
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
File: 90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer (raw, json)
Hash identifier: EOy7we57moUOWUprbBCCz7CtOgmV9ggBcXebZtyZsxQ=
Subject key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584F6985EFEF771CD4A1A2DCE800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 06 Oct 2026 12:45:11 +0000
Certificate not after: Mon 08 Jan 2029 13:45:11 +0000
Subordinate resources: AS: 10923
AS: 11824
AS: 17066
AS: 17151
AS: 17284
AS: 18432
AS: 20245
AS: 21539
AS: 21583
AS: 29726
AS: 30467 -- 30469
AS: 31907 -- 31909
AS: 32370
AS: 32960 -- 32968
AS: 35945
AS: 36084
IP: 69.59.224.0/19
IP: 74.116.144.0/21
IP: 216.115.16.0/20
IP: 2620:0:1800::/43
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:85:ef:ef:77:1c:d4:a1:a2:dc:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Oct 6 12:45:11 2026 GMT
Not After : Jan 8 13:45:11 2029 GMT
Subject: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:c9:ff:16:30:2a:53:71:f2:46:c5:9f:f1:
aa:55:73:f0:7b:4a:f5:47:3e:e1:38:82:94:48:75:
fe:83:0e:08:a2:a9:a4:a3:c3:54:1a:e0:54:13:06:
b8:2f:93:6a:e2:c9:24:36:7b:37:f4:2d:aa:08:21:
53:79:98:25:b4:24:b4:62:87:dc:b3:3c:09:b2:75:
c0:46:93:85:d0:40:bc:4c:ef:f3:ef:e6:23:03:ec:
ae:5f:08:7d:aa:b1:eb:b6:21:69:12:12:58:b0:b4:
60:8f:de:45:50:bc:32:4d:78:c3:36:9c:dc:31:78:
16:2a:ce:c0:0d:65:ca:77:d0:82:a2:76:cc:15:e8:
bb:6a:9f:31:37:0a:db:0e:d8:0a:de:7e:71:ff:1e:
33:40:a6:01:7b:22:5a:5a:dc:e1:9f:30:39:cf:98:
b7:41:d0:07:ee:ba:60:c7:79:78:db:5a:a9:3e:91:
6c:82:d4:37:ee:0e:34:f7:d3:1f:82:42:f8:dc:34:
25:40:af:35:76:ed:5a:33:ce:b7:46:e5:db:21:cc:
fc:5b:08:84:cd:7b:de:94:b0:17:d2:7d:44:52:1b:
de:0d:a4:1f:54:16:79:37:97:82:26:f2:57:27:2b:
20:1a:a1:fa:21:6c:23:af:97:89:63:a4:ed:06:bd:
ea:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
69.59.224.0/19
74.116.144.0/21
216.115.16.0/20
IPv6:
2620:0:1800::/43
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10923
11824
17066
17151
17284
18432
20245
21539
21583
29726
30467-30469
31907-31909
32370
32960-32968
35945
36084
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:90:aa:b8:46:8c:c3:e4:68:27:1e:81:88:17:7f:0e:3f:9a:
ab:be:b0:2a:48:5f:57:26:74:d3:8a:39:83:17:8a:a4:4e:c4:
23:f1:ac:5c:4a:4b:0f:f7:f1:ca:eb:e3:c3:2c:fe:95:50:a7:
67:58:17:5a:f6:17:57:bb:5b:7a:e9:ea:0c:c6:bf:01:2e:ed:
82:ee:7c:47:b5:8f:95:30:19:dc:67:d9:65:66:df:22:7a:f4:
3e:0a:9b:f6:1e:63:24:8b:25:e5:3d:83:cc:07:49:1a:38:ff:
a3:a1:75:cc:e7:4c:3c:fe:aa:d5:e8:72:76:ea:a9:84:46:4c:
12:8b:8e:0e:10:43:ae:22:e1:68:ef:a7:a8:a9:f1:fa:29:b9:
19:e9:cd:b3:8d:7c:ea:ba:78:0f:b3:9b:fc:10:74:2e:d2:1d:
3a:c2:dc:cf:95:c4:97:91:d9:26:03:0a:bc:06:56:38:b3:f8:
a8:e6:fe:5e:b0:56:2b:01:de:9f:dc:6f:e9:2f:20:74:c8:b1:
70:fe:07:d4:27:6a:3b:4e:2f:63:3f:2c:3d:18:f9:25:8a:fd:
2e:bf:b0:de:4f:68:ce:05:a0:19:82:69:6e:74:10:91:c9:de:
99:14:fd:1e:2c:fb:9a:cc:33:1f:ec:61:2b:9f:53:f7:de:e1:
01:68:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:23 2026 by rpki-client