
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f57965db-40cd-4cd4-a742-63b0b18ebeda.cer
File: f57965db-40cd-4cd4-a742-63b0b18ebeda.cer (raw, json)
Hash identifier: DeRaxRsLC30yS3bsd3DLbV7IFS2w7CJ133r3lMwhQBI=
Subject key identifier: 53:94:D2:9B:C1:52:94:C0:B8:BC:A9:3C:91:03:FC:3B:A2:8E:44:86
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CE08FC4CD32216ABAA0385E80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f57965db-40cd-4cd4-a742-63b0b18ebeda/f57965db-40cd-4cd4-a742-63b0b18ebeda.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f57965db-40cd-4cd4-a742-63b0b18ebeda/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 01:45:22 +0000
Certificate not after: Sun 21 May 2028 00:45:22 +0000
Subordinate resources: AS: 20314
IP: 204.76.64.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:8f:c4:cd:32:21:6a:ba:a0:38:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 16 01:45:22 2026 GMT
Not After : May 21 00:45:22 2028 GMT
Subject: CN=f57965db-40cd-4cd4-a742-63b0b18ebeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:43:06:07:27:85:1f:06:fb:49:af:65:19:
13:c2:d8:b8:9b:88:cd:f2:ea:fb:2b:df:8c:58:d8:
0d:b9:99:14:5e:a2:44:11:ef:02:58:2d:49:3e:a6:
e7:63:b1:b1:36:84:50:4c:3f:9d:f3:f8:b6:8f:02:
bd:8b:a4:b1:bd:ea:ed:0a:23:00:b3:5c:e9:73:8b:
8c:2c:2c:24:f8:df:9d:5b:d0:dc:d0:b8:fa:bc:55:
54:b0:b0:ef:d9:f1:cc:ec:44:39:92:50:f5:20:69:
6a:eb:f8:59:ce:f9:d4:88:b1:d8:1a:ed:b5:a3:99:
85:a0:a0:c0:ea:dc:c8:02:82:80:fe:da:d9:f6:b8:
7c:f1:ad:63:de:2b:3e:6f:43:64:8d:56:66:54:04:
47:85:85:6e:03:b6:50:3f:71:6b:9a:63:5b:d9:0d:
4c:62:e8:28:4b:75:6c:76:1d:22:dd:ce:8e:8e:f3:
32:3e:04:7f:97:66:b1:f8:8c:f9:fc:c2:6f:a8:7c:
1e:a2:22:d9:c6:44:a2:a3:c8:65:05:be:54:d2:ed:
19:e5:56:2e:64:de:b2:45:d8:00:70:9c:e4:be:bd:
31:72:c8:05:10:32:c2:ae:83:2b:9d:1b:1f:44:3c:
74:02:8a:46:96:26:03:c7:f9:93:eb:ac:c0:ea:ba:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:D2:9B:C1:52:94:C0:B8:BC:A9:3C:91:03:FC:3B:A2:8E:44:86
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f57965db-40cd-4cd4-a742-63b0b18ebeda/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f57965db-40cd-4cd4-a742-63b0b18ebeda/f57965db-40cd-4cd4-a742-63b0b18ebeda.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.76.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20314
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:cc:67:3d:81:a5:64:f2:69:87:30:6e:f4:c1:b0:1a:bf:01:
2f:8d:e5:c4:8b:8b:a9:7a:26:0c:6c:0b:fd:03:27:0c:1c:28:
f7:a1:aa:f2:82:93:15:74:cc:96:d7:32:e7:f3:8a:64:7c:d6:
27:18:21:bb:01:12:0f:e6:28:50:17:c4:bf:9a:5d:5e:e0:c9:
53:69:5d:b1:71:0d:89:7d:f0:70:30:5b:8c:e9:7d:a4:2b:b8:
ff:8e:7e:6c:4c:4f:93:12:77:36:cf:61:c0:86:7d:fb:4d:e4:
39:e6:d6:f4:a7:d2:41:df:90:1f:0f:86:ea:22:8f:ad:9c:cb:
5b:f7:23:10:2f:17:50:75:9c:8a:e6:49:74:00:5c:51:a2:64:
39:c0:81:a2:f0:9e:25:df:3e:22:10:6f:fa:2a:27:2a:b6:01:
97:4f:75:d6:da:a0:9b:95:fe:6d:10:c1:e1:f4:02:8b:c0:c9:
e8:f8:95:77:12:6e:47:73:93:86:cf:b3:e2:03:6e:a2:5d:7a:
ef:8d:4e:38:50:4f:97:dd:a0:b2:13:16:6f:2c:f2:ab:9f:25:
1a:7c:47:db:ba:2d:82:6f:c0:b0:66:9e:3f:5d:04:cc:7a:48:
dd:85:eb:67:42:a0:f0:5b:72:e1:30:21:23:9c:ff:a1:5a:ea:
97:53:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:32 2026 by rpki-client