
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer
File: 4786912c-91d1-4981-a8a8-ab21be09e84b.cer (raw, json)
Hash identifier: RiPoEBwhfSopZAIYW43hImvl1WZMJqNmvAhevgczwks=
Subject key identifier: 01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584D75CD8A8654A74E6E69E0E140
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Apr 2026 12:45:17 +0000
Certificate not after: Thu 13 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 400530
IP: 198.190.197.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:cd:8a:86:54:a7:4e:6e:69:e0:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Apr 10 12:45:17 2026 GMT
Not After : Jul 13 12:45:17 2028 GMT
Subject: CN=4786912c-91d1-4981-a8a8-ab21be09e84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:53:e7:a2:6e:fc:a3:2e:7a:85:e2:e0:c5:
85:bf:41:f7:36:ee:b4:65:1b:49:45:b5:e8:01:fb:
13:d2:6d:78:62:36:90:3e:de:76:f8:54:b9:15:b6:
ca:3f:f7:8c:6f:ef:bf:0b:22:18:31:8f:8a:78:75:
8f:4a:64:37:9e:5e:e2:d3:ac:53:1a:d3:4b:4c:4d:
9d:b3:4a:a5:2b:26:9f:84:4c:59:33:30:ec:b9:a6:
7b:87:ee:9b:b7:45:25:9b:5a:0c:4c:0f:fa:c5:f4:
89:89:30:2a:cf:ea:bf:cf:ed:96:62:65:a7:13:1d:
4e:fb:4a:b2:d5:db:72:0f:df:c1:aa:ca:7f:ae:b3:
ec:1f:06:52:85:8b:cd:16:28:cd:29:ec:93:ec:5f:
52:19:65:c0:98:64:74:41:9f:99:23:4e:df:b3:41:
0b:4e:dd:0e:05:21:f0:5e:6b:1d:05:8c:c5:be:e0:
83:00:e7:2f:d1:df:c3:6e:6e:7a:f3:09:8b:89:b1:
6c:bf:78:47:a9:be:df:1b:ec:4f:2c:60:ba:71:df:
85:6d:af:5c:83:71:53:a1:e7:fd:60:1a:84:93:5c:
98:c1:49:8c:ca:2e:df:03:b3:52:65:aa:10:ad:1b:
68:d8:25:8d:89:09:e4:12:e8:f1:fc:31:1c:d8:38:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
198.190.197.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400530
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:3e:31:d8:d5:d5:6a:b2:55:d9:9b:1d:08:4f:70:6e:6a:40:
5f:9f:60:95:20:4f:d3:ce:28:a4:50:c0:81:3f:f4:9a:f3:60:
35:6c:9b:ef:d7:ae:f9:71:81:8d:08:a0:fc:e8:36:b3:7d:8c:
91:42:99:80:7a:fa:b3:ef:ec:05:27:d7:59:51:c6:cd:71:95:
d2:4e:1b:55:87:9f:8b:fc:a8:d2:8e:5e:14:70:05:08:d0:ed:
3f:35:5e:e8:28:40:f2:d1:82:3c:64:e0:f2:54:31:2c:b0:19:
c0:6d:10:b7:2b:e9:3d:b1:55:22:fa:6c:92:c9:bc:bd:c2:2d:
b4:a4:bd:02:2b:c7:a8:59:5c:62:58:46:8b:42:83:d7:b7:64:
75:39:a2:65:2c:15:e1:62:e0:fb:cf:4d:75:6b:6b:8a:27:d1:
6b:96:9d:79:fa:35:2b:49:80:e7:42:2c:c0:a3:74:e1:1d:1b:
e6:2e:19:15:e8:04:0c:fd:52:01:0f:34:6e:71:1f:ca:fe:f5:
69:f1:88:74:85:be:d4:73:9e:4d:7e:75:9d:1a:7b:25:37:8f:
a1:fc:5e:88:88:d4:5c:ce:06:0b:43:a1:27:68:9e:b9:ff:5f:
ab:43:a6:a6:a4:59:30:56:d3:d6:b5:6b:92:26:b7:ef:94:e4:
24:9f:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:16:48 2026 by rpki-client