
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a18da59d-9ca0-421b-9485-39d8a99abdf4.cer
File: a18da59d-9ca0-421b-9485-39d8a99abdf4.cer (raw, json)
Hash identifier: CMZiWJ6U7KltmppdhdshZ5XC8JSbFW3N8fmM5zZvI0A=
Subject key identifier: 77:96:F8:FD:89:29:06:AE:BC:C4:95:8E:4B:9F:00:BA:B1:1D:50:15
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F4AEF257AB0A75F2270A10600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a18da59d-9ca0-421b-9485-39d8a99abdf4/a18da59d-9ca0-421b-9485-39d8a99abdf4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a18da59d-9ca0-421b-9485-39d8a99abdf4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 25 Sep 2026 13:47:07 +0000
Certificate not after: Thu 28 Dec 2028 14:47:07 +0000
Subordinate resources: AS: 27616
IP: 149.31.0.0/16
IP: 2606:d000::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4a:ef:25:7a:b0:a7:5f:22:70:a1:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 25 13:47:07 2026 GMT
Not After : Dec 28 14:47:07 2028 GMT
Subject: CN=a18da59d-9ca0-421b-9485-39d8a99abdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:84:e8:4d:b2:ee:55:54:8d:50:ed:ef:e2:fb:
e6:dc:34:78:24:55:8e:0f:a8:06:0f:f3:7f:a4:8e:
0d:3d:c8:39:b3:36:6e:70:28:68:77:38:7e:dc:10:
8e:ad:66:21:c0:fc:5d:b5:f3:7d:3f:de:88:19:e0:
4f:8e:47:02:00:2a:31:35:b6:fc:57:1e:31:e3:27:
50:f7:cd:57:78:46:cf:4d:8f:0f:77:44:7a:aa:f3:
b8:df:c1:51:46:7f:53:1f:83:0d:87:7a:2f:04:d9:
ab:b5:dc:06:0a:03:81:51:ed:2b:b1:19:97:f5:b5:
03:bc:07:bd:7b:67:05:3a:3f:25:fa:d1:10:fd:19:
84:76:cb:7d:9d:29:f5:65:9b:8e:75:7c:78:1a:fe:
8d:63:25:b6:2f:0c:7c:c7:9a:e1:c8:73:4e:6b:ab:
f9:33:c5:6c:45:1e:cb:c6:f9:c6:c4:1c:7a:41:47:
e6:65:dd:fd:3e:c5:88:a0:08:85:f9:6e:93:ec:81:
d1:e2:c7:d6:cb:1a:b3:13:50:e0:45:29:ba:9f:cb:
e3:88:a2:4a:c5:48:47:6e:97:a6:0c:38:5c:30:e7:
41:c4:87:bc:e8:8c:f8:0c:51:62:8d:4b:97:c8:e5:
b5:c5:e6:f5:09:5d:c6:a1:11:04:52:a1:70:18:b4:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:F8:FD:89:29:06:AE:BC:C4:95:8E:4B:9F:00:BA:B1:1D:50:15
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a18da59d-9ca0-421b-9485-39d8a99abdf4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a18da59d-9ca0-421b-9485-39d8a99abdf4/a18da59d-9ca0-421b-9485-39d8a99abdf4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
149.31.0.0/16
IPv6:
2606:d000::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27616
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d8:b0:69:4a:5c:cb:fe:79:18:31:2a:dc:f6:7a:15:ea:59:
e8:df:63:a1:2d:bd:19:8c:19:8d:ed:41:f0:9e:c0:1a:5f:b9:
3a:cf:a1:7b:47:12:27:12:f2:b0:8d:1c:ae:81:d0:02:3b:4d:
98:81:c6:9f:79:42:0e:49:f0:2c:ab:cb:af:a0:65:e9:1f:fa:
e9:a1:23:62:62:ac:c2:c2:56:26:2d:a9:ac:f3:28:54:fd:a3:
b8:3e:6b:bb:17:ab:2f:19:64:3e:d7:12:fa:ac:80:d8:91:fb:
69:9a:48:35:4a:b2:1d:5c:94:80:38:13:7e:50:20:8c:48:f1:
da:d0:2d:de:f3:e4:06:99:50:83:8c:80:39:c9:74:3d:ca:d0:
85:dd:fc:93:0c:58:e5:47:a8:50:75:a1:6e:b5:52:22:e9:29:
23:0f:ef:40:4f:f2:91:f4:3c:d2:60:a6:57:39:b2:7a:1e:f1:
7b:c0:3c:f7:82:08:71:a5:5c:f9:79:53:74:75:b1:b0:3d:72:
ec:4e:fc:87:ae:ca:58:8c:46:2c:e1:82:0c:9e:35:a7:f8:23:
a9:d5:dd:5c:d4:4b:a0:e3:81:d9:49:f8:98:48:a2:f1:4b:dc:
7f:d8:5f:b7:0d:06:5c:32:f3:54:54:8d:0f:e0:14:da:ae:6d:
0f:51:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:43 2026 by rpki-client