
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
File: b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer (raw, json)
Hash identifier: 11hR/CvTNtTktvRebNCUByla1BsQb+QZOMgwzSsNe5k=
Subject key identifier: 60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D5A16C7FDEB7595846F7AF380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 31 Mar 2026 14:30:14 +0000
Certificate not after: Mon 26 Jun 2028 13:40:57 +0000
Subordinate resources: AS: 16788
IP: 64.250.32.0/20
IP: 130.51.172.0/22
IP: 153.76.96.0/20
IP: 2606:6b80::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5a:16:c7:fd:eb:75:95:84:6f:7a:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Mar 31 14:30:14 2026 GMT
Not After : Jun 26 13:40:57 2028 GMT
Subject: CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:9d:11:e9:2a:a8:5e:b1:d7:6d:5b:8c:49:
ca:31:45:cf:98:11:ff:7c:d5:ab:8c:17:18:b2:db:
19:76:e2:4f:bd:c7:b4:45:bf:15:6b:34:3c:57:4f:
2c:af:68:9f:10:4b:55:97:07:1a:f2:77:fb:7e:e8:
35:a3:d6:42:83:aa:c1:83:b9:e2:80:40:60:2f:9d:
ab:28:43:b1:14:2d:41:58:2b:ae:91:8b:52:b4:1d:
20:51:bf:5e:73:93:78:a3:94:f1:8e:f9:65:52:e0:
b5:ee:6d:c0:5d:dc:7f:b3:c8:16:2f:65:43:49:27:
1c:26:4a:f1:e8:a1:9a:d4:d8:dc:10:5c:53:44:65:
3b:5b:58:19:1f:d4:77:64:4f:11:84:3a:45:26:a9:
f6:f9:b2:59:6f:22:ec:ad:fe:42:71:63:9b:78:07:
85:6d:f5:59:17:49:c3:d0:f5:cc:ee:c6:77:2c:c7:
2d:76:3c:75:5b:9d:32:96:89:64:e6:8f:7a:c3:e8:
bd:6d:c9:29:3a:03:cb:c9:a0:ff:e2:ea:83:db:0b:
55:0a:c3:24:7d:9b:0f:d4:f1:34:98:f6:ae:56:ea:
1f:89:62:1f:a2:34:16:0a:b0:9c:85:33:5f:36:3d:
b3:63:20:23:84:45:b3:bc:c7:32:1c:de:43:bf:78:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
64.250.32.0/20
130.51.172.0/22
153.76.96.0/20
IPv6:
2606:6b80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16788
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:50:e1:f9:bf:30:3b:88:c2:03:5c:e1:a4:59:c4:c4:cf:81:
f8:fa:73:14:34:23:75:74:37:d7:af:c2:ac:40:f6:36:78:d1:
97:e8:1a:4e:22:78:b4:75:53:16:8a:ad:f2:05:98:0e:12:9c:
47:cf:a8:7d:df:60:7d:54:68:e8:47:f4:9d:a7:54:3b:97:e8:
fe:a5:e5:e2:de:f4:e6:e5:ab:fc:19:56:3b:44:29:45:da:70:
61:19:07:a0:3e:28:97:ab:e1:90:83:71:81:fc:c7:ff:ee:8f:
5e:18:48:f2:75:b2:5b:4f:56:8f:73:4b:2d:eb:a9:f3:4a:21:
29:27:5a:a7:44:e0:db:54:4f:1a:74:a7:fb:2f:0b:49:84:e3:
ee:14:0e:b9:2c:50:db:75:76:b5:4b:e9:2c:4d:85:b0:1a:e0:
1b:0c:18:f4:75:d0:ad:d5:8e:e4:d1:f9:d8:af:1e:8f:5e:5a:
3b:b7:e3:a6:6b:16:66:a4:b9:d6:22:43:c5:da:33:ee:2e:0c:
ba:83:fc:fd:5d:71:f1:30:a9:60:88:e9:27:07:e9:b4:b1:c8:
69:4c:db:a3:10:dd:4a:7c:3f:73:02:7c:a0:23:58:c0:11:96:
63:b1:d5:a1:e2:f5:61:91:19:c8:c8:8f:72:40:1c:33:26:c9:
95:37:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:08 2026 by rpki-client