
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
File: e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer (raw, json)
Hash identifier: 6juhVqrRIqiuhnRR8mXZpKuY26ZE5lNam135eVDsGCk=
Subject key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E280226B1B369168A4064CB80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 13 Jun 2026 08:45:11 +0000
Certificate not after: Fri 15 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 10442
IP: 165.224.0.0/16
IP: 2610:e8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:28:02:26:b1:b3:69:16:8a:40:64:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 13 08:45:11 2026 GMT
Not After : Sep 15 08:45:11 2028 GMT
Subject: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:59:e4:7b:cd:3b:b4:1d:35:cc:b4:93:88:
f0:42:33:5b:3c:fa:02:11:0f:be:db:87:72:a5:12:
c0:a7:2a:c0:fc:16:55:a5:20:c7:cc:7e:54:24:51:
98:84:de:0e:4a:f9:85:f3:84:65:4f:08:23:75:3f:
0c:fc:c6:08:c8:4e:b0:e4:ce:9f:42:2f:38:94:4c:
db:af:0e:50:c5:ba:f4:3b:11:ad:0f:59:dd:10:73:
51:cb:27:ae:bc:25:10:21:00:94:a5:c5:71:38:f1:
e7:8b:f3:d0:d9:2b:5a:db:49:8f:46:2a:1b:dc:3e:
25:f1:89:02:38:fb:b6:1e:f3:5a:f5:02:ff:4b:8c:
4f:65:63:08:be:96:6f:35:a6:60:e3:29:04:57:81:
91:d5:51:ff:48:de:2d:a9:33:41:cb:73:37:76:b0:
54:f2:66:aa:8c:3d:da:ba:b9:1e:3b:a6:74:c2:21:
e8:01:28:bb:cf:ee:75:3f:10:d7:09:0d:89:68:58:
d8:20:2a:69:d3:36:b2:25:6f:64:bf:bf:e9:82:12:
d3:d2:b6:a0:f3:88:8f:a6:43:5d:0e:1e:28:78:55:
5c:b7:41:61:d5:3d:04:52:06:26:5f:85:41:44:09:
d1:0a:f8:b6:a3:de:6b:66:a4:b9:5f:dd:e9:37:f0:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
165.224.0.0/16
IPv6:
2610:e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10442
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:5e:56:cb:ca:73:37:d5:20:ab:f8:66:a2:fd:79:e8:45:2c:
3e:21:3a:c7:47:29:24:4d:2c:bf:39:19:c0:74:af:65:1e:67:
95:75:58:6c:a1:3d:f1:da:2d:96:02:c3:f3:cc:ee:9f:9b:8a:
ae:90:d2:0f:09:3f:6a:fd:c7:f7:c2:ab:39:da:b7:17:1e:39:
89:d4:02:3f:55:34:3f:27:69:1a:e8:a6:ba:c6:72:25:48:9d:
29:51:4b:0d:d1:5e:eb:b3:c6:b0:27:10:e0:92:93:ee:d6:a4:
ff:14:40:cd:11:2f:7a:2d:81:47:13:eb:31:7c:96:7c:0f:10:
2a:11:a3:2a:6d:45:df:51:c5:d0:97:4b:dd:98:3e:74:cb:f4:
6f:43:f3:5f:4e:89:71:b7:ba:a1:78:05:60:6d:9d:e3:0f:4a:
5a:50:74:f8:e0:58:6a:e3:6c:72:fa:4e:05:24:1c:66:e9:b5:
ee:20:8e:4a:16:b2:f1:9a:5c:9a:19:3b:a4:94:14:ad:ca:c1:
d3:19:d6:b0:a1:c0:5f:d3:64:35:fc:83:6a:4c:78:96:10:2e:
e4:d0:cb:0d:a2:07:8e:ed:8c:3d:7e:d7:1c:75:d5:10:24:35:
14:c1:f0:48:28:5f:8c:dd:db:41:8a:6c:85:f9:73:b9:70:8f:
12:cb:38:5b
-----BEGIN CERTIFICATE-----
MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWE4oAiaxs2kWikBky4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYxMzA4NDUxMVoXDTI4MDkxNTA4NDUxMVowLzEtMCsGA1UEAxMk
ZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0ZDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9Z5HvNO7QdNcy0k4jwQjNbPPoCEQ++24dy
pRLApyrA/BZVpSDHzH5UJFGYhN4OSvmF84RlTwgjdT8M/MYIyE6w5M6fQi84lEzb
rw5Qxbr0OxGtD1ndEHNRyyeuvCUQIQCUpcVxOPHni/PQ2Sta20mPRiob3D4l8YkC
OPu2HvNa9QL/S4xPZWMIvpZvNaZg4ykEV4GR1VH/SN4tqTNBy3M3drBU8maqjD3a
urkeO6Z0wiHoASi7z+51PxDXCQ2JaFjYICpp0zayJW9kv7/pghLT0rag84iPpkNd
Dh4oeFVct0Fh1T0EUgYmX4VBRAnRCvi2o95rZqS5X93pN/AmzwIDAQABo4IEKDCC
BCQwHQYDVR0OBBYEFAYhh3tP75Hahk33F9Ef0RjSslOrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
Mzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UzOTQyNWM1LTUyZTgtNGVhYy05
ZTFkLWIwNzA3OWM4NGQ3Yi9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzlj
ODRkN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH
AQcBAf8EHjAcMAsEAgABMAUDAwCl4DANBAIAAjAHAwUAJhAA6DAZBggrBgEFBQcB
CAEB/wQKMAigBjAEAgIoyjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALXlbLynM31SCr+Gai/XnoRSw+ITrH
RykkTSy/ORnAdK9lHmeVdVhsoT3x2i2WAsPzzO6fm4qukNIPCT9q/cf3wqs52rcX
HjmJ1AI/VTQ/J2ka6Ka6xnIlSJ0pUUsN0V7rs8awJxDgkpPu1qT/FEDNES96LYFH
E+sxfJZ8DxAqEaMqbUXfUcXQl0vdmD50y/RvQ/NfTolxt7qheAVgbZ3jD0paUHT4
4Fhq42xy+k4FJBxm6bXuII5KFrLxmlyaGTuklBStysHTGdawocBf02Q1/INqTHiW
EC7k0MsNogeO7Yw9ftccddUQJDUUwfBIKF+M3dtBimyF+XO5cI8Syzhb
-----END CERTIFICATE-----
Generated at Sun Jul 19 12:38:09 2026 by rpki-client