
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7b901a6-6b3a-4ffb-97cf-2ca504df9940.cer
File: a7b901a6-6b3a-4ffb-97cf-2ca504df9940.cer (raw, json)
Hash identifier: R5GmDBOgRWIsDIdF9sGQGKnxZRSU7AnPYROHtTkvS+E=
Subject key identifier: 53:BF:0F:74:21:22:5A:D7:EE:CF:81:8D:0A:F3:86:10:43:BB:6C:3B
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D4FD7ED3F62DB4561F7BE6B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7b901a6-6b3a-4ffb-97cf-2ca504df9940/a7b901a6-6b3a-4ffb-97cf-2ca504df9940.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7b901a6-6b3a-4ffb-97cf-2ca504df9940/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Mar 2026 22:25:30 +0000
Certificate not after: Thu 29 Jun 2028 22:25:30 +0000
Subordinate resources: AS: 402324
IP: 2602:81d:7000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4f:d7:ed:3f:62:db:45:61:f7:be:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 27 22:25:30 2026 GMT
Not After : Jun 29 22:25:30 2028 GMT
Subject: CN=a7b901a6-6b3a-4ffb-97cf-2ca504df9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:c9:4f:9d:b2:fd:f0:8b:10:b1:85:a8:c8:
88:dd:06:ff:9e:11:2e:93:0c:58:d0:6c:fa:2b:19:
35:23:60:1f:93:b9:27:d3:8a:60:fb:a4:a2:6b:d9:
5e:59:f6:0f:bf:12:73:70:f4:aa:57:ab:13:05:c3:
d4:93:31:a7:78:f6:13:61:e3:a8:52:57:90:45:a5:
0b:65:c5:6b:c8:b7:28:10:6b:1a:98:e0:51:13:8b:
58:be:c8:17:6b:3e:53:9d:33:dd:12:b3:4d:50:7b:
b0:55:b9:db:21:ad:4e:14:a1:7e:d4:60:26:1a:1e:
81:83:fd:43:a8:a0:75:0a:52:e2:e0:8e:35:1c:00:
d2:c8:ac:07:f5:01:72:f3:50:83:65:5f:e5:08:c0:
36:63:42:f4:a3:e9:b7:27:00:08:87:f6:70:02:69:
87:78:bf:ad:15:0b:da:00:95:bb:41:19:97:df:a2:
bc:56:99:66:21:6f:36:f5:6a:1f:ea:82:39:cd:f2:
53:40:7d:4a:a1:18:28:e8:84:ec:37:3c:51:2f:98:
95:69:24:54:ce:92:c1:19:72:99:5a:ad:82:bb:32:
d3:14:12:df:c1:35:d5:a8:6d:99:fb:d9:f5:cd:d3:
6f:a1:ec:e5:69:c0:56:01:4a:3f:04:3f:3f:09:38:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:0F:74:21:22:5A:D7:EE:CF:81:8D:0A:F3:86:10:43:BB:6C:3B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7b901a6-6b3a-4ffb-97cf-2ca504df9940/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7b901a6-6b3a-4ffb-97cf-2ca504df9940/a7b901a6-6b3a-4ffb-97cf-2ca504df9940.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:81d:7000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402324
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:65:4e:81:0b:ea:9a:6f:00:00:71:f8:32:0a:ab:15:ae:f0:
76:b7:fa:67:57:75:97:e4:2a:f7:78:ec:18:74:fe:e8:ec:ba:
84:af:3a:2c:56:c2:68:4d:ae:f1:55:1c:9e:60:9a:61:4b:20:
70:dd:a8:d7:ec:4d:1f:95:b5:84:95:b5:ea:41:98:8f:ba:c3:
c7:f4:3e:3e:cb:50:58:f2:bd:cf:eb:b6:bc:a0:80:c7:70:d0:
22:e1:94:49:f8:0b:66:83:57:3a:47:46:9b:60:83:d9:8a:3b:
e2:68:41:3c:8b:b3:e2:8d:85:5a:74:62:9c:82:41:c4:72:10:
93:e2:ce:73:ae:a1:03:86:ef:22:b2:45:80:97:34:81:e6:55:
eb:7e:d7:5a:68:08:2d:ec:71:ed:c7:4d:99:c3:aa:67:e1:f8:
9d:d7:77:9f:ef:55:08:88:85:d9:92:a7:73:df:cf:79:cf:5a:
ec:e0:f6:71:e1:a6:47:31:10:4c:01:c2:26:4d:67:9c:ea:81:
3c:fc:27:33:3c:cb:f8:cc:63:7d:1f:5a:3c:23:cf:b2:9f:ac:
8a:b0:5b:86:48:14:be:4a:f6:10:6f:3b:22:70:66:c1:23:14:
92:58:cd:ab:32:e6:1e:a4:f9:b1:06:fb:84:ad:09:6d:a0:2a:
87:88:16:fa
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE1P1+0/YttFYfe+a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDMyNzIyMjUzMFoXDTI4MDYyOTIyMjUzMFowLzEtMCsGA1UEAxMk
YTdiOTAxYTYtNmIzYS00ZmZiLTk3Y2YtMmNhNTA0ZGY5OTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18TJT52y/fCLELGFqMiI3Qb/nhEukwxY0Gz6
Kxk1I2Afk7kn04pg+6Sia9leWfYPvxJzcPSqV6sTBcPUkzGnePYTYeOoUleQRaUL
ZcVryLcoEGsamOBRE4tYvsgXaz5TnTPdErNNUHuwVbnbIa1OFKF+1GAmGh6Bg/1D
qKB1ClLi4I41HADSyKwH9QFy81CDZV/lCMA2Y0L0o+m3JwAIh/ZwAmmHeL+tFQva
AJW7QRmX36K8VplmIW829Wof6oI5zfJTQH1KoRgo6ITsNzxRL5iVaSRUzpLBGXKZ
Wq2CuzLTFBLfwTXVqG2Z+9n1zdNvoezlacBWAUo/BD8/CTi2zwIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFFO/D3QhIlrX7s+BjQrzhhBDu2w7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h
N2I5MDFhNi02YjNhLTRmZmItOTdjZi0yY2E1MDRkZjk5NDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2E3YjkwMWE2LTZiM2EtNGZmYi05
N2NmLTJjYTUwNGRmOTk0MC9hN2I5MDFhNi02YjNhLTRmZmItOTdjZi0yY2E1MDRk
Zjk5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmAggdcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDBiOUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAGVlToEL6ppvAABx+DIKqxWu8Ha3+mdXdZfkKvd47Bh0
/ujsuoSvOixWwmhNrvFVHJ5gmmFLIHDdqNfsTR+VtYSVtepBmI+6w8f0Pj7LUFjy
vc/rtryggMdw0CLhlEn4C2aDVzpHRptgg9mKO+JoQTyLs+KNhVp0YpyCQcRyEJPi
znOuoQOG7yKyRYCXNIHmVet+11poCC3sce3HTZnDqmfh+J3Xd5/vVQiIhdmSp3Pf
z3nPWuzg9nHhpkcxEEwBwiZNZ5zqgTz8JzM8y/jMY30fWjwjz7KfrIqwW4ZIFL5K
9hBvOyJwZsEjFJJYzasy5h6k+bEG+4StCW2gKoeIFvo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:47 2026 by rpki-client