
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer
File: 42b6e093-f636-4e25-936b-6fc6232f50c5.cer (raw, json)
Hash identifier: 1IW4LJhPcasqy32xdZYD3tEGxxQLzp0qXQOZy+XsVBY=
Subject key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584EE64FC929A88543C2E3A02A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 20 Aug 2026 12:45:11 +0000
Certificate not after: Wed 22 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 955
AS: 32167
IP: 66.118.228.0/22
IP: 2606:82c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e6:4f:c9:29:a8:85:43:c2:e3:a0:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Aug 20 12:45:11 2026 GMT
Not After : Nov 22 13:45:11 2028 GMT
Subject: CN=42b6e093-f636-4e25-936b-6fc6232f50c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:82:5d:32:d0:10:7c:d0:f5:95:a2:ac:cc:
e6:55:bf:4e:d5:cd:a6:27:61:50:7c:c2:3d:a8:68:
b1:30:d0:bd:c9:8c:19:7b:67:24:14:d6:eb:5f:43:
98:2d:eb:73:4b:8e:7b:a6:86:46:ce:03:3a:03:1e:
cf:89:36:2d:2a:6b:04:9e:0e:53:34:3f:34:fa:67:
96:25:95:db:03:c9:97:40:75:26:94:56:0f:29:f2:
ac:f4:31:73:0e:9a:5a:9d:0a:ce:e0:63:ab:f8:dc:
c2:ee:81:1d:79:e0:5b:8d:0c:5b:12:5c:28:e8:54:
99:34:af:02:d8:36:e4:76:a0:a1:8c:cb:38:73:49:
a6:2e:b2:46:cf:27:8d:9c:d7:f7:73:4d:0a:2b:ad:
c2:80:49:58:d8:a6:fb:61:62:18:ee:b7:ca:33:46:
06:be:e5:67:98:02:b4:d9:3c:2b:33:9a:50:2e:e4:
f1:14:40:6e:cf:6c:1b:25:7d:27:66:2e:7a:1c:fa:
6e:9f:3f:70:6e:a8:6a:8c:69:01:de:23:bf:bf:fe:
98:d0:c6:22:45:32:8a:e5:06:62:45:44:50:73:ae:
36:cb:29:b4:68:90:d5:fd:9e:bd:d8:ac:e5:44:98:
bd:f0:94:67:8c:70:cc:8d:25:10:91:72:e9:4a:0c:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.228.0/22
IPv6:
2606:82c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
955
32167
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:84:97:57:07:af:7b:d4:b7:89:55:4c:0d:07:9c:c5:5a:a5:
f6:91:a2:6b:e8:6b:3b:0c:93:14:a6:2e:a5:ed:f9:2d:05:70:
10:9e:ba:fe:03:b3:94:0d:99:36:51:8f:f0:70:d9:cc:42:9f:
61:db:f5:79:ed:5e:30:33:59:fb:c4:9d:76:e6:3a:b0:58:a2:
50:e0:c1:af:25:1a:ea:cb:f0:06:97:b3:60:15:bd:59:71:e1:
a1:ad:21:31:b6:da:a2:f0:de:75:68:b0:52:81:e3:66:53:35:
33:a2:2c:bf:b3:f3:de:f5:0a:dd:03:45:96:eb:80:99:83:58:
96:0e:74:f4:ff:59:a0:46:b0:e3:90:94:dd:da:a9:e0:68:5c:
43:0f:89:8a:fd:86:40:4a:91:0b:ed:f9:7a:33:88:d2:68:40:
db:60:7d:94:97:eb:1c:07:fd:dc:ff:4f:8c:05:4f:61:5a:af:
37:e4:2e:34:94:62:cb:2d:de:fa:16:e4:f1:58:c2:c0:bf:88:
c2:2e:8a:86:24:6e:29:f3:5e:16:69:dc:a2:9f:e7:f3:5a:37:
8d:76:d6:30:a1:6e:ca:8e:88:95:ae:50:3f:b7:79:47:30:d2:
28:93:5e:f8:37:52:e6:ce:e4:20:93:36:6b:c4:bf:b8:89:32:
cc:fb:38:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:08:50 2026 by rpki-client