
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/22d8f090-84c9-4e29-b7ea-dc18fe496163.cer
File: 22d8f090-84c9-4e29-b7ea-dc18fe496163.cer (raw, json)
Hash identifier: ZM/XZQ6ANT/YzcyBXXz//97wMAUs1UgBdNYtA8zIy8s=
Subject key identifier: C8:DA:C7:6C:E1:A1:39:A3:9E:FD:96:BE:B4:42:E7:ED:4A:3D:AA:2F
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer: /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial: 010D0C9F4328584FB811F3700EA60D72D5E8ED00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/22d8f090-84c9-4e29-b7ea-dc18fe496163/22d8f090-84c9-4e29-b7ea-dc18fe496163.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/22d8f090-84c9-4e29-b7ea-dc18fe496163/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Nov 2026 16:00:21 +0000
Certificate not after: Thu 11 Jan 2029 18:09:43 +0000
Subordinate resources: AS: 12284
IP: 208.110.128.0/19
IP: 216.162.193.0/24
IP: 216.162.202.0/23
IP: 216.162.206.0/23
IP: 2605:5980::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b8:11:f3:70:0e:a6:0d:72:d5:e8:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Validity
Not Before: Nov 3 16:00:21 2026 GMT
Not After : Jan 11 18:09:43 2029 GMT
Subject: CN=22d8f090-84c9-4e29-b7ea-dc18fe496163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:68:41:24:d0:bd:21:10:89:d7:55:dc:21:
43:70:7a:ec:b0:d3:68:bd:8b:6c:a3:04:e2:0c:fd:
43:84:3d:12:d0:0b:7c:ac:95:5d:32:85:1d:de:2f:
00:99:71:99:08:70:c2:55:a9:46:9b:31:97:0b:8e:
b5:f0:83:c3:06:bd:96:a0:8a:11:2b:1c:43:08:88:
ae:32:33:10:60:1b:07:9a:0c:b0:a6:6a:88:71:de:
a2:b5:01:04:8a:50:d3:1c:54:24:7f:5b:04:7c:62:
67:dc:e7:aa:5a:41:56:05:3d:6c:d7:b9:01:20:66:
2f:02:52:9d:d9:78:a3:da:42:14:8b:84:f3:84:9c:
21:d3:7e:aa:2d:9f:e6:25:bd:15:41:7f:70:c8:74:
cf:a5:f5:14:89:47:66:ce:b2:da:ab:15:d6:1f:ff:
a7:4c:52:76:0e:e6:3f:ac:73:9b:97:d4:98:b2:a6:
3f:0b:3b:72:ee:42:0c:a1:6b:97:4b:70:2d:62:a8:
34:9e:e0:cf:47:61:39:10:fa:10:5b:0d:fc:3d:36:
f3:53:d6:80:ff:67:41:f9:03:9d:62:d9:83:bf:20:
07:6e:97:b4:d3:0e:65:80:96:95:d4:ad:27:c6:fd:
46:bb:21:9e:da:09:58:99:c6:1c:72:ba:23:44:a3:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:C7:6C:E1:A1:39:A3:9E:FD:96:BE:B4:42:E7:ED:4A:3D:AA:2F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/22d8f090-84c9-4e29-b7ea-dc18fe496163/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/22d8f090-84c9-4e29-b7ea-dc18fe496163/22d8f090-84c9-4e29-b7ea-dc18fe496163.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
X509v3 Authority Key Identifier:
keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
sbgp-ipAddrBlock: critical
IPv4:
208.110.128.0/19
216.162.193.0/24
216.162.202.0/23
216.162.206.0/23
IPv6:
2605:5980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12284
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:79:1c:5c:31:da:9f:70:ed:38:3e:b9:25:5e:8b:4e:da:ef:
df:11:84:b9:d8:85:09:cd:c1:25:7d:61:c5:58:ca:90:3f:8c:
ea:b3:db:6b:c5:ae:dc:98:91:ea:a5:5d:e8:e5:4e:d3:f8:44:
94:ff:7a:04:d1:e0:a2:b3:46:c9:0e:44:57:d1:a1:42:9a:96:
3e:6a:f6:65:fe:58:05:2c:e7:3c:9c:9f:06:47:de:34:7f:da:
01:5d:1b:67:f8:76:df:09:b1:2d:09:28:38:58:b7:b2:99:a1:
45:55:3c:ca:38:87:99:62:1c:28:ca:95:c1:4d:7a:5b:79:23:
4f:b8:f4:41:08:49:9e:0e:3f:4c:36:63:1b:b7:ab:a9:43:1c:
a5:93:fa:0f:52:20:80:62:ce:d4:55:e0:9d:41:e1:5c:37:89:
1d:a6:bc:33:df:b8:2b:ee:f2:99:7d:50:12:ab:d1:80:81:41:
e5:4d:91:37:13:45:3b:fc:b9:0f:cd:f2:42:d2:43:3b:ee:24:
09:b4:85:05:9a:ab:51:d3:86:c4:5a:6d:e8:9f:8b:7d:62:de:
09:5b:35:97:bc:b9:4a:56:41:6a:b3:99:45:2e:1c:ab:31:f0:
15:de:c3:54:c7:5e:6d:70:27:0f:68:38:d1:cf:6e:d9:1f:1a:
1e:59:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:10:22 2026 by rpki-client