
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad.cer
File: 10168798-335a-4c18-979a-73ab0ca41bad.cer (raw, json)
Hash identifier: G2EawBoBZ9aJJ6fm5jpZ/dhoiT+2CNeyC7u7LANny8I=
Subject key identifier: A9:2B:3C:60:48:1E:EC:C6:BD:2F:22:0D:CD:3E:79:57:73:65:CA:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584E1E5277F834505A31D73E96E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/10168798-335a-4c18-979a-73ab0ca41bad.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 09 Jun 2026 21:28:56 +0000
Certificate not after: Mon 11 Sep 2028 21:28:56 +0000
Subordinate resources: IP: 98.159.96.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1e:52:77:f8:34:50:5a:31:d7:3e:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 9 21:28:56 2026 GMT
Not After : Sep 11 21:28:56 2028 GMT
Subject: CN=10168798-335a-4c18-979a-73ab0ca41bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:11:cf:09:5d:e5:f1:3a:32:13:9f:b8:ef:
50:8f:67:86:9d:cd:d1:2b:05:e8:fc:b4:52:3d:4a:
96:35:c7:66:b2:90:5f:7f:b2:33:bf:c8:b0:31:4e:
d0:ea:61:08:1f:be:9d:c6:3b:17:51:f0:00:6a:de:
f0:d5:40:84:ac:7a:30:d4:e8:76:0e:a0:79:b1:aa:
e2:24:e4:bb:05:2e:56:e6:9e:67:05:c9:bd:92:7f:
12:2b:e6:fe:07:07:80:4f:a4:d5:95:76:28:90:c3:
49:66:cb:ca:9d:f8:7e:ef:0c:2d:c1:34:e7:37:d9:
6f:90:f7:75:b5:42:75:df:96:9e:32:08:95:07:f9:
c2:e2:ea:24:ab:2f:63:85:28:71:96:de:03:88:31:
fa:fc:ae:5a:8c:9c:84:b4:13:93:7a:f6:33:b5:9e:
b7:27:54:ee:1e:44:1c:82:16:ea:81:a6:2b:8e:dd:
46:b7:8d:ba:3a:16:e4:5d:c4:40:34:f1:6c:82:eb:
16:89:ae:b2:f3:d5:7c:e2:91:93:b3:c2:90:97:e4:
d6:79:ae:00:3f:8b:2f:ba:0b:fa:dd:f7:05:5c:06:
ae:1d:97:39:10:4b:91:6f:22:32:9a:88:3b:98:09:
a8:c3:11:64:4b:71:21:27:17:b5:43:a4:32:32:df:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:3C:60:48:1E:EC:C6:BD:2F:22:0D:CD:3E:79:57:73:65:CA:0A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/10168798-335a-4c18-979a-73ab0ca41bad.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.159.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:3a:ee:22:ad:db:87:45:0b:f3:36:17:83:3e:65:a8:e3:e7:
7d:a9:5e:07:18:dd:e4:f8:3f:73:ed:b8:1a:c7:ed:fa:41:c7:
1d:30:50:c0:4b:1f:16:45:f5:40:7c:13:69:27:a3:b7:a4:0b:
0b:dd:90:83:08:6d:64:3a:a9:75:b9:ad:81:38:04:52:6d:c2:
c5:8c:bf:80:43:01:d0:a5:ae:17:f5:b7:98:c6:d9:89:71:d7:
d9:43:d9:9f:ee:50:8d:47:1d:4b:ec:7b:de:74:0e:6b:35:bc:
28:ed:11:2b:cd:40:a1:fa:ce:7f:c8:8a:93:17:ce:c7:20:d3:
e6:9f:84:72:41:d5:55:e7:86:bf:a5:d3:bc:59:84:89:26:17:
ba:5e:30:41:b2:c2:7e:a3:80:46:18:86:02:b1:9f:1e:25:ce:
77:9d:2b:9f:9a:83:6d:ee:c6:44:6b:08:87:60:1a:a5:7f:b1:
11:10:42:d4:08:9a:9c:e4:97:84:46:a7:0e:bc:71:78:88:bc:
02:72:bc:5f:03:f4:18:a1:39:b2:59:3e:c9:68:22:6c:4f:1c:
d9:4d:17:ba:b6:1b:84:5d:c0:ef:2f:38:19:b6:eb:48:aa:24:
5e:b9:f6:e0:ad:db:3f:9d:5d:50:77:da:fb:7d:cf:c7:f0:65:
4d:0e:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:07 2026 by rpki-client