
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
File: 43dfd777-de1f-43d4-839f-074c5f3bd298.cer (raw, json)
Hash identifier: BCl6hkxlKf+2KCX/dQFs66t8T2U/+VZHLXCqloBainY=
Subject key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E9EA83977283DCA49B0CA5580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 25 Jul 2026 20:45:11 +0000
Certificate not after: Fri 27 Oct 2028 20:45:11 +0000
Subordinate resources: AS: 400110
IP: 184.169.0.0 -- 184.169.47.255
IP: 209.140.64.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:a8:39:77:28:3d:ca:49:b0:ca:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 25 20:45:11 2026 GMT
Not After : Oct 27 20:45:11 2028 GMT
Subject: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:95:73:7e:2f:d6:f1:d0:60:ab:9c:c1:69:
88:49:6f:5a:21:4e:a7:33:c9:60:4f:fe:c0:db:ca:
84:66:b8:ac:78:b2:75:2f:ca:af:a9:ae:eb:e2:ac:
2e:04:62:46:8b:2d:1c:16:4e:bc:58:53:d6:8f:45:
b3:37:9f:05:ea:75:de:f0:ec:e0:97:62:60:71:38:
0c:36:d8:85:68:30:18:1b:a4:f8:4d:4f:90:f8:bb:
ce:b6:96:c9:70:67:9d:5f:a2:2c:b0:f8:7c:f2:57:
e8:8f:20:81:34:22:e2:48:63:e5:59:c5:02:d8:4f:
be:2e:e2:9c:3f:c1:af:69:b4:24:65:eb:78:0c:7c:
e2:56:09:5a:91:ab:d0:a9:e1:74:9a:5d:17:0f:9c:
99:bf:30:ec:73:67:a1:79:35:ae:33:32:9f:c1:1d:
8b:4e:95:2a:e3:d3:f1:51:29:3c:78:15:c7:3e:19:
89:82:69:99:72:1a:45:84:a4:3b:f3:cb:af:19:c8:
ff:1c:1a:34:9d:78:b4:d5:45:a7:d3:91:77:0a:f3:
24:67:13:41:a4:50:46:c4:b7:c5:82:25:45:c6:8a:
46:ef:77:7d:25:70:7e:77:af:a7:f8:d0:74:50:d4:
87:86:df:0e:61:7b:d4:8e:8e:a5:2b:18:cc:e2:68:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
184.169.0.0-184.169.47.255
209.140.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400110
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:7e:68:9a:3e:be:04:bc:54:34:34:c9:cc:f4:22:98:b5:9b:
2a:44:4a:3b:fd:98:a4:02:39:e8:7b:54:70:0d:99:5b:1d:fa:
1a:78:0e:be:fe:fc:a8:2c:04:93:53:d5:1e:37:d0:8c:0f:1e:
e0:93:d1:a4:bc:79:1a:83:ed:ce:cd:bd:04:58:93:e3:be:11:
43:82:21:e0:a5:c6:6a:a9:6b:32:cd:f6:1f:9a:c8:cd:c4:3f:
6b:ab:93:ad:b6:10:83:6a:bb:18:89:d6:90:ac:71:84:f0:b3:
9b:be:6e:d7:ce:0f:29:55:5a:68:b4:6e:87:02:26:cd:a6:6e:
d4:b1:5e:15:c3:7d:62:b5:8c:a8:33:05:a6:dc:b9:85:1c:c8:
38:d2:94:73:04:d0:cc:7a:1c:a9:ad:e3:bd:a7:44:b3:24:26:
5c:4a:4b:f6:66:13:53:2d:50:1f:9f:11:47:43:14:2e:58:1c:
f9:f9:ff:42:80:9f:88:6c:c3:d7:b7:fc:7b:6d:1c:5d:e6:40:
cf:c2:1f:94:cb:01:c0:85:23:7a:2a:00:6c:2b:68:df:e1:ad:
33:29:57:e0:4f:86:3f:64:d3:99:17:9a:03:bd:c6:00:14:7f:
d1:e3:30:a4:db:af:7c:67:27:65:96:38:70:0f:03:70:65:0d:
08:4c:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:37:26 2026 by rpki-client