
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
File: 5b1072af-9cbd-4f62-8155-d5c95177bece.cer (raw, json)
Hash identifier: me/w2cm3bDPkotfTJjzLasBq3IIISPuGxD+Wgy85gyY=
Subject key identifier: 91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584D19AD010AF7B1CF8F8F11A780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 08 Mar 2026 12:45:21 +0000
Certificate not after: Sat 10 Jun 2028 12:45:21 +0000
Subordinate resources: AS: 33421
IP: 64.29.176.0/21
IP: 2605:e240::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:ad:01:0a:f7:b1:cf:8f:8f:11:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Mar 8 12:45:21 2026 GMT
Not After : Jun 10 12:45:21 2028 GMT
Subject: CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:c2:a2:b5:4e:bb:0e:95:36:ed:89:aa:69:
b7:dd:2b:ca:e5:0e:34:9c:28:65:93:50:4d:95:e9:
b8:81:53:6d:c8:c8:a9:be:a6:35:a5:19:fb:d6:e2:
81:26:f3:fa:9f:9a:2d:09:c8:bf:9c:aa:bd:6e:af:
08:c8:6e:ff:e8:58:86:96:fb:49:2a:6d:ab:a2:ce:
e0:a7:79:6f:77:95:52:3c:55:3b:2c:c6:36:00:80:
a0:e3:66:57:30:c5:34:74:3c:f2:e6:dc:5d:90:59:
0f:ae:b7:b3:04:d4:11:cc:54:ad:7e:b2:0a:d4:5a:
2d:c0:74:40:1b:50:32:fe:d2:51:55:9d:42:92:04:
18:28:a6:cc:11:af:6a:e1:31:a2:0a:f3:e2:b3:fc:
80:63:f8:fc:14:9d:cc:73:a9:75:86:fe:bd:72:24:
70:ba:1b:14:bb:bf:dd:0b:ac:35:f2:8d:b4:65:2c:
9e:8b:01:2e:c4:04:d4:1d:e9:7b:05:ca:8d:f4:18:
42:3d:bd:f6:a2:82:d6:d6:1f:49:7e:61:5c:49:f1:
02:d0:6f:fe:04:f5:8e:aa:b3:ad:5b:e2:96:af:ee:
12:81:1b:77:34:91:c6:e0:66:9f:c8:2e:84:9d:63:
ea:a8:fd:4b:56:f6:7f:51:5c:c4:c2:b4:f8:af:5b:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.176.0/21
IPv6:
2605:e240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33421
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:87:80:ae:d4:4a:a8:66:ce:63:05:87:6f:6a:f9:29:b8:06:
c9:b7:7e:52:a2:52:b6:01:c2:32:2d:e4:37:60:31:2c:d1:b4:
81:f6:2f:c6:76:70:5b:be:c3:a1:46:97:4a:3a:6d:4d:2a:cf:
ad:aa:ff:6d:9e:67:fb:fd:8d:61:5e:f6:66:d4:9c:22:02:aa:
2c:a4:e7:00:5f:a5:a1:a3:fb:59:74:cc:fc:2c:e4:f7:ad:bb:
f2:88:a1:84:d1:c6:5c:fa:77:56:ad:e1:ab:dd:66:07:12:f2:
c6:6e:e7:52:b6:09:bf:90:e9:b3:02:d3:c4:80:c7:f0:3a:c4:
77:7d:0c:f5:ed:a0:b2:24:1f:cc:ae:cc:96:3f:bd:7d:27:ff:
bf:b8:73:32:c2:af:e1:48:1a:10:0e:c4:01:7f:5b:5e:7d:14:
45:57:0b:ba:5c:41:8f:6a:da:3d:c5:5d:a7:ab:c1:b0:3b:bf:
bf:16:9a:fa:82:10:42:ce:48:9d:00:63:05:47:bf:ca:8d:b7:
6c:06:3d:a7:de:cb:cf:1b:a5:1b:ed:3c:a6:ae:a7:f9:fc:3e:
3a:12:df:13:33:25:1e:7d:98:e1:95:9d:ab:e7:71:21:93:94:
87:0e:ac:c9:e9:4e:50:81:8f:a5:bf:ce:e5:60:94:82:c5:d3:
88:ad:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:58:59 2026 by rpki-client