
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/efb0f530-fe67-4ae7-acb3-00285db66b1f.cer
File: efb0f530-fe67-4ae7-acb3-00285db66b1f.cer (raw, json)
Hash identifier: 8lk1BbUAbT8G9mPnWYZ8txDPoUa13uyk+NmOxjqHlkw=
Subject key identifier: A9:8B:23:49:EF:33:68:4D:07:AF:C7:F0:CF:8A:C9:92:74:FA:E4:7E
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D46F458A3BFE1DCBBBD3B6240
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/efb0f530-fe67-4ae7-acb3-00285db66b1f/efb0f530-fe67-4ae7-acb3-00285db66b1f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/efb0f530-fe67-4ae7-acb3-00285db66b1f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Mar 2026 18:00:29 +0000
Certificate not after: Mon 19 Jun 2028 17:37:27 +0000
Subordinate resources: AS: 54634
IP: 199.182.224.0/21
IP: 2605:7f00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:f4:58:a3:bf:e1:dc:bb:bd:3b:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 24 18:00:29 2026 GMT
Not After : Jun 19 17:37:27 2028 GMT
Subject: CN=efb0f530-fe67-4ae7-acb3-00285db66b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:ca:1b:b8:6f:65:9d:7d:11:62:1a:a2:79:
e4:45:fb:3b:e3:16:89:a4:13:61:ae:b3:22:6d:60:
58:56:90:56:eb:dd:ce:28:13:9c:a8:71:1f:e6:0a:
2f:58:91:fa:2b:d3:e4:77:72:f9:85:90:7b:81:60:
fb:6f:a9:db:8a:93:d2:53:1d:82:e1:4a:0c:eb:6d:
7f:58:5c:4f:2c:ab:f7:37:77:bd:d7:fd:4f:e9:7b:
97:1f:64:9c:17:84:0b:80:ee:1e:5d:4b:76:ba:e5:
f4:c1:4e:10:b3:94:ef:f3:b9:5f:f0:3a:cf:f6:30:
64:4f:36:75:b1:b4:70:bf:1a:bb:43:4f:8f:d3:4d:
ac:68:f4:c1:77:3e:f1:fd:a9:a3:82:f3:79:78:22:
2f:b8:e8:7f:11:6e:6f:9a:99:ce:87:37:7d:90:99:
cf:40:8b:1f:9f:56:a0:86:df:08:99:a0:f1:4c:c3:
e5:b3:5b:8f:2a:14:38:0f:2d:0e:6d:65:af:04:ff:
83:33:63:e7:30:c7:10:14:5b:04:69:e2:3f:9c:47:
da:e2:4f:81:15:08:3b:11:39:4d:4c:17:7f:74:12:
de:03:41:36:d2:3b:6a:c5:48:25:26:ff:a0:79:74:
27:ff:e7:b2:db:d8:df:ae:4d:a0:f2:f6:d2:01:9c:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:23:49:EF:33:68:4D:07:AF:C7:F0:CF:8A:C9:92:74:FA:E4:7E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/efb0f530-fe67-4ae7-acb3-00285db66b1f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/efb0f530-fe67-4ae7-acb3-00285db66b1f/efb0f530-fe67-4ae7-acb3-00285db66b1f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
199.182.224.0/21
IPv6:
2605:7f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54634
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:ee:bb:be:b0:06:59:b0:ef:25:6f:c2:05:f6:20:4b:ca:5c:
f9:14:43:6d:fb:e7:81:bd:a7:18:1b:bf:14:e8:c9:ed:94:d9:
c8:ba:2c:07:18:e8:5e:a0:d6:5f:ea:43:4a:26:57:8a:9d:bd:
7a:62:23:78:fc:b5:8b:1e:87:d5:2d:f8:df:86:8c:a7:6b:a1:
a8:0a:48:c5:af:4d:3a:c8:d9:c4:09:f7:2e:c0:2c:5a:82:dd:
40:48:99:69:3f:0e:28:a4:c9:73:7a:b0:8d:24:e7:71:9d:2c:
d0:08:a4:c9:aa:d0:12:8e:a8:b7:78:c6:98:9e:19:94:a3:af:
16:b4:6b:be:8c:9b:68:06:55:ca:d6:b3:4c:51:19:da:79:9b:
86:61:08:5f:d2:d0:f7:16:7e:9e:ef:49:0c:01:41:9f:2c:6a:
f6:cd:85:9d:3a:2e:94:b9:0a:ac:8b:cb:7b:c0:98:fd:49:75:
f4:5f:e0:cc:76:da:e5:18:61:2e:bc:09:c1:f5:5d:a8:99:f0:
8e:d7:2d:7e:f9:f0:aa:10:51:1a:c8:bd:c4:75:d4:0a:a3:23:
39:d6:da:99:62:d4:24:7e:6f:92:73:2c:72:24:8b:7f:f3:6f:
33:72:4e:01:36:1d:bc:d3:6f:8c:cd:3d:02:2c:f8:3e:07:73:
5d:7c:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:50:00 2026 by rpki-client