
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer
File: 3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer (raw, json)
Hash identifier: aZWq8Tm8YmsqLslBc9+//Gv4Ha62b8odxTYQSt4qqDE=
Subject key identifier: 0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CBC44DE9DEF223B66E3FC52C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Feb 2026 01:45:22 +0000
Certificate not after: Mon 08 May 2028 00:45:22 +0000
Subordinate resources: AS: 399084
IP: 45.42.144.0/22
IP: 2606:1ec0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bc:44:de:9d:ef:22:3b:66:e3:fc:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 3 01:45:22 2026 GMT
Not After : May 8 00:45:22 2028 GMT
Subject: CN=3c7a440d-8b85-4e4f-b56b-364d9e165c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:ad:b2:52:7b:ef:6a:cc:f9:03:46:eb:bd:
76:f0:d7:c6:46:cd:4a:b9:19:3d:b3:fc:f2:83:ac:
b5:6d:7f:00:a8:82:bd:b5:ce:e7:69:59:97:84:8d:
3e:11:49:35:d1:e8:cf:6c:37:9c:16:25:79:3b:8c:
5e:e2:70:10:8d:c0:25:a4:90:86:f2:d5:5a:9d:0b:
2a:52:a5:50:03:3e:b2:f3:d6:cd:8c:57:d5:78:51:
54:1c:19:70:40:10:d4:50:d8:48:aa:e5:a4:1f:e1:
03:4c:01:b0:8d:94:7a:b6:2d:03:d6:9f:06:6a:65:
15:0d:36:59:3a:3e:54:ea:71:c8:fa:12:f4:f1:97:
f4:4d:85:a6:19:5c:79:81:f9:3b:03:19:eb:ed:46:
6d:54:6c:1d:c5:24:e5:ba:86:00:10:9f:4a:12:60:
f8:0d:69:42:95:ff:ed:17:4c:05:95:77:e7:fc:0b:
6f:3f:95:0f:61:5e:36:e1:64:aa:b1:96:4b:77:c4:
b3:96:f5:93:02:45:25:f5:60:50:8c:1a:d6:16:47:
dc:75:2f:85:c7:36:45:60:e3:72:2d:98:07:a3:94:
9a:7d:43:9d:56:72:ee:70:f7:fc:3e:da:df:f8:d7:
4d:ec:5e:d2:50:4e:c3:20:38:6b:63:20:3b:3a:e1:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.144.0/22
IPv6:
2606:1ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399084
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:ad:26:f9:8d:28:f0:5b:b7:b6:91:62:c2:3f:de:8c:bd:22:
d0:93:1b:ec:e1:cc:32:39:d7:9b:a5:25:14:f1:56:cf:8c:68:
9c:b0:ac:94:ed:55:2b:32:2b:61:d1:5c:53:67:be:4f:f0:98:
41:25:f8:df:52:bb:eb:9b:8e:c6:e7:f7:db:2d:f0:0f:51:b7:
7f:5c:22:57:f2:30:1d:d8:ee:fc:03:fa:40:17:fa:9a:90:fb:
fc:bf:fc:62:4d:8e:a1:57:4f:1e:8e:54:40:e1:a4:eb:6c:43:
67:d3:a7:78:82:09:a0:fb:fb:06:2e:b8:64:21:a4:3f:63:88:
af:f5:38:6e:b5:2a:c1:bb:05:96:fd:37:5e:81:1a:d8:7b:8b:
3e:54:38:87:43:1b:0e:d8:6b:1b:40:59:df:c6:47:e6:1f:3a:
11:5b:68:27:5f:7c:31:06:ca:54:1b:6d:b6:0b:5c:7d:01:94:
a0:ae:48:65:c3:cf:51:b7:4a:06:26:bc:78:17:f2:14:cd:a3:
f7:dd:7d:b8:44:fd:77:e9:d9:6f:81:71:d9:dd:84:9b:b1:bc:
5f:82:94:ab:5c:55:11:50:44:a0:5a:da:9f:bc:1b:12:c6:1c:
6b:93:3f:12:82:84:50:81:fd:89:be:1d:20:bf:5d:dc:99:70:
2f:e2:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:15:57 2026 by rpki-client