Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
File: 35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer (raw, json)
Hash identifier: 1qcPlcoRv3lSWW7FkfFryHP3PxYrZlvpM27SIjn/C2I=
Subject key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer: /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial: 010D0C9F4328584D8FAEFC8EBEE751F3D75AA000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 19 Apr 2026 19:14:45 +0000
Certificate not after: Sat 22 Jul 2028 19:14:45 +0000
Subordinate resources: AS: inherit
IP: inherit
IP: inherit
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8f:ae:fc:8e:be:e7:51:f3:d7:5a:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Validity
Not Before: Apr 19 19:14:45 2026 GMT
Not After : Jul 22 19:14:45 2028 GMT
Subject: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:08:39:7e:fc:fd:bc:eb:a0:c6:20:0c:e4:
c8:8b:53:0a:23:e5:ca:57:79:65:47:6d:0e:26:be:
49:f1:8e:50:a2:8f:45:67:09:98:3f:51:e6:68:5b:
c6:41:64:10:92:e1:cd:6a:0e:05:21:12:4a:71:23:
ac:52:1c:e2:39:71:50:2e:1c:05:92:2a:0f:2b:70:
a3:b0:ab:b2:ec:4f:cf:97:f3:47:62:22:42:5e:e7:
e7:13:4f:d0:1e:bf:8b:e0:b2:be:ad:90:30:21:36:
d2:23:3b:62:a0:fe:c5:16:8a:e7:6d:01:e6:52:da:
ac:7a:57:e7:14:ca:9b:fc:fd:01:c2:da:57:e3:d3:
8a:50:b4:15:9c:56:e5:69:50:a7:e9:d1:fd:fc:e9:
cc:df:44:1d:9a:18:c9:64:ab:18:b7:52:27:d8:74:
5a:9a:9c:8b:13:b3:61:78:d3:4c:d7:9b:d8:1b:c5:
a3:cd:c4:06:f6:05:44:bc:08:10:76:ba:f7:3e:1a:
bd:5f:51:58:96:87:6c:d2:23:80:0d:73:01:4e:9d:
d6:72:93:4d:b0:c3:0b:27:ed:31:25:69:29:ea:84:
2c:8f:f6:fd:76:1f:48:a6:b0:03:03:f4:1e:3d:60:
a6:7b:7e:b7:8c:7c:20:d6:4b:96:8f:12:2a:1f:b4:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
X509v3 Authority Key Identifier:
keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:6f:21:7e:99:2d:69:55:b3:b5:91:db:20:c9:be:2c:b8:28:
18:8b:23:78:7e:f5:b3:d5:d1:88:49:d0:c3:68:df:92:4b:de:
91:47:4d:ba:07:68:a4:6a:06:99:b7:2e:db:b2:25:c5:03:a7:
29:1e:d6:ff:25:a6:99:8d:99:c3:eb:3b:50:5d:24:a8:dc:b4:
5a:d9:18:c9:c4:45:47:64:68:2c:0d:be:85:f9:9d:5f:15:eb:
15:cb:f3:ef:e2:0a:bb:5d:e2:87:20:11:8a:4d:00:de:f5:a5:
00:c7:01:2b:61:07:ec:ee:9f:ee:ec:72:50:ff:e4:51:5d:25:
b7:39:94:e2:e3:c5:58:9b:df:99:f3:6b:62:f1:51:49:fe:d5:
be:f5:ce:9c:5c:54:24:5a:5d:7c:1d:ab:87:d7:67:0c:d7:5d:
97:fe:6f:86:f3:12:91:b1:4a:57:32:6a:a6:8f:c9:eb:7b:c4:
78:25:72:9a:16:ba:fb:35:cb:a0:23:4b:85:58:0f:06:b5:13:
cc:d7:74:6e:cf:6b:8d:b3:ed:8a:f1:ef:79:9b:ef:61:26:75:
7f:d6:7e:de:e7:32:c2:56:d8:48:9d:0a:4e:f4:56:b2:33:48:
77:46:0b:4d:15:38:57:37:51:04:7f:51:34:2d:bb:09:2e:36:
7e:9d:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:53:40 2026 by rpki-client