
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
File: 9050423a-b7ae-4879-a880-ea3be6e193a8.cer (raw, json)
Hash identifier: loq+7uuuq0oxjJoA2Wj70+/d08Jy8e/yxiydzI+LlhM=
Subject key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584D571803B3BF9269F679220900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 30 Mar 2026 12:45:17 +0000
Certificate not after: Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 22188
IP: 23.134.96.0/23
IP: 168.151.10.0/24
IP: 192.111.80.0/22
IP: 2604:bc40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 05 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:18:03:b3:bf:92:69:f6:79:22:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Mar 30 12:45:17 2026 GMT
Not After : Jul 2 12:45:17 2028 GMT
Subject: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b9:a4:66:92:f1:aa:fe:ae:b4:e4:0f:7f:04:
66:cf:3d:85:09:db:c8:7d:fb:4d:1e:0f:66:b6:1c:
fe:3e:47:2f:ae:26:03:02:c8:67:5f:a5:6c:be:69:
dd:9a:b8:69:13:62:28:d1:75:24:69:33:b9:03:f8:
a6:bd:cc:df:ee:e5:0c:17:fc:8b:6d:d5:37:15:c7:
10:20:99:b6:1b:17:27:da:6c:a7:32:48:ee:64:a2:
e3:3a:7a:02:47:d7:2b:5e:64:46:f0:a3:b4:48:a7:
83:ce:de:4c:38:31:4b:99:06:64:a8:db:73:4e:e5:
ca:8b:00:fa:4b:51:7f:e3:17:86:4c:c8:a0:e9:6b:
49:6a:dd:14:c5:7a:8e:18:0d:8d:7f:0b:d3:59:ea:
04:b3:a0:4b:de:2d:7d:34:f3:2f:04:d8:b2:c3:07:
ce:c0:31:34:b0:15:4a:47:ef:57:13:fd:1c:dc:e6:
fb:8a:f6:e0:9a:56:65:4d:a7:e0:23:0a:e1:82:57:
f7:88:11:0d:23:30:88:be:7c:b6:e4:50:cb:81:93:
a9:90:55:b1:71:1a:ca:a0:35:0f:18:88:2e:57:19:
7a:f5:a8:7e:9e:22:37:00:d0:80:55:6d:3c:8e:c4:
2e:fb:8c:e8:7b:62:4a:f2:79:3f:97:7d:0a:7c:64:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.96.0/23
168.151.10.0/24
192.111.80.0/22
IPv6:
2604:bc40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22188
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:9c:81:83:8a:48:d4:fd:34:94:3c:9d:c2:71:af:f3:de:bb:
30:4b:86:6c:d4:98:19:65:67:20:0d:ce:67:14:f5:f0:54:0a:
cc:34:31:31:fb:ca:af:19:3b:7b:9b:31:af:67:3b:fa:f8:4c:
f4:ef:78:72:6a:e2:01:31:bb:4b:94:14:80:04:9c:b1:06:97:
00:95:7d:f6:78:08:59:64:eb:1b:ce:bd:0f:a8:1b:92:e0:7e:
9c:08:8f:6e:98:28:4a:a3:83:fd:7c:2c:8f:5c:1b:9a:f8:c8:
8f:00:f4:9f:74:1b:47:37:3c:42:03:da:f1:90:ed:44:dd:27:
cf:69:f2:97:48:1e:f3:b6:9f:cc:60:fa:f9:7a:da:01:56:3f:
1b:f9:a6:c8:24:2e:b6:3d:8e:ae:66:f5:ee:f6:d5:8c:5c:81:
f8:ec:00:9a:7b:1e:46:28:a0:72:5a:89:eb:b8:27:6d:5c:9e:
0c:d7:1c:94:cd:1c:d1:83:f2:fd:38:24:4a:a9:23:28:9b:77:
ce:5f:4f:58:bb:82:42:ca:ba:0e:b0:d9:b2:c3:c5:87:1e:f5:
3e:7d:e6:1b:bd:e1:96:18:95:ea:0a:fc:e4:70:8c:a3:c9:eb:
6b:29:d4:80:bd:2c:5c:4c:8d:d9:2e:c6:ee:55:6a:39:fd:c1:
99:fb:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 13:04:16 2026 by rpki-client