
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae.cer
File: 6c180c7e-2c0e-4bf6-ba86-667507e44fae.cer (raw, json)
Hash identifier: Qs2xcXCwpPouBiJDpADQXft0HrA+caoKdkGhrVfNkXw=
Subject key identifier: 03:53:36:1F:2B:C9:19:CF:FB:BB:C1:BC:38:AC:F6:24:14:88:A0:05
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D09DD8F5DF8572DF9A871ACD0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/6c180c7e-2c0e-4bf6-ba86-667507e44fae.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 02 Mar 2026 20:50:16 +0000
Certificate not after: Sun 04 Jun 2028 19:50:16 +0000
Subordinate resources: AS: 402241
IP: 204.48.38.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:dd:8f:5d:f8:57:2d:f9:a8:71:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 2 20:50:16 2026 GMT
Not After : Jun 4 19:50:16 2028 GMT
Subject: CN=6c180c7e-2c0e-4bf6-ba86-667507e44fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:4c:f0:f8:3e:6a:b4:c3:e4:3d:92:e0:ae:
f0:12:eb:9a:94:84:36:da:8a:4c:3e:3b:04:ef:05:
55:24:1d:ee:52:c5:c6:a9:55:bc:79:77:97:78:93:
78:e1:62:aa:42:26:25:08:4b:06:53:9a:7b:55:3e:
d2:84:71:73:d2:16:cc:8e:3c:b9:cd:14:d4:63:0a:
78:6c:fa:b7:7d:0b:b1:a8:cf:84:2f:76:ef:b2:bb:
0e:1f:68:ca:82:42:2f:fa:93:1b:b4:1f:0e:e4:f0:
d3:77:30:66:45:81:57:16:b9:8e:ab:88:c1:33:6f:
ac:78:cc:9a:c9:9e:a3:97:65:2b:f4:ff:3a:25:91:
aa:22:fc:0a:1f:c5:fb:39:02:75:53:68:7a:a9:ae:
e1:5f:41:46:9e:df:18:d7:5d:7e:3f:59:d3:f1:71:
49:c5:ac:c6:b7:2c:00:9b:90:26:14:87:c5:47:4b:
9b:2c:a0:3b:fa:a8:44:35:de:e3:4e:ec:c3:c7:ad:
fa:3d:7b:fc:4e:cb:37:04:aa:9e:5d:9e:4f:73:0c:
5f:b9:b7:44:a9:8f:2e:e4:a3:53:2a:87:7a:53:81:
ce:1b:58:2f:c1:ab:5c:f5:59:09:da:94:67:20:73:
03:d0:1a:61:72:c0:3d:5f:45:db:53:ee:7a:6b:ab:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:36:1F:2B:C9:19:CF:FB:BB:C1:BC:38:AC:F6:24:14:88:A0:05
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/6c180c7e-2c0e-4bf6-ba86-667507e44fae.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
204.48.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402241
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:4b:e3:a5:49:b3:be:0e:62:80:46:6a:f4:ba:85:df:a2:66:
69:58:cd:f9:c6:9a:7a:ed:41:cf:fa:e5:94:a5:22:0e:c0:a9:
ce:8e:24:7f:77:b8:09:85:28:46:09:24:59:d3:27:29:e2:7a:
48:98:19:66:e6:22:20:02:5f:6c:f3:77:70:48:55:db:c0:9b:
a2:0f:dc:63:7e:fc:b1:ab:b1:1c:62:4c:5a:0d:a6:52:b6:03:
e2:73:81:25:54:88:63:23:7a:d2:0a:86:2a:6e:d6:67:34:d0:
8e:f9:f7:f5:69:26:4a:3f:99:f5:45:c9:e8:42:22:32:27:f1:
44:ba:ae:54:34:cf:f0:fe:b7:f8:0e:c4:de:49:d3:7b:0e:60:
fc:a6:5b:f5:9b:68:79:d0:03:94:99:17:18:ac:1c:11:62:7d:
ba:34:3c:8b:1d:a3:9a:f6:ec:bc:7f:fe:99:26:89:0a:f6:94:
4c:84:d9:4d:cd:67:db:2e:38:6a:68:51:5d:ec:e4:30:73:ad:
fc:ae:a2:59:c8:81:2a:75:e8:af:a4:8e:a2:a3:34:5c:2a:15:
47:06:ce:15:bb:83:fa:57:d4:1d:62:8a:d0:88:66:c5:46:85:
4a:dc:b8:4d:84:ca:37:6a:d3:a0:6e:ae:97:3f:e3:66:f1:cf:
dd:1c:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 09:01:05 2026 by rpki-client