:88:db:85:75:4a:f0:67:e7:9e:15:9c:66:56:0d:b1:f6:
8c:e7:4c:7d:c4:96:ec:30:9f:80:c1:4f:4b:fb:45:44:9c:50:
00:d9:0a:85:37:07:a3:8f:82:fe:39:b1:c1:30:10:30:90:82:
90:ff:ba:e4:d2:1d:cd:18:1d:e1:ea:05:62:a5:d8:3d:b7:7a:
4e:43:f7:59:ae:49:e5:6f:87:bf:d5:cb:25:8c:af:e1:ca:23:
f3:9c:74:be:57:a8:29:67:c6:57:e0:a3:7e:94:f1:9a:76:cd:
40:06:44:31:82:24:01:d8:66:40:ce:16:52:bd:ae:20:b0:1a:
fd:7d:18:ee:6f:03:b7:a9:48:6e:96:5d:13:e9:90:e2:88:6b:
69:be:ae:b6:9a:fd:60:8d:7b:e9:be:b1:b5:51:76:b2:e6:01:
6b:6c:42:7d:17:6a:5e:b2:f2:ca:06:a5:56:7b:2a:9f:65:10:
e2:f5:2e:e8:a3:43:9f:9a:2c:a5:02:06:d5:87:27:33:ee:e1:
40:86:31:fd:2b:68:f5:7a:6f:2f:a8:a1:c0:e1:e9:a4:33:a0:
78:c5:f4:09:a8:be:3b:61:24:42:c4:9e:8e:d4:5d:35:b3:d9:
67:73:41:c0:68:38:f3:72:59:c9:b2:50:c1:f7:48:a4:45:37:
27:a6:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:19 2026 by rpki-client