
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
File: b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer (raw, json)
Hash identifier: PaLEjML9IIz450501IzOxMXMzKjI8dLcbcMNUW5Oh0w=
Subject key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E656D3435D7D7E6E800692A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 05 Jul 2026 08:45:11 +0000
Certificate not after: Sat 07 Oct 2028 08:45:11 +0000
Subordinate resources: AS: 12131
AS: 395678
IP: 23.161.32.0 -- 23.161.34.255
IP: 23.187.0.0/23
IP: 2604:d2c0::/32
IP: 2620:1df::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:65:6d:34:35:d7:d7:e6:e8:00:69:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jul 5 08:45:11 2026 GMT
Not After : Oct 7 08:45:11 2028 GMT
Subject: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:78:f6:91:e0:c9:5c:04:48:8d:31:79:bd:
a1:2e:b3:95:e8:99:77:63:9a:bf:43:a7:19:98:d4:
2f:ac:14:93:cd:f4:66:d0:99:fc:21:9c:c8:4e:54:
23:ff:82:44:81:e4:63:63:2f:38:c3:e9:01:f6:b7:
a0:49:a7:bb:f5:6e:d3:ff:2c:b1:66:1f:83:11:d8:
3c:3b:32:fa:5f:d4:80:c6:d3:3b:2e:3c:e0:7c:cb:
5e:fb:b2:4e:22:88:3c:ba:9d:32:43:6d:2b:86:5b:
d5:8b:19:2b:7c:dc:ae:13:66:7d:51:82:8c:d8:79:
c7:6b:08:1a:8e:60:ed:ec:75:d2:f6:7e:ee:29:56:
9d:4a:e7:84:4b:a4:88:a0:cd:6a:ab:1c:51:61:9f:
4a:57:98:42:46:58:23:ee:54:99:c6:c8:98:75:14:
ce:57:e1:3e:00:e1:27:49:ca:2b:5c:0b:a3:25:70:
9f:af:54:eb:80:ad:e8:e1:b8:0f:a4:90:c9:8e:b6:
8f:ed:00:b7:7a:0b:ee:24:34:ca:13:5a:f9:29:49:
3a:28:07:5c:c9:4c:e6:f7:94:28:09:04:44:70:c0:
98:80:ed:4e:69:a2:b1:19:cb:e6:43:11:87:94:1b:
21:a5:23:c6:83:ae:f6:02:10:9a:95:c8:39:e3:24:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.32.0-23.161.34.255
23.187.0.0/23
IPv6:
2604:d2c0::/32
2620:1df::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12131
395678
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b7:67:6c:33:31:56:be:9e:73:22:cd:d0:81:74:08:56:88:
a7:01:bd:10:ec:d1:5b:e5:79:c3:11:e9:ec:df:48:64:e3:0e:
03:ee:50:c6:ec:6a:33:af:5a:64:62:2a:05:7f:e1:97:b7:3a:
01:36:f0:59:d8:27:a8:88:34:9b:58:21:3b:9c:69:e3:35:c3:
fc:72:19:05:cf:2f:bf:83:e7:37:7b:3c:ea:76:7e:0b:d0:1b:
68:be:1c:c1:4c:29:90:20:cd:e4:fb:fb:e1:67:48:ad:ce:16:
e8:da:db:98:a8:23:e3:cb:9a:56:5a:b0:e4:d8:a8:cc:39:93:
57:ac:09:ab:f2:44:af:e5:ca:06:12:1b:fb:ba:46:11:b9:e2:
cd:2e:4a:dc:38:4a:83:fc:27:38:0b:51:d2:73:2a:ad:c2:8b:
5e:c8:bd:c2:8c:c1:bb:4d:37:6e:41:ae:98:9a:ad:de:95:e8:
e2:a2:3c:da:ea:ab:ec:76:9d:36:1d:9a:2d:65:64:51:b7:b3:
52:b7:40:e1:e6:17:ea:20:50:45:9d:33:b3:66:b1:7c:83:fe:
19:16:6f:29:e9:51:33:18:01:78:56:16:fc:62:1e:72:68:b0:
43:ff:cd:b4:90:f5:7f:20:db:dd:98:fb:b1:22:5f:6d:ed:1d:
6d:da:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:11:09 2026 by rpki-client