
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/42b4cfa7-22b4-4803-bc9b-f86515980383.cer
File: 42b4cfa7-22b4-4803-bc9b-f86515980383.cer (raw, json)
Hash identifier: uVfwzjTdSxX9q5QOtOIgRVCdLXCTwwN74C++/ebLrxM=
Subject key identifier: 6C:F7:67:FA:B5:BA:A3:62:10:26:79:F4:D3:C8:00:9B:95:A6:59:A5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584C8309D9B7AF5FB05684202FC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/42b4cfa7-22b4-4803-bc9b-f86515980383/42b4cfa7-22b4-4803-bc9b-f86515980383.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/42b4cfa7-22b4-4803-bc9b-f86515980383/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Jan 2026 13:45:22 +0000
Certificate not after: Mon 17 Apr 2028 12:45:22 +0000
Subordinate resources: AS: 13501
IP: 2610:a8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:83:09:d9:b7:af:5f:b0:56:84:20:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jan 13 13:45:22 2026 GMT
Not After : Apr 17 12:45:22 2028 GMT
Subject: CN=42b4cfa7-22b4-4803-bc9b-f86515980383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:e4:02:bf:ed:38:14:a1:db:a4:f6:de:09:
a6:06:41:b5:a4:1f:56:61:c0:0c:69:3f:94:14:0b:
ac:89:ef:ab:80:71:29:53:88:9c:17:a0:1e:90:8d:
02:a3:a9:24:ff:98:5b:fe:be:44:3d:8c:6f:4f:89:
6e:2a:52:17:51:37:b8:be:51:0e:dd:6d:d5:22:80:
11:a1:2f:66:85:c5:1c:4c:9b:46:89:0d:d9:33:31:
ba:8a:91:c6:54:69:89:4a:c8:a5:2a:af:3e:79:0d:
d4:aa:63:c4:f0:a2:3c:24:f9:db:76:e5:b5:8d:d5:
a3:89:89:9b:d5:6e:bd:42:2b:ab:69:e6:89:a8:82:
23:ab:11:b7:73:ea:ad:9e:21:2f:68:77:f7:ab:59:
46:bb:15:2c:9e:18:4c:48:2c:6c:55:e3:28:bf:80:
8a:4e:f5:ba:a5:f2:e4:4b:3f:74:b9:c7:83:26:c7:
cc:64:9f:47:96:7e:e0:80:57:d3:3b:29:72:ee:9f:
4a:40:6e:5e:5f:41:81:c2:5c:50:6c:4c:35:f6:df:
b1:ea:62:3f:d2:c6:4f:e1:01:57:48:7c:6f:71:aa:
74:3f:a9:61:57:d4:eb:d4:28:98:27:c9:35:0e:6f:
cf:36:83:26:eb:36:15:94:12:e5:e9:b8:ab:9f:1f:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:67:FA:B5:BA:A3:62:10:26:79:F4:D3:C8:00:9B:95:A6:59:A5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/42b4cfa7-22b4-4803-bc9b-f86515980383/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/42b4cfa7-22b4-4803-bc9b-f86515980383/42b4cfa7-22b4-4803-bc9b-f86515980383.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13501
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:64:cd:86:49:b7:f1:f5:63:42:14:ab:03:44:39:64:e6:46:
d4:f9:53:bd:30:50:d3:09:41:58:57:64:d6:4a:3e:01:5d:81:
6e:d5:97:b4:cd:14:6b:e7:e2:94:59:ed:29:40:21:07:48:f8:
c2:02:03:05:35:69:c1:94:d2:62:ce:37:27:cd:d8:85:26:b7:
e9:95:a1:cf:a3:1d:7a:f2:b1:a1:16:ff:7e:8b:d1:3e:1e:41:
87:f4:65:83:0a:cb:05:51:49:8e:6c:25:3f:06:8b:4b:75:45:
a8:59:d2:20:93:3f:52:f9:a3:b6:66:46:8e:b5:df:ee:08:f9:
ce:0f:08:a7:44:4a:d8:a7:51:98:08:c0:c9:a9:52:2a:99:29:
fb:62:d1:d8:2c:51:ea:1c:93:bc:21:c6:a8:6d:eb:71:21:cf:
22:c3:f5:a7:ac:16:a3:a4:f1:34:ab:25:3a:3d:61:85:20:73:
79:b0:31:61:d5:4f:e1:28:c2:35:a7:39:a4:8c:94:e1:03:98:
9a:ae:6d:ec:c2:a3:af:cb:b9:9a:fd:4c:83:d6:99:6d:96:87:
b8:53:7f:b1:2c:ae:8d:f7:f6:83:94:6b:6c:39:f9:18:0c:89:
47:95:a7:5b:e4:e8:71:d8:ef:a8:cd:40:93:df:d1:f3:c1:10:
29:95:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:38 2026 by rpki-client