
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
File: 811bd2ac-c53d-40a6-bfa4-275c2241af63.cer (raw, json)
Hash identifier: HPFkeETWwNho2nYTZhxeSih7af2p8LqymHiNCdAKLt0=
Subject key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584EC79A434E36E91342D93EF890
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 09 Aug 2026 12:45:11 +0000
Certificate not after: Sat 11 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 400597
IP: 23.141.8.0/24
IP: 217.149.96.0/21
IP: 2602:fb1b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c7:9a:43:4e:36:e9:13:42:d9:3e:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Aug 9 12:45:11 2026 GMT
Not After : Nov 11 13:45:11 2028 GMT
Subject: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:cc:9e:f1:79:85:e0:37:28:9a:a8:07:70:
40:19:7d:ae:da:3b:03:b4:b8:95:c8:16:bb:c2:7e:
60:d9:7d:20:7f:ef:f4:3b:e7:82:5d:6e:3f:10:bc:
ca:95:d8:f9:67:df:ac:e7:23:cd:dd:72:dd:01:5b:
30:90:e4:26:b1:53:d8:35:d7:51:e2:c3:de:9b:eb:
d6:22:ff:61:d2:08:82:75:11:0f:2e:56:53:f6:3b:
66:0e:f7:7c:7c:1b:0c:dc:20:87:0a:6d:93:49:b5:
2f:15:d6:7c:01:85:0f:f8:cd:48:b6:42:1f:f5:08:
70:e8:c4:59:ba:43:37:b7:bc:a5:b6:bc:9b:69:04:
3f:d2:0f:dc:a3:85:48:e7:b9:24:b5:bd:50:01:16:
7c:30:5a:a7:23:45:75:84:d9:18:99:b6:fb:14:96:
f2:65:f4:3a:c8:d5:48:53:3e:84:25:23:31:1e:85:
e9:b4:4a:8f:17:9a:0b:e6:d8:9c:19:14:86:15:91:
83:17:ce:fb:72:ff:a4:db:a8:56:86:79:b9:0e:77:
31:89:60:03:bc:af:c9:81:f4:90:87:03:83:61:2b:
86:c7:d3:33:7f:65:1f:50:f8:37:6c:eb:0f:d1:b6:
52:cd:a2:70:47:1d:3f:3e:a6:cd:6c:10:2c:a3:ca:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.8.0/24
217.149.96.0/21
IPv6:
2602:fb1b::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400597
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:c1:e4:d8:eb:c5:37:4a:aa:b4:9c:fe:9c:d2:47:c0:db:60:
ca:c0:fa:a3:5b:31:30:18:79:65:e0:75:52:55:76:e0:96:3d:
64:ef:34:4a:43:f5:d9:5a:2d:64:c2:d5:40:d0:23:e6:7b:83:
42:f0:9a:a3:70:85:e0:76:c7:fb:24:fd:79:43:3f:76:5f:3d:
4d:46:7b:c1:74:8b:ef:11:ff:7c:52:84:a8:d4:45:c9:9d:ca:
1d:aa:6b:4f:17:2f:d2:be:15:1d:87:d0:e4:6b:f4:1b:6c:de:
92:37:ea:a7:7a:cc:d0:e6:7a:98:af:ba:41:2f:bf:60:54:bc:
46:bc:d5:e8:81:a2:60:98:01:2c:4a:e1:d3:0a:c7:08:f4:50:
14:ef:bb:5a:4f:31:46:0e:ca:ca:87:a9:77:1c:9a:00:fa:f1:
4f:a1:d7:a8:94:91:33:9e:b5:8f:46:1e:30:5d:d9:c0:5a:37:
0e:f7:c1:a1:e2:15:c6:c2:ce:3d:72:d3:b3:fd:9a:77:20:ab:
33:cf:90:5c:ea:f0:7e:25:cd:a7:53:6f:88:61:4c:ea:8b:5c:
4c:8c:c8:4d:1e:55:ad:ac:a3:ac:11:0d:b8:de:4b:e4:b0:46:
17:46:0e:a0:06:ca:f5:f4:ff:e8:25:a1:25:9c:06:52:e0:c7:
8c:20:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:35 2026 by rpki-client