
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/557185f7-c1d8-430f-aefc-035bf3e4a704.cer
File: 557185f7-c1d8-430f-aefc-035bf3e4a704.cer (raw, json)
Hash identifier: lPc0huQVyyJM6vwdEi10ikwEy9cCMWmek1huF9yWDIA=
Subject key identifier: 63:9D:61:E3:41:C6:B1:4E:98:A3:06:9E:BF:B4:CE:D3:E0:0C:FB:FC
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584C8CCF41195F6FB76829661B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/557185f7-c1d8-430f-aefc-035bf3e4a704/557185f7-c1d8-430f-aefc-035bf3e4a704.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/557185f7-c1d8-430f-aefc-035bf3e4a704/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 17 Jan 2026 01:45:24 +0000
Certificate not after: Fri 21 Apr 2028 00:45:24 +0000
Subordinate resources: AS: 393793
IP: 192.94.166.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8c:cf:41:19:5f:6f:b7:68:29:66:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Jan 17 01:45:24 2026 GMT
Not After : Apr 21 00:45:24 2028 GMT
Subject: CN=557185f7-c1d8-430f-aefc-035bf3e4a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:29:b6:8f:fd:4b:71:6d:17:27:1d:cc:ac:
59:23:c7:f9:b6:38:de:16:05:17:95:ba:ad:07:b0:
c6:2b:72:03:a8:74:00:ad:90:8a:1d:1e:66:94:70:
1d:68:1d:e1:59:a5:26:d0:c0:47:88:ba:68:02:65:
a1:16:b5:f4:72:e4:ad:36:04:78:36:74:61:bc:8a:
b7:09:e1:c6:bc:4c:b4:77:76:ca:b6:28:26:4a:3f:
6a:da:64:82:2c:72:44:02:b1:da:0e:e3:b7:f2:99:
b5:34:89:31:68:70:ba:9b:e0:82:e7:03:de:b9:3a:
4a:3c:85:1a:05:02:88:22:69:5c:ed:81:22:74:37:
50:81:80:ac:c6:f6:c8:fc:04:33:f2:3f:7e:a4:a6:
12:dd:c4:f0:7e:5c:51:5b:3c:14:9a:2a:17:e9:ec:
71:0f:03:10:25:af:82:e4:06:4b:04:48:1c:45:b6:
40:da:c8:78:ce:51:71:2d:47:c9:61:ca:89:0b:70:
4f:5c:89:d8:e6:11:72:e9:45:de:ef:45:96:93:12:
df:21:2d:01:7e:56:1c:0d:9e:c9:1e:20:94:fc:c4:
f7:2a:90:3b:49:1f:ac:6c:5d:51:e9:94:cf:5b:7b:
30:b5:2b:c2:4d:78:03:2a:d9:a2:86:9a:d9:36:8f:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:61:E3:41:C6:B1:4E:98:A3:06:9E:BF:B4:CE:D3:E0:0C:FB:FC
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/557185f7-c1d8-430f-aefc-035bf3e4a704/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/557185f7-c1d8-430f-aefc-035bf3e4a704/557185f7-c1d8-430f-aefc-035bf3e4a704.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
192.94.166.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393793
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d6:b2:95:5c:f9:3e:61:8b:85:9b:7c:ec:d8:67:8f:1d:fa:
a5:75:c9:a1:82:31:dd:34:68:a9:77:21:d8:0d:ca:8e:51:36:
07:27:dd:2a:fe:13:03:95:1f:81:73:f3:5e:c8:9f:da:64:51:
45:27:ad:89:31:f3:9e:9c:f1:6a:d5:f1:7d:82:00:aa:5f:d0:
18:47:88:20:7f:a4:2a:57:8a:6a:b2:d5:71:f0:a4:a5:ec:28:
9c:c0:02:38:6d:d6:f7:85:6b:30:f8:2a:ab:a4:0c:8c:de:32:
af:af:67:d2:cf:7f:cf:f4:69:52:64:a8:ac:0f:bc:99:a7:82:
69:fd:fb:32:08:c3:fc:98:5a:c6:f6:09:51:58:57:3d:61:95:
07:44:ca:72:54:92:78:47:37:ea:1d:58:55:c8:e0:6a:7f:d4:
14:ce:97:f2:21:28:fe:c4:35:13:a3:1d:0f:e3:60:d3:e6:2f:
02:03:89:17:5a:39:29:35:1c:23:d9:ac:38:cb:3a:53:73:3d:
ae:ce:56:ab:47:86:f9:84:72:ea:fd:85:01:af:01:0c:b0:5d:
9a:09:19:11:1d:ea:d0:2f:67:98:92:3d:b0:c3:90:e4:e3:26:
f6:51:5c:17:ef:27:2f:89:a1:82:8d:cb:d2:fc:be:bb:ce:3c:
e0:7d:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:19 2026 by rpki-client