
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
File: e102a5ad-786a-444b-bd0b-6bd116f20466.cer (raw, json)
Hash identifier: 3XyKrghWPIqIu3hcR7z4E/vO5zfJSJSXVSmgFCRHfrM=
Subject key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584E7362A0AE422EE42AD7093200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Jul 2026 08:45:12 +0000
Certificate not after: Thu 12 Oct 2028 08:45:12 +0000
Subordinate resources: AS: 393290
IP: 162.223.108.0/22
IP: 2604:9d40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:73:62:a0:ae:42:2e:e4:2a:d7:09:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jul 10 08:45:12 2026 GMT
Not After : Oct 12 08:45:12 2028 GMT
Subject: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:4d:d5:d2:4e:09:e6:08:1b:7d:82:c2:96:
17:a3:31:f5:0e:75:4f:71:a2:4a:22:4e:2d:00:8f:
2b:95:fb:ba:7c:30:57:58:b8:51:57:fa:fc:fa:c2:
1e:d8:53:7d:76:3e:92:1f:89:1e:dd:3e:78:40:20:
39:de:ef:6d:27:b7:4f:20:fc:bb:4a:38:dd:18:98:
82:50:b3:ac:82:3e:2c:b8:6e:11:9f:19:db:da:9f:
1a:91:0e:a7:76:57:6f:de:5c:5b:04:30:f0:10:e3:
79:19:f5:cb:ce:bb:de:68:9f:8b:76:29:04:2b:cd:
b8:9e:7c:d2:0c:a9:50:6c:aa:f1:90:0c:0e:b7:c4:
ac:e5:30:c3:03:65:00:1f:e1:08:a3:d9:81:2c:5c:
58:bf:06:a6:a8:12:72:95:91:41:bb:51:5c:ef:a1:
0f:56:7c:f1:a6:22:76:ed:d7:77:3c:d9:ff:d4:cd:
73:cf:3f:e8:c0:28:6a:46:b3:ed:dd:fe:ab:64:1a:
41:d4:b2:2f:5a:88:95:33:c2:6f:24:fc:6b:2f:8a:
c0:1a:66:1a:9e:5f:c6:ae:6a:62:80:23:63:9c:2b:
70:ae:9c:5a:9b:32:15:ce:6f:be:81:fe:a5:86:ba:
f7:bf:a1:a9:da:69:79:54:07:fd:99:01:b7:b1:36:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.108.0/22
IPv6:
2604:9d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393290
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:b9:ec:eb:e6:1c:6a:1e:33:b8:29:38:a4:00:22:bd:d0:8f:
b1:25:b0:35:e3:df:c0:d6:b1:b5:ec:dd:e0:e2:f3:c9:d6:34:
df:15:64:11:26:ca:ff:10:26:56:3c:b4:79:61:a4:f9:c3:da:
66:08:62:a6:b0:35:cf:a5:e4:0e:c4:1d:27:c9:9d:a1:33:42:
f6:0f:0e:db:2b:07:8c:e5:5b:4f:a4:6c:d4:9a:b4:a0:e2:bc:
a9:1d:8a:50:ad:9d:31:45:18:d6:5f:c0:48:7b:64:0b:2c:69:
a4:45:59:c3:5e:11:dd:f1:1c:df:de:e0:9f:1c:40:a8:b3:25:
77:4c:39:3e:70:67:02:0e:8d:cc:59:3e:d2:7a:13:b1:80:bf:
df:0e:eb:07:05:64:fa:5a:40:cc:95:05:43:0a:2d:e4:5b:f9:
74:35:f6:4c:c9:34:6d:79:ba:41:55:be:d1:e8:40:7a:e3:96:
bc:54:a1:f0:8e:1a:fa:26:b7:21:34:80:b1:b1:c4:6d:b3:67:
c4:50:24:b1:71:e5:80:8b:24:65:7b:ab:ef:a3:8a:42:28:33:
7e:74:e9:db:bc:a8:19:09:46:90:9e:15:14:5f:75:6f:f5:16:
fd:d5:e3:fc:16:c7:0e:ab:b8:75:25:7d:dc:9c:f0:20:08:98:
e7:a0:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:10 2026 by rpki-client