
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
File: da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer (raw, json)
Hash identifier: Geus2HBbY5nzhLrechiJaReglZJtWZOZFu25wLYGYu4=
Subject key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CE1F51B3CC89A0B407D6A5500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 13:45:22 +0000
Certificate not after: Sun 21 May 2028 12:45:22 +0000
Subordinate resources: AS: 401489
IP: 23.191.216.0/24
IP: 155.103.132.0/22
IP: 2602:f7d4::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e1:f5:1b:3c:c8:9a:0b:40:7d:6a:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 16 13:45:22 2026 GMT
Not After : May 21 12:45:22 2028 GMT
Subject: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:0e:fb:79:22:5a:14:cf:44:b0:f5:0a:41:
fd:da:25:5c:35:ad:06:cf:a3:14:e3:5c:7d:88:a8:
d5:8f:1b:6d:fb:61:99:01:ac:74:de:d0:0c:52:2c:
bb:9e:7f:63:41:6e:9a:ef:1a:de:bc:a0:98:96:10:
1e:46:6c:5f:5f:96:91:1c:75:7a:09:79:7e:9a:ec:
78:8a:b5:e1:de:8f:4c:fe:fb:1c:87:84:ce:a1:54:
ce:58:09:c9:d4:12:71:fe:5c:f2:af:71:fa:d1:35:
0a:0f:52:e5:99:6c:83:98:e5:0d:49:53:bd:1b:ac:
26:6a:2b:4f:0b:38:14:a4:1e:ea:48:80:bf:7c:cf:
59:8f:d8:01:4e:b6:65:c7:3f:30:54:d0:6b:44:68:
81:bd:0b:39:2c:92:4d:2c:17:2d:0b:df:9c:db:b8:
91:c4:09:52:34:c9:31:50:7a:35:26:ae:c8:62:9f:
f4:49:68:c2:77:50:7e:b1:46:87:61:6c:96:a6:b3:
e1:d5:86:70:dd:91:68:68:d1:ad:98:ed:40:0c:bd:
ca:fe:48:22:c1:ec:5e:71:7a:f7:7d:91:2d:0d:cd:
20:75:34:81:80:d2:41:a7:cc:a3:63:55:ec:a1:ef:
c9:25:32:16:cc:17:b1:a0:53:a1:8c:44:71:5e:67:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.216.0/24
155.103.132.0/22
IPv6:
2602:f7d4::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401489
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:49:0a:f2:44:a3:f1:56:a2:12:fc:a7:20:4d:29:65:f1:7d:
aa:8b:f1:e0:10:a8:32:b6:61:06:b1:8b:61:08:a3:a0:45:6a:
f5:c4:cb:d7:e4:a9:31:64:91:25:0c:74:0e:e9:e1:ce:53:f4:
49:79:fb:b6:a7:1b:0d:4a:df:c9:28:4e:fb:14:56:a1:db:f2:
da:c7:a8:0a:e5:4b:dc:91:78:bc:79:f8:e5:8c:00:88:1b:ec:
35:34:36:8a:69:b9:a7:09:4c:f7:f8:bb:55:7e:d6:f9:f7:8b:
14:3d:93:5b:d9:8f:6b:f5:70:25:7f:74:80:67:1c:d1:ea:8f:
c6:36:47:61:3c:ba:5e:18:14:db:54:64:db:70:14:a5:cd:59:
e1:bf:e4:8e:5c:8e:fb:be:bd:2a:6c:22:5b:13:40:f4:0c:02:
61:54:67:30:29:f9:ab:e9:47:86:f6:dd:b4:93:c8:ac:69:3d:
ca:b3:be:ad:6a:5a:73:76:f9:ab:99:a8:09:13:62:27:ec:9b:
cf:a1:76:f4:d3:46:d0:ce:3c:88:c2:a7:da:d7:43:23:b6:bd:
a3:51:79:49:c1:12:d0:dd:ac:0d:36:06:74:9d:a8:ca:98:ad:
58:ec:10:78:66:6d:97:d7:c0:d7:88:e4:57:46:9b:d1:97:f5:
76:30:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:03 2026 by rpki-client