
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
File: dbf66384-fa53-47fb-938a-f1e5064023e5.cer (raw, json)
Hash identifier: IwBof9O90L0ZxDaVS/6kYMFet6n+U6nqfoUUhkgs4Jw=
Subject key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584CE08FC4DC5D3851708DF63CC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 01:45:22 +0000
Certificate not after: Sun 21 May 2028 00:45:22 +0000
Subordinate resources: AS: 7973
IP: 129.176.0.0/16
IP: 198.190.250.0 -- 198.190.252.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e0:8f:c4:dc:5d:38:51:70:8d:f6:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Feb 16 01:45:22 2026 GMT
Not After : May 21 00:45:22 2028 GMT
Subject: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:cc:9f:1e:78:a7:13:0a:fd:00:b4:e3:4c:
7e:e6:d4:22:b7:5c:72:99:30:b3:5e:0e:f5:90:2e:
9b:26:19:17:ad:75:99:4f:89:13:3e:83:bc:3c:1b:
03:64:17:f0:b3:1b:be:0f:92:69:a9:ba:3d:a0:19:
52:5f:28:b4:f5:49:7d:51:2e:a4:54:ca:6b:4f:63:
9e:2f:0a:7d:82:a9:de:71:86:30:e5:7e:01:16:6a:
56:50:e4:c9:10:20:58:b3:f3:60:d9:99:ea:1b:c3:
c6:06:35:7f:24:7f:3a:ec:15:84:ad:3e:92:77:d2:
92:c5:b7:29:7a:3f:7f:b7:46:1e:ca:53:8f:6f:ed:
8e:f7:63:b1:c4:29:25:a5:fa:a7:d7:c9:d8:bf:48:
f1:02:41:f3:81:34:0f:9c:44:7c:dd:fc:2a:ad:33:
19:01:54:df:19:86:b9:1f:51:57:d5:18:df:2a:20:
bf:25:dd:06:74:f8:0a:99:66:0e:58:e5:6b:d7:29:
3c:4d:74:8f:6e:bc:28:c6:72:ec:b8:cc:9b:e1:08:
e4:5c:e0:a5:6f:3a:96:c1:1b:b9:7a:82:52:b2:86:
8a:93:d8:29:e2:a1:ea:80:e7:22:47:0c:a7:3d:9e:
44:3a:2e:c6:95:c0:29:31:cd:94:d3:4b:68:b4:72:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
129.176.0.0/16
198.190.250.0-198.190.252.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7973
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:d3:56:32:63:71:fe:f9:f8:2e:db:c1:30:50:83:e7:45:3b:
30:70:34:fc:fe:f9:43:25:8d:8d:ed:0a:f6:50:db:58:be:21:
0a:c3:c0:72:b3:4b:e4:2d:11:f8:69:b9:9e:67:25:64:55:29:
a6:b4:b4:2a:69:22:3f:af:2f:fa:c9:18:6e:36:9a:7c:9d:12:
32:a1:d4:92:b1:0e:65:ef:f8:15:0d:25:64:7c:0b:16:d1:db:
1e:48:19:11:8c:5d:6c:60:55:91:5b:9a:60:73:ca:8e:9a:4e:
87:27:14:07:36:f4:67:61:31:3c:53:f1:f7:ce:d1:2e:8b:9e:
db:a9:d5:45:9a:ca:11:58:58:2a:4f:7c:31:24:88:1f:ce:1d:
4c:e6:d7:e5:92:7e:6a:17:47:44:71:ed:d5:db:6f:da:e3:28:
20:e9:bb:cc:f4:a6:71:75:b6:ee:2d:29:fc:8b:fe:8c:cd:c1:
65:50:6c:6a:4e:f1:d0:fd:cb:75:ac:d9:c7:53:88:1f:e3:02:
00:4e:4c:36:77:06:c8:c5:6f:f6:90:9e:5a:73:e2:68:ba:a5:
5d:24:40:1b:6e:e9:d4:90:45:be:6f:44:29:28:9d:4d:ce:72:
45:3d:95:fb:24:11:b8:7c:3b:da:c9:a6:37:62:03:dd:49:2d:
2b:86:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:57 2026 by rpki-client