
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer
File: a5099040-6590-4125-a5e9-764c474479ba.cer (raw, json)
Hash identifier: +E/hpRKLZZtOZfHiMl0ZyewBLjEoFZFYUcNUD8zf0Kk=
Subject key identifier: 71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584F2F5811BBCDDD2F75DE126500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 15 Sep 2026 16:35:53 +0000
Certificate not after: Mon 18 Dec 2028 17:35:53 +0000
Subordinate resources: AS: 46175
IP: 67.158.240.0/20
IP: 209.41.96.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2f:58:11:bb:cd:dd:2f:75:de:12:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Sep 15 16:35:53 2026 GMT
Not After : Dec 18 17:35:53 2028 GMT
Subject: CN=a5099040-6590-4125-a5e9-764c474479ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:18:df:e6:15:21:9f:ab:59:11:fd:f1:03:
a0:70:51:14:c3:2e:e1:3b:a2:7b:e3:41:36:7c:7d:
6d:23:53:94:0c:9b:a3:b7:67:0e:b4:6d:1b:17:1e:
1d:88:f0:0e:71:f4:27:01:45:11:ad:74:a9:2d:13:
09:d1:fa:3b:83:a6:b2:92:b1:88:03:24:de:cd:a6:
84:06:b0:bf:6c:d3:28:7a:73:21:0b:f8:25:82:38:
8c:9b:1e:eb:0f:a9:29:b9:6a:44:e6:c2:36:bd:d8:
b8:f6:1b:2c:6b:90:0a:26:18:87:23:8d:ab:ba:7c:
b7:a4:93:8d:91:69:4f:dd:75:4f:17:10:15:50:fa:
52:57:e6:bb:bf:a6:80:b6:7f:bf:34:2b:cc:cb:13:
7c:8e:eb:fa:27:c2:6c:98:d9:8a:b0:b3:02:f0:53:
66:8a:8f:12:f9:78:22:2e:3c:b2:25:b9:40:cb:6b:
c6:57:18:07:ba:b6:ae:66:95:6e:77:66:da:cc:18:
b1:91:5a:45:02:80:d0:8a:8a:ce:d7:d3:b1:b3:9c:
ad:9e:b0:46:dd:8c:d5:b2:fa:e1:04:05:39:f1:ff:
41:c9:27:9d:8c:f5:0a:16:af:cf:0d:48:7d:6e:c3:
dc:21:11:8f:8a:c2:25:e3:9a:81:e1:9a:b9:cc:a9:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
67.158.240.0/20
209.41.96.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46175
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:65:9a:50:af:43:6e:03:6d:61:94:99:65:cb:b5:a1:08:5c:
54:17:3f:da:61:c2:02:33:80:c0:23:a8:f1:98:a9:51:c8:0a:
38:bc:80:5a:51:6b:14:f1:60:45:a3:d1:03:a1:39:86:4f:29:
1b:2d:3f:2d:e4:61:bd:16:eb:fd:b9:af:0f:da:90:a9:2a:e0:
b4:89:fe:60:01:e1:0c:a0:f4:6b:29:a4:ec:67:4a:b3:de:ea:
0d:64:72:c4:cb:48:d8:1a:fc:23:88:31:d0:f1:bf:67:ab:d4:
ad:82:36:1d:32:88:9b:bd:9a:25:e4:90:3b:0e:50:9d:47:49:
7a:67:a1:f5:32:7d:d6:f7:a4:6b:ea:a4:60:92:80:9e:a8:88:
1b:93:cd:75:59:f7:c4:b0:4d:2c:04:66:59:c0:91:7f:52:fd:
de:22:a7:73:82:ef:fe:e0:12:2c:3f:23:28:e2:ea:13:9c:ca:
48:54:42:63:57:ce:1c:2d:95:a3:c0:2b:0d:0d:3f:c2:d6:20:
ed:42:84:cd:da:90:0c:9e:93:c7:37:06:f5:98:71:8a:6e:be:
30:ec:e3:a5:ce:f9:4a:1f:1b:8f:c7:c9:25:e3:d5:15:34:0a:
17:d7:ed:9d:3c:88:55:38:2d:1e:ca:b4:0b:5d:e1:49:a5:60:
0f:fd:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 11:30:45 2026 by rpki-client