
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242.cer
File: c094d447-bba2-4063-89a8-82526852f242.cer (raw, json)
Hash identifier: enAnl6/tOET3n3Cz8uAtd82TSAMIUH+bA5jmSyzbfKI=
Subject key identifier: 28:A9:2F:93:1A:8C:B2:7F:28:D5:5E:F0:7F:5C:4C:F4:5C:B8:96:3B
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D2FAE3BC4F6DF26BBFB068100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/c094d447-bba2-4063-89a8-82526852f242.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Mar 2026 09:55:38 +0000
Certificate not after: Sun 18 Jun 2028 09:55:38 +0000
Subordinate resources: AS: 18966
IP: 23.166.96.0/24
IP: 134.195.69.0/24
IP: 2620:63:2000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2f:ae:3b:c4:f6:df:26:bb:fb:06:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 16 09:55:38 2026 GMT
Not After : Jun 18 09:55:38 2028 GMT
Subject: CN=c094d447-bba2-4063-89a8-82526852f242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:b6:b3:b7:12:ee:e2:31:09:eb:4e:28:d3:
7f:a8:0d:87:36:0d:60:7e:67:98:7a:36:65:2e:66:
10:b0:32:2e:43:e0:d6:a7:0e:9f:de:ac:17:e7:43:
ed:5c:d2:43:0d:05:66:2e:8b:95:c9:aa:12:c6:db:
1b:ba:6f:89:b8:00:7f:4c:a9:8c:fd:f0:d9:1d:30:
45:2e:66:47:4f:9d:32:30:22:ca:4d:b7:23:ed:94:
aa:d3:95:87:cd:57:93:7f:86:f4:8f:97:88:65:a6:
4c:9a:ec:f3:3b:c9:ac:6d:5b:a8:a3:f4:8f:a3:14:
81:ca:7c:fc:de:b2:ff:ac:c8:ab:ca:82:01:4f:75:
b7:68:ea:01:25:1f:b1:78:75:7d:52:0d:18:c6:c4:
27:85:a1:56:54:aa:ec:25:9e:36:0f:7b:d1:ba:68:
dc:a9:f5:1b:20:01:fd:3e:51:38:35:a1:30:e1:78:
7e:cc:33:ef:4a:b1:60:da:a1:b2:2b:62:de:9e:4d:
00:72:85:ec:9c:b0:19:e2:3d:46:1d:37:d9:96:4a:
83:56:f5:1e:da:0e:4d:ad:2d:14:f6:22:9d:40:55:
98:00:25:39:91:85:5f:aa:a9:14:72:ee:09:d7:f4:
26:29:85:3b:93:14:79:68:e0:1f:ff:7b:8e:6f:1f:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:2F:93:1A:8C:B2:7F:28:D5:5E:F0:7F:5C:4C:F4:5C:B8:96:3B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c094d447-bba2-4063-89a8-82526852f242/c094d447-bba2-4063-89a8-82526852f242.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.96.0/24
134.195.69.0/24
IPv6:
2620:63:2000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
18966
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:c9:44:5f:b3:a8:5b:ae:24:1e:d7:4b:fc:1c:61:09:84:a8:
1d:fa:58:53:a9:17:86:13:61:6a:9f:6f:7b:1c:f6:a3:51:d1:
68:ca:8b:cb:f2:d5:f4:f8:77:77:f9:57:cf:a7:9c:08:a8:f1:
e9:30:93:72:2a:e3:52:1c:01:3d:cc:de:83:59:5a:34:34:af:
0e:7c:7c:3d:c8:2e:b1:f2:1c:0e:b0:20:72:90:56:5c:b2:34:
14:81:ce:d1:67:02:04:76:14:5a:2e:f2:4f:a1:f1:2d:92:fd:
ad:0a:e4:6e:df:ca:f3:87:d7:cc:43:a3:40:f6:8a:79:00:e4:
1a:84:7e:79:5f:13:7d:cd:02:89:aa:a2:dc:b8:1e:a7:ca:6f:
1a:51:c5:4e:04:e5:98:de:a2:8a:5d:79:85:37:3f:a3:01:bd:
69:07:77:0b:f2:4b:e0:66:37:6e:73:c2:30:4c:a8:f3:92:4b:
e9:21:ab:75:66:93:b6:c5:f7:af:18:28:39:87:31:37:c5:5a:
84:d4:39:3c:f1:17:f7:94:e0:20:ef:86:62:40:ce:d5:81:14:
d3:07:71:7b:e0:d8:81:a7:7b:55:d6:e7:e5:d0:d3:c6:db:1c:
1f:a0:bc:39:7f:5c:8c:34:74:02:61:1c:27:bb:32:16:11:09:
23:92:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:49:53 2026 by rpki-client