
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
File: cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer (raw, json)
Hash identifier: 0Y3rQe40RwwwbtLEuKIqOGMBWGbdIkvk6URt5bcl4Dk=
Subject key identifier: 26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DDD18DB9C96800EFE86E38600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 17 May 2026 12:45:18 +0000
Certificate not after: Sat 19 Aug 2028 12:45:18 +0000
Subordinate resources: AS: 36309
IP: 66.9.44.0/24
IP: 2620:9d:c000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:dd:18:db:9c:96:80:0e:fe:86:e3:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 17 12:45:18 2026 GMT
Not After : Aug 19 12:45:18 2028 GMT
Subject: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:ef:c0:70:2b:2e:64:96:7e:2b:bc:22:98:
4c:51:1f:41:f2:e5:86:78:a8:95:cc:7a:f6:32:7b:
23:4c:43:6f:c2:94:d3:69:ba:5f:bc:95:ab:0a:dc:
7c:c1:5a:8e:be:be:87:67:44:a7:0c:14:40:94:e0:
d5:72:c8:2c:3f:c5:07:ed:57:d3:e9:29:36:ea:90:
dd:2d:18:18:63:68:73:7e:0f:18:ca:cb:ac:7c:42:
90:1e:33:86:5a:ec:7b:f9:af:b8:52:04:4b:de:cc:
2b:7e:27:8d:38:14:99:77:10:6b:c5:65:ab:0d:3d:
d3:44:dd:ab:13:41:95:b3:82:a4:98:f4:2e:5e:d0:
cb:d0:89:f5:99:43:d1:71:6a:47:85:0d:1e:90:93:
14:0b:45:da:9d:40:4c:9a:d5:c1:2c:87:80:b5:be:
87:d0:fd:2d:76:59:6d:e8:1f:a1:bf:a1:67:62:05:
d3:b6:5b:d0:3a:11:b7:90:bf:e7:7f:75:56:bf:92:
f9:02:8c:be:5f:09:6d:9e:14:38:6a:db:7a:72:d1:
43:a7:ec:98:b9:2c:c4:e2:ca:61:f7:b9:14:6b:7d:
23:ef:c9:e6:e5:a6:55:31:cb:c3:95:9b:47:fb:db:
27:c3:ed:9d:77:40:c1:07:19:f3:48:37:a7:ac:e6:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
66.9.44.0/24
IPv6:
2620:9d:c000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36309
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ea:45:68:5c:b8:96:3c:ae:d1:d7:3d:93:a1:56:53:4e:34:
51:f0:9b:ba:cf:82:39:b3:f9:4b:23:fe:88:65:97:c5:c1:53:
e9:a6:b7:70:97:ad:8f:95:a3:30:02:02:00:03:e5:db:d5:aa:
fe:24:db:b0:bc:c2:25:67:43:e3:d4:ac:91:af:d3:b6:c5:f2:
f2:18:d0:79:f0:7b:88:e6:92:05:91:28:75:60:e0:e2:7d:02:
6d:a0:06:60:86:ef:7c:88:7c:e1:a0:28:bf:76:21:57:6b:ed:
fe:77:e3:9d:79:50:fa:a5:3f:52:13:94:ba:92:c1:0f:e9:a7:
67:fa:5b:77:a8:44:46:18:8e:19:ad:5c:8d:08:38:29:a7:42:
77:b8:92:4b:41:3b:f6:b3:71:98:e5:fe:87:26:ef:03:5c:ea:
ef:bd:62:bd:bc:3a:68:6c:ce:07:d0:eb:c5:b6:95:17:61:11:
fb:58:79:76:29:0e:72:e9:f3:ec:1d:52:7d:6c:71:69:81:67:
60:fc:e6:fc:d4:00:51:d6:fb:48:a9:30:25:27:a4:91:e6:6c:
a5:56:ee:55:13:56:b6:0a:ee:c8:c2:32:66:ad:6a:02:d5:a9:
6b:43:23:a8:f3:b5:33:2b:0a:82:b1:0a:50:91:f9:34:dd:39:
be:00:6f:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 22 17:38:12 2026 by rpki-client