
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
File: 7905c321-789d-4866-a23f-9f01c7b24cf4.cer (raw, json)
Hash identifier: XvBqVKfidJ18cK3oxzJap/CDsYpO4kbDd0nVu0hZPos=
Subject key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CF6E53DAB32D17D6189A50200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Feb 2026 01:45:23 +0000
Certificate not after: Mon 29 May 2028 00:45:23 +0000
Subordinate resources: AS: 395886
IP: 23.170.48.0/23
IP: 64.112.28.0/24
IP: 104.167.247.0/24
IP: 2602:fce1::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f6:e5:3d:ab:32:d1:7d:61:89:a5:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 24 01:45:23 2026 GMT
Not After : May 29 00:45:23 2028 GMT
Subject: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:1b:a5:8a:1f:ef:b1:b3:96:ce:2c:9c:54:
8e:31:8f:ec:d6:44:44:10:f3:57:11:e3:b7:8d:22:
be:32:70:4e:09:10:ed:00:40:0c:0c:e1:01:b8:1a:
3f:e1:cf:ea:68:d9:29:39:b8:f0:8a:cb:a6:f3:79:
ad:3d:68:ed:b3:59:28:c3:3f:66:db:3f:75:0c:7f:
94:5e:92:da:03:53:5b:c6:c7:d0:2d:31:b6:36:0d:
84:57:ea:9b:ba:e9:f4:3d:0d:a5:d1:09:dc:95:9f:
88:f0:7a:c8:ae:b1:18:45:73:f7:22:0f:b5:ba:95:
be:7e:c8:c2:82:2f:6b:82:28:cd:77:d8:8c:24:b1:
37:27:63:ec:db:c9:04:ea:5b:21:b1:13:64:8d:c8:
df:15:c7:80:34:ea:4b:c0:a8:b1:ac:12:1f:d0:6b:
ff:b9:57:ba:f1:85:c2:6e:cc:b4:a1:cf:c7:cf:90:
0d:7c:87:90:a8:f8:3a:a8:c1:5c:44:a8:80:f6:40:
ac:7c:34:a8:36:50:51:7d:45:6d:8f:84:88:34:2b:
70:1d:84:39:22:18:84:b4:af:20:b0:a9:77:2a:86:
df:33:85:b4:85:ea:67:95:4c:5d:ff:da:f6:69:66:
0f:f4:a8:1b:8c:5e:16:3f:80:7e:92:06:61:07:b0:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.48.0/23
64.112.28.0/24
104.167.247.0/24
IPv6:
2602:fce1::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395886
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:51:9a:49:68:6c:c2:2e:9f:cc:34:2c:17:db:e6:e2:e8:51:
15:33:d4:82:15:d1:fc:f7:8f:c5:24:96:c2:9b:e7:c8:73:4f:
78:d1:a1:04:72:7e:d9:c9:98:c8:92:44:58:62:0c:13:9d:39:
6c:d0:8b:f0:f4:67:94:84:9f:a1:15:f2:f8:b0:11:84:bf:f9:
f6:1f:d8:2a:82:02:11:12:dd:2d:e6:7d:0d:5b:07:e3:45:5d:
1d:de:ba:5a:f7:13:74:aa:ae:9f:dd:d4:dd:ae:7e:9b:df:36:
08:c4:db:c7:b5:eb:d7:5b:ca:1a:64:fe:b8:ee:51:09:d7:36:
15:50:b1:3b:8b:d1:bc:90:e7:d6:6b:cc:22:84:69:a6:e6:8b:
49:a0:a4:03:f2:e8:3e:5f:e0:45:24:c3:65:28:14:a8:34:6a:
f5:f1:ee:0e:05:5f:8b:81:b8:55:b5:b6:07:36:77:25:ea:15:
bf:c7:0c:fb:7e:5c:37:f5:25:cb:55:99:60:81:91:12:d2:c5:
a9:18:ac:46:b4:0c:94:4c:69:49:fa:49:05:60:8c:9d:5b:d1:
8c:9c:d8:f7:47:5b:ea:67:b4:52:1a:03:44:08:f0:b2:5a:00:
fe:f1:99:85:f5:9f:6c:3e:fe:5e:90:d5:07:7d:4c:54:d0:f1:
b3:4b:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:58 2026 by rpki-client