
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
File: 429c38be-db51-4d91-a361-94ba3bfd9e9a.cer (raw, json)
Hash identifier: f6CWa6/Elwew1z3uV3Qe4rM+/DpWTfqQ6Gdw+QcVNhU=
Subject key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584EE0BA6B545F0DC6E0D6ECC998
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Aug 2026 12:45:11 +0000
Certificate not after: Mon 20 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 394310
IP: 66.179.16.0/22
IP: 135.84.124.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:ba:6b:54:5f:0d:c6:e0:d6:ec:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 18 12:45:11 2026 GMT
Not After : Nov 20 13:45:11 2028 GMT
Subject: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:0c:fa:12:e3:8c:26:66:70:e4:56:ad:f2:
f9:c5:90:c3:ae:e4:f2:ed:5e:6d:8f:41:e3:d0:17:
f2:4a:6d:be:1c:49:54:cb:20:1b:fa:37:3f:6e:c1:
c7:ca:7d:67:fc:82:51:41:d4:28:11:0f:a7:12:ab:
aa:1f:b2:5e:23:e9:19:be:2b:1e:28:57:43:f5:68:
49:bd:03:7b:e3:4f:24:72:2a:e5:5a:10:a1:eb:ff:
f4:70:49:92:80:43:ca:ac:6c:24:29:a3:9e:23:e3:
ad:15:7f:12:68:22:a4:e7:ce:de:16:3d:3a:e1:ef:
6a:4a:11:87:03:c8:d8:bf:8b:f9:c1:30:dc:84:7c:
24:37:40:7a:6b:0a:91:c5:63:e7:0a:fb:95:19:bf:
5b:58:ed:35:b1:b4:51:98:db:a7:cd:01:34:e7:72:
24:75:83:b4:57:83:9f:00:b6:36:02:1e:88:eb:e7:
dd:32:e8:89:72:00:5c:ea:d6:1a:b8:7c:90:c2:c4:
17:a7:63:cf:56:eb:1d:39:72:d7:52:6c:4e:19:8c:
2f:3c:33:ef:7e:14:a0:7d:d0:02:23:ad:a2:ad:02:
12:dc:fe:67:0c:a6:3a:7d:17:42:9b:e7:88:cb:3c:
dc:1f:75:ca:3b:b5:32:97:67:95:40:eb:53:58:78:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.179.16.0/22
135.84.124.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394310
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e7:b8:d0:7d:29:cc:a6:3c:70:a3:d9:68:f2:cd:f6:0e:89:
e6:55:a2:7a:66:0a:d3:a0:f7:3a:c8:8e:a4:c6:c4:79:85:5e:
54:4e:91:ce:97:23:68:58:f9:32:ec:4b:2b:29:0a:64:ae:67:
d1:26:a9:83:69:91:f5:12:7e:a0:18:d9:28:26:07:aa:0b:8e:
07:16:3f:33:0e:e7:b0:c1:77:19:03:2f:9f:7d:ee:94:30:ba:
19:66:23:7b:f4:48:fe:9c:77:b1:ac:29:87:49:ca:01:d8:c6:
52:a5:fb:45:5a:f8:c3:49:a1:c6:3f:75:4d:c2:36:59:d0:33:
20:e8:a4:52:82:12:dc:64:08:72:44:a1:d6:29:bd:ed:67:b5:
56:91:8a:46:af:4f:bf:9c:f3:ec:92:79:47:41:2e:9a:1e:23:
4a:1e:c9:ef:31:af:bc:bb:c5:02:9e:87:b6:05:37:48:ec:82:
5e:97:65:53:30:3b:15:22:4e:f2:d1:64:0c:aa:66:41:b3:4a:
f3:88:62:3c:2a:5a:a7:f2:81:44:dc:0e:48:2b:af:cf:76:dd:
a1:8b:51:b3:b9:c7:90:35:43:45:b4:dd:e2:24:07:68:68:ca:
4b:90:e1:64:dd:8b:1b:cd:7d:83:9d:e6:a1:06:f9:90:fb:80:
ad:9c:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 19:48:08 2026 by rpki-client