
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8955eb90-e171-4788-a99e-84d494236b25.cer
File: 8955eb90-e171-4788-a99e-84d494236b25.cer (raw, json)
Hash identifier: 8OTY8XvcYtIEL3kptJEoEjD8ZoM8GZjQXf2SdB6N4yE=
Subject key identifier: C1:D9:96:90:8F:F2:CE:1B:BA:B5:D4:7E:23:D1:ED:9E:93:0B:95:1F
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F7A3A29DA3A5DDC354D9A6380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8955eb90-e171-4788-a99e-84d494236b25/8955eb90-e171-4788-a99e-84d494236b25.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8955eb90-e171-4788-a99e-84d494236b25/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 Oct 2026 12:21:16 +0000
Certificate not after: Tue 02 Jan 2029 16:12:11 +0000
Subordinate resources: AS: 403022
IP: 23.165.188.0/24
IP: 2602:81f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:3a:29:da:3a:5d:dc:35:4d:9a:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Oct 12 12:21:16 2026 GMT
Not After : Jan 2 16:12:11 2029 GMT
Subject: CN=8955eb90-e171-4788-a99e-84d494236b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:f7:6d:0a:2a:0d:e2:89:5d:4f:4f:a5:17:
da:69:b0:6c:8f:44:95:c8:b6:60:4d:f1:34:aa:3f:
40:0b:6d:98:10:19:81:7e:6a:86:d7:d0:44:1e:3a:
99:9a:f3:2e:5d:e5:b1:a7:ab:7c:f8:e1:7c:af:13:
fc:df:9d:95:31:7c:63:a1:e6:84:2c:1c:9d:7a:f3:
e7:de:90:68:28:0f:71:90:69:67:c5:bd:c1:95:84:
c0:44:ad:dd:aa:50:40:82:9b:30:c4:b5:b3:36:91:
f1:df:3d:6f:3f:e4:67:c8:0a:74:17:f8:7a:73:df:
b1:cd:b6:69:51:64:43:56:51:63:0f:69:50:39:cc:
42:87:6d:e6:f2:75:86:0d:7f:80:7b:d3:66:94:40:
2e:fa:4f:b9:fd:0b:38:db:b7:31:eb:9b:1d:98:a6:
42:3d:e8:52:f7:5f:4b:ac:b2:8f:f5:b4:49:4b:2e:
38:92:36:04:08:ac:99:d2:40:72:40:3a:39:dc:f7:
3d:f9:15:97:e0:8c:4d:a2:cc:b7:d6:96:c9:2e:ba:
74:a3:f6:28:68:fe:44:7a:09:7e:f8:aa:54:7d:3c:
3f:1b:0b:f5:67:03:11:eb:eb:42:b5:f0:e9:b4:1a:
73:46:7f:4f:d6:4f:05:b5:22:2d:05:27:b3:62:20:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:96:90:8F:F2:CE:1B:BA:B5:D4:7E:23:D1:ED:9E:93:0B:95:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8955eb90-e171-4788-a99e-84d494236b25/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8955eb90-e171-4788-a99e-84d494236b25/8955eb90-e171-4788-a99e-84d494236b25.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.188.0/24
IPv6:
2602:81f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
403022
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:0c:ed:3a:a6:b0:9e:34:10:3d:d8:61:06:f2:c1:d9:66:91:
b3:2e:89:7c:28:4b:55:34:28:5b:6b:82:3d:bf:49:3f:ca:55:
fe:b4:eb:72:ee:1e:bb:fe:3c:a7:7d:73:6c:e9:11:f9:9f:4b:
69:fb:d6:14:85:f4:93:e9:60:78:70:d2:9d:eb:0d:42:14:d2:
8d:da:cf:54:77:d6:a9:25:6b:cf:e1:78:41:3a:11:4e:be:5d:
43:ea:15:ac:36:91:44:57:13:0f:71:d8:0e:f5:9c:8a:3b:7d:
ab:a0:3f:89:9c:13:10:59:78:ed:42:6e:47:dd:8c:d1:4e:b6:
2a:fb:0f:7e:78:35:24:22:65:1e:50:0c:fa:28:8d:5a:08:fd:
aa:b8:b4:bc:44:9a:05:1c:cf:7e:53:6c:75:94:fc:9e:df:69:
35:5a:2c:3d:a5:fe:0b:4a:43:30:6e:ee:f6:78:45:b3:8a:e4:
1f:ed:28:84:35:70:7a:7b:d9:58:a6:46:d4:be:ab:ba:c7:98:
70:47:45:8e:a6:75:a7:34:e5:fa:ca:0e:cc:fc:b1:44:2b:70:
92:5d:5a:6a:d9:0c:dc:36:b3:a0:90:1d:fb:cd:f5:e5:14:cd:
04:a6:6b:f8:0b:2f:1e:af:f6:7d:4b:5a:13:2c:72:39:c4:ab:
00:77:16:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:44:35 2026 by rpki-client