
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
File: 3e03ba01-86be-4e51-b95f-af6e17a7979e.cer (raw, json)
Hash identifier: EUCiKsZYLGUM/g5eMeEnu4FJp2h2Wf7yiN5LwwA1TZY=
Subject key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584DB953F1A74CC90B5682388220
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 04 May 2026 17:15:15 +0000
Certificate not after: Sat 20 May 2028 15:52:59 +0000
Subordinate resources: AS: 398391
AS: 400883
IP: 64.226.128.0/20
IP: 64.227.192.0/20
IP: 74.63.32.0/20
IP: 131.226.32.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b9:53:f1:a7:4c:c9:0b:56:82:38:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: May 4 17:15:15 2026 GMT
Not After : May 20 15:52:59 2028 GMT
Subject: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:9c:bd:d3:29:03:6e:a2:61:bb:3d:99:f2:
16:14:76:a0:0d:05:59:60:d6:3a:b3:a6:5f:1e:e8:
67:29:76:69:72:8d:da:8a:48:1e:5c:ff:ef:d8:c3:
32:a4:c4:02:49:f5:aa:9b:c0:22:0b:9c:d8:89:c7:
3f:a8:b0:7d:b5:14:9f:00:c1:8d:c3:cc:60:56:bb:
32:83:2a:d8:6b:51:7e:b6:40:24:28:67:2a:4f:59:
19:36:26:0c:ac:90:61:46:64:d5:6c:d7:18:e7:28:
7f:6c:bd:0a:8c:33:aa:58:a6:6f:85:6a:c6:a4:f4:
c9:f3:e2:67:7c:d5:63:19:1f:fa:aa:f7:72:f9:cc:
7b:ba:cd:6d:d6:98:20:36:5c:3f:88:66:9b:cc:10:
5b:6d:b6:1a:76:31:53:88:b4:2b:89:c5:a0:44:48:
0c:c8:a3:68:5f:cd:e4:a2:b0:9f:1c:4f:d4:14:96:
76:b3:22:a6:49:2b:e5:3a:3d:ed:94:b1:e6:80:b7:
70:40:42:6e:3b:3c:81:f1:e8:ed:45:0e:c4:35:c4:
d4:8d:17:f5:b0:e2:b5:e3:e4:cd:9f:b8:01:80:f3:
65:82:10:86:c3:17:ab:d1:42:ac:b9:60:13:a6:92:
9d:56:0b:24:a3:79:6a:0a:03:bc:c4:fe:1a:f9:dd:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.128.0/20
64.227.192.0/20
74.63.32.0/20
131.226.32.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398391
400883
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:bd:0f:dc:34:24:70:47:48:95:98:e2:e8:ab:c1:ee:98:0f:
eb:f5:9d:a1:5f:92:d6:07:3a:46:55:c8:df:1e:55:75:40:91:
29:bb:a0:82:f2:df:0e:75:77:9e:35:89:c9:43:bd:2b:b2:bd:
d7:80:c2:43:91:79:fa:33:aa:fc:27:75:b8:41:38:ce:49:8c:
56:5f:fa:b6:dd:76:ab:c0:79:83:ac:11:f8:e9:2a:96:cb:5e:
91:b9:1f:18:8e:a3:e1:2f:9b:96:7d:cc:3a:8f:71:03:6f:4d:
d9:d3:f1:70:1e:f4:95:fa:c6:54:6d:4f:37:f1:71:b0:e8:34:
e5:ec:38:1c:3b:66:9d:54:6e:ab:d1:e2:80:a3:f6:f5:5c:43:
ef:4d:2a:ca:99:0f:b9:9a:ec:b2:24:cc:24:61:d2:5f:31:fe:
7f:2d:43:ef:49:49:b1:96:a8:14:e1:f3:5d:ba:9e:7c:a6:18:
c3:19:cf:d4:d6:01:a5:88:67:8b:23:79:52:87:77:8b:ca:20:
b1:b5:f2:00:c2:aa:93:8c:9a:b4:2b:a8:c6:4f:82:33:96:72:
45:c8:85:f0:78:7c:80:b2:df:d4:16:30:87:ae:ce:a9:3c:08:
c4:d7:27:25:66:82:b7:9c:df:18:00:f8:38:f3:25:16:86:fc:
d5:0e:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:01 2026 by rpki-client