
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
File: 18063090-3337-4bcb-93cd-f57cb925fd54.cer (raw, json)
Hash identifier: JO49YNVysrQCZyHEPgxw73Ubu33e9gC5JBpxWr+lnBE=
Subject key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584EF17A8686583450E0E8055900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 24 Aug 2026 12:45:12 +0000
Certificate not after: Sun 26 Nov 2028 13:45:12 +0000
Subordinate resources: AS: 4901
IP: 162.250.136.0/22
IP: 2620:118:5000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:7a:86:86:58:34:50:e0:e8:05:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Aug 24 12:45:12 2026 GMT
Not After : Nov 26 13:45:12 2028 GMT
Subject: CN=18063090-3337-4bcb-93cd-f57cb925fd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:d4:e6:78:8f:8e:75:91:29:e1:88:f9:02:
ca:92:81:59:e4:7d:ff:de:a7:84:11:4f:92:ba:6c:
67:52:ec:06:37:ee:16:23:c4:f9:fe:be:f2:7f:3f:
f3:3e:c1:a6:54:5e:47:4d:ac:c6:a0:60:31:56:6b:
0c:d3:40:d2:fe:57:97:b9:5e:9e:6c:be:63:5d:1a:
e8:d5:bb:f3:da:49:ad:d9:1b:6c:bf:d5:d2:2d:d9:
9d:17:fd:05:90:4c:41:4a:a6:92:e3:e4:dd:01:89:
64:3b:29:34:79:74:83:83:a4:7c:99:54:48:fa:58:
9c:3f:d1:c7:df:23:d2:36:a9:52:b0:d2:a2:6f:f3:
d6:73:af:40:9b:57:f2:f0:c8:f7:87:9c:aa:32:eb:
87:69:a8:f9:ed:18:eb:65:4e:64:84:8e:6e:7b:77:
3d:aa:62:52:73:a1:0e:c9:d5:02:14:e5:67:5f:28:
a4:a6:bc:58:a3:c3:05:72:a9:a2:00:c1:83:22:5b:
c0:16:f6:7d:c7:10:e1:e2:40:d6:e4:21:d9:29:70:
20:ee:53:fd:f4:d8:c2:32:17:04:b5:b6:84:08:ef:
3d:37:6c:30:65:34:7c:55:c4:e9:d3:34:6a:d8:9c:
ec:56:e9:9c:0f:ae:6c:b3:2d:e2:d3:c3:a4:8a:be:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.250.136.0/22
IPv6:
2620:118:5000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4901
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:03:27:85:b2:94:f3:3a:99:5f:39:c6:ff:4d:01:6d:65:c3:
1d:b6:22:8a:7b:e8:26:50:c4:7d:8c:9a:7b:68:4b:e9:08:07:
0f:81:1f:1b:18:de:df:9e:fc:aa:41:60:48:ea:ce:4a:e3:20:
8c:a6:ff:98:b2:9d:c6:7c:59:1b:c6:38:91:87:5c:83:f6:f9:
93:5e:06:de:c4:68:0f:e3:ae:40:55:35:f8:7f:12:06:64:67:
3c:d7:d6:36:bf:7a:d8:98:a5:ea:2e:1d:1d:48:0b:95:31:98:
b7:8f:af:7e:e3:c8:2d:45:6f:49:da:cc:d1:cc:37:96:b5:93:
08:dd:71:50:d9:52:88:86:d8:e9:76:c5:ce:84:0c:7c:6f:45:
f9:14:c2:20:1c:e6:ab:14:0d:7a:49:d0:7e:57:be:fb:26:90:
31:19:b2:a3:86:98:2f:51:46:31:00:08:d5:d2:f6:7a:51:c7:
e6:58:a6:98:1e:95:11:73:93:e9:9d:11:86:7a:d2:6c:66:a4:
a5:bf:6d:6d:54:52:b0:87:d8:15:ea:7c:8a:f9:0a:b3:73:83:
00:70:08:37:ef:77:19:f0:57:2f:9c:2a:b2:28:ae:5a:41:20:
ab:19:dd:81:f0:1a:1d:08:d3:3c:13:0c:9c:6e:b2:3f:4c:81:
0d:c3:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:06:38 2026 by rpki-client