
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
File: a1f49b6f-a170-485e-8c07-d518b906c6ae.cer (raw, json)
Hash identifier: NsBm2vpA9t7ITYeN3SyGxnp6i3MMMK7gb2flZmrruvE=
Subject key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584F58C5D5D53A78B55AC5651700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 30 Sep 2026 12:45:12 +0000
Certificate not after: Tue 02 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 25637
IP: 64.118.0.0/20
IP: 66.228.224.0/19
IP: 69.165.16.0/20
IP: 2607:4800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:c5:d5:d5:3a:78:b5:5a:c5:65:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Sep 30 12:45:12 2026 GMT
Not After : Jan 2 13:45:12 2029 GMT
Subject: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:90:51:ee:e0:7c:70:2b:80:7f:86:60:25:
e5:ed:d1:11:1b:8a:1a:22:a3:7a:68:4d:79:1d:6b:
37:ed:c9:1e:a3:96:80:e2:b3:78:c9:51:a1:ec:f0:
18:82:26:c2:9f:e4:04:61:db:90:08:9f:e7:e2:d4:
2d:ac:ff:3b:8f:c3:66:d0:9e:df:df:98:0b:fa:2d:
b6:22:21:79:f1:01:49:42:73:c1:f5:25:9e:31:5d:
38:34:50:8f:f1:35:b1:71:cf:bd:44:6c:e2:f7:cb:
49:df:f8:fa:9e:8a:dc:31:c3:36:92:fa:bc:5d:f7:
a1:c2:b4:75:8e:d6:ec:52:5f:4d:09:43:56:4b:80:
87:e7:41:63:c8:38:1a:e4:03:d9:dd:e7:ef:2b:95:
d9:b6:67:d5:02:f3:3a:ad:6f:e7:e6:08:92:50:bb:
0a:e9:71:03:51:48:eb:f7:0f:28:3e:a2:2c:54:1c:
d4:78:de:c2:dc:27:d8:cb:03:ab:d8:2e:e7:d8:06:
05:d7:00:bf:42:48:b9:27:7e:c9:78:0c:14:7f:f0:
f9:5b:cd:ee:63:62:2a:76:60:57:f7:92:fe:e1:44:
a3:50:09:1a:01:23:b9:57:1e:e8:47:b1:9e:95:c6:
44:df:98:17:63:b4:4e:37:b2:96:d3:2c:16:7b:4b:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.118.0.0/20
66.228.224.0/19
69.165.16.0/20
IPv6:
2607:4800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25637
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:dd:fc:ca:ee:f6:e6:5a:66:84:57:b2:da:77:59:4e:40:55:
06:03:e9:f7:74:92:3f:65:0c:24:06:f7:c6:6a:d7:14:ef:19:
96:44:8b:3d:5b:aa:4b:22:15:63:ae:7e:22:83:08:23:23:97:
48:80:ba:54:0f:90:bf:f3:3d:b5:de:b3:a9:8a:6f:f9:87:1d:
a5:65:5a:6e:ab:44:89:25:f9:2b:ff:a8:f1:9f:2c:53:41:e6:
3f:83:e0:3c:71:e7:39:46:c5:62:52:1e:aa:aa:35:04:2a:d8:
50:79:d9:d4:01:9e:fc:5b:35:24:40:dc:0c:fa:fd:16:cb:12:
c9:29:ca:d8:65:53:51:68:36:f2:ab:c1:88:e1:03:43:33:ad:
d9:bc:38:ac:51:67:52:9a:87:54:6c:2c:78:07:9d:4d:69:cd:
b5:a8:49:41:2a:3c:04:fe:b0:8e:62:d1:b8:de:9c:c1:3c:ec:
8e:2b:02:71:b0:b6:77:71:e4:33:eb:f6:cc:a7:69:13:df:54:
30:22:9c:a5:cc:a2:26:ec:a2:05:4e:d0:05:35:b3:07:11:fd:
c4:0a:2d:91:46:2d:21:59:71:25:04:5d:84:8c:0e:47:c3:96:
0f:15:2d:61:53:63:3b:85:6c:5c:32:d6:ba:c9:39:53:59:53:
85:b3:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:09:09 2026 by rpki-client