
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
File: 370b86f5-0ae7-4e6c-a32e-08310156df3f.cer (raw, json)
Hash identifier: 2Ct1/ALMAXtDUJo2GBZFzK6orWD90tjxGhktqB53HJE=
Subject key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D5718036C2CBB84C4E1EE0840
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 30 Mar 2026 12:45:17 +0000
Certificate not after: Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 4317
IP: 50.20.196.0/22
IP: 64.237.104.0/22
IP: 148.64.62.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:18:03:6c:2c:bb:84:c4:e1:ee:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 30 12:45:17 2026 GMT
Not After : Jul 2 12:45:17 2028 GMT
Subject: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:5f:f9:ac:64:92:88:5b:b7:e3:8f:fd:c0:
64:a9:d0:73:d8:11:63:c7:84:13:1e:52:d1:90:41:
ac:e7:73:ed:6b:99:b3:9c:63:a6:60:ed:f8:8f:19:
e9:24:77:e2:35:91:6d:12:2b:40:e0:70:88:84:f3:
ed:8c:46:c5:80:5a:d3:09:af:49:93:3d:67:ac:c6:
82:93:00:39:ba:a2:3b:ca:8e:eb:77:c1:dd:e6:49:
62:e0:f7:62:26:01:74:b9:0d:49:38:66:37:c2:08:
0a:76:c0:9b:4a:2e:5b:db:d3:1a:0f:62:55:11:dc:
af:4e:0d:8d:f7:ed:b0:fa:9f:d5:83:0a:53:55:67:
dc:fd:59:4c:cc:e3:7d:8c:28:5c:7c:f9:f4:0a:b6:
98:71:77:79:ac:60:83:d2:93:4a:f7:e3:00:28:96:
13:1a:bd:73:c6:bd:95:10:46:16:cc:d5:0d:3a:4d:
a9:e1:41:3e:88:47:3c:38:a6:52:b0:22:0a:bf:9e:
3c:e1:80:c5:82:6f:21:20:24:0c:95:1e:c4:41:82:
28:f4:88:a6:74:03:f1:03:86:7e:bc:7e:23:7a:b0:
af:ff:2c:af:90:1f:e2:24:f2:96:03:43:52:d4:78:
a2:3a:f6:f1:d2:af:94:0b:51:ea:19:ec:23:e3:6d:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.196.0/22
64.237.104.0/22
148.64.62.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4317
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:b8:3a:8f:40:36:3d:e6:f0:a6:4a:5b:72:be:2a:b2:28:77:
a4:98:23:9b:d4:9b:da:5b:23:1b:56:06:12:9d:df:72:97:82:
9e:6b:24:be:e7:e6:8f:64:c4:83:e4:c4:3e:f3:93:24:1d:4f:
62:d5:ae:e2:ea:02:ef:14:dc:2c:7a:a0:40:8a:94:53:9e:83:
18:21:26:5a:cf:e4:7f:e1:93:b1:3f:d3:9e:e3:c9:b5:01:03:
47:0c:82:62:9c:44:44:95:c1:45:d7:07:b5:cf:5e:ee:d7:6b:
f8:33:1d:10:83:09:b1:bf:15:59:2f:5b:b0:7c:57:de:b1:70:
7a:9b:5e:6c:74:88:4c:63:61:92:5d:f9:fb:30:ce:46:83:77:
8c:44:fd:5f:79:50:3c:b1:a9:d1:5b:9a:ea:98:57:27:83:8f:
74:d0:59:e7:69:b6:7e:45:64:ba:90:a9:bb:a6:11:e4:c7:06:
0b:5e:97:c1:23:94:fe:72:fe:aa:56:33:ba:d0:ed:3d:9a:37:
14:6a:01:25:ac:cc:5f:68:8d:e2:65:3e:7a:c4:45:02:a0:78:
a9:21:78:7e:b3:9f:04:0c:64:f7:a3:9e:fc:8c:f0:a2:b4:56:
90:5a:f1:78:0e:5e:64:60:00:c9:de:bb:e1:cc:cf:26:30:a6:
a5:91:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:05:11 2026 by rpki-client