
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer
File: d80dfbd4-0944-4c24-a645-a238d9949fb7.cer (raw, json)
Hash identifier: 0+heQaI77cNIMqE/FsicGmQwWRc2GGsidS8qDrfzcm0=
Subject key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F8F362C97028DE496537E0180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 20 Oct 2026 00:45:12 +0000
Certificate not after: Mon 22 Jan 2029 01:45:12 +0000
Subordinate resources: IP: 23.141.52.0/24
IP: 2602:f5f5::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:36:2c:97:02:8d:e4:96:53:7e:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 20 00:45:12 2026 GMT
Not After : Jan 22 01:45:12 2029 GMT
Subject: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:01:e6:57:55:a0:2e:5c:31:5b:28:7a:50:
42:12:f5:ba:3d:5e:e8:b0:32:f0:d4:59:e4:da:6a:
d7:53:22:17:11:b1:39:52:99:64:10:c8:90:8e:e9:
ad:13:a8:b2:0e:ea:c6:27:73:6e:98:57:c1:96:b7:
85:85:df:a7:b8:bd:0d:ee:ad:8e:03:93:52:2b:81:
a7:f3:94:be:ab:e3:ac:25:db:78:a8:6e:c9:bb:b3:
7e:93:c9:b4:22:d1:d3:fd:b4:86:a1:7e:cf:f5:e2:
99:b0:c8:49:dc:5a:fd:80:c3:d9:90:5d:87:25:a0:
b1:fd:b2:67:75:6b:7c:d9:50:d0:45:0e:fd:23:fb:
08:d3:bd:1d:ce:f1:83:7d:92:1a:d1:2e:d4:60:a0:
2b:91:d2:a3:ef:d8:d0:4f:e4:3b:68:5a:9e:5e:ee:
27:b5:1e:75:44:a1:45:bf:c7:d5:e2:d8:8c:40:c4:
ad:d3:81:06:82:29:ae:55:d5:88:51:aa:13:b6:db:
6b:d0:15:8b:11:06:11:00:c8:c2:29:a6:39:8f:ff:
ca:85:1e:fc:0a:72:87:de:60:e0:4c:75:cd:ee:fd:
14:b3:36:92:b3:ce:be:0b:ad:b7:20:16:43:75:54:
66:a2:da:ab:36:71:ad:ed:db:7a:f3:43:d1:12:a2:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.52.0/24
IPv6:
2602:f5f5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:9d:7c:30:d6:5a:10:51:62:a3:75:1a:e4:c7:2a:b2:5b:a7:
59:94:19:d5:fd:be:16:fe:6d:79:73:a3:09:24:6a:19:d2:4f:
e9:37:b7:2d:df:21:b7:67:d5:11:66:10:cd:e6:52:bb:09:e8:
70:c0:9f:99:db:85:34:d6:f8:02:94:20:6d:31:83:0f:b5:c3:
9e:46:1c:36:0c:ec:90:c0:12:ce:9b:41:51:f2:3d:c2:00:b8:
14:f0:fe:1b:b5:34:cf:22:02:68:31:57:19:34:98:b1:3a:86:
df:f7:74:41:e0:db:ec:0d:3a:72:5c:5b:ce:58:9a:13:c0:99:
f6:40:4d:4a:fe:5e:07:53:33:64:44:1f:88:ff:00:22:3c:37:
39:4c:2d:ae:e7:35:39:d4:8f:92:33:d5:f9:78:2e:0d:a8:d1:
9c:de:0f:3a:30:d3:60:01:dc:b2:8a:27:d2:c2:a1:36:50:62:
53:07:d7:df:6b:af:1b:7c:96:88:4d:d9:01:cb:a5:a0:02:ac:
bf:c1:cb:d9:9d:42:69:71:9a:26:9b:40:28:7e:bd:9f:d3:b1:
a9:95:b3:9b:06:eb:68:e9:7e:94:13:0f:ce:eb:8d:91:25:ab:
30:41:c3:a2:83:10:63:62:16:43:f7:be:5c:a8:14:6b:44:73:
ac:12:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:18:43 2026 by rpki-client