
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
File: a110574b-b0a8-4116-8fba-63e69eba9d92.cer (raw, json)
Hash identifier: 9RZmKICXMATDSC0W24hHmlw+9FRjorBWHHpYH3R0TJ0=
Subject key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584DF0A3A388E60F2F20B1F44500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 24 May 2026 12:45:17 +0000
Certificate not after: Sat 26 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 31942
IP: 104.37.8.0/21
IP: 143.223.144.0/20
IP: 199.102.120.0/21
IP: 2607:61c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f0:a3:a3:88:e6:0f:2f:20:b1:f4:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 24 12:45:17 2026 GMT
Not After : Aug 26 12:45:17 2028 GMT
Subject: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:71:26:a3:8f:4f:51:a1:81:9a:10:71:35:
31:7d:c8:b4:95:4b:9a:26:17:cb:41:59:d0:56:07:
d7:ed:d3:79:9e:6f:83:d2:88:f2:a2:70:31:36:57:
c4:3e:17:4d:8d:bd:68:19:18:8f:d7:92:2a:b5:f1:
46:c7:a5:33:8e:1c:2a:6d:fe:f5:76:0c:fb:5e:65:
2c:a8:86:8f:30:eb:0b:bf:23:b2:cc:0d:3b:d3:93:
38:7c:36:16:2c:5c:16:54:66:15:80:24:56:9f:dc:
a1:f3:16:6c:37:b0:d3:e1:e1:ec:91:90:4c:b9:5d:
9f:62:35:af:d2:7d:99:37:0e:64:67:57:26:08:91:
6a:ed:fd:aa:c5:65:00:c1:0c:81:6b:50:89:d1:41:
3b:d9:48:63:dc:52:c4:1c:37:d6:39:9b:e9:42:15:
97:14:03:7c:60:f7:77:32:fc:59:72:7d:8a:18:4c:
42:54:35:9f:85:56:f1:7c:e5:df:e9:7f:02:8c:6f:
ed:e6:a5:61:40:c0:72:70:a3:d8:e8:be:5a:57:e0:
7b:eb:3f:e5:7f:7d:85:b3:03:69:cb:c6:44:de:25:
b6:89:a4:62:ff:a2:a2:a8:5c:56:c1:be:16:32:40:
95:aa:99:f3:4e:54:ef:4a:eb:54:af:05:75:0e:19:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.8.0/21
143.223.144.0/20
199.102.120.0/21
IPv6:
2607:61c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31942
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:08:42:11:5b:aa:e5:2f:68:f1:fc:25:98:a3:c9:e2:60:27:
02:6e:cb:ff:1f:20:11:66:79:d1:e4:a9:c5:01:6f:81:a5:0a:
19:17:6f:a7:8c:a8:90:16:fc:95:d4:0b:20:b9:7f:e0:19:15:
38:94:29:b8:6b:99:73:e9:e0:cb:c0:76:94:af:7f:d1:04:79:
48:55:0e:d1:c3:48:fd:88:57:1b:eb:29:3c:f4:15:26:70:80:
f2:69:30:9b:cb:2f:4c:30:1f:eb:68:ed:7b:89:ec:c7:7b:15:
43:25:10:41:c9:1b:bc:5d:19:cf:62:84:c4:98:6c:27:59:35:
f4:49:2b:d5:4d:01:d6:e6:c8:9a:87:7f:b8:e7:21:86:01:d7:
6d:60:15:4f:da:a6:25:de:52:74:91:43:61:82:8f:e7:74:cc:
17:04:28:a9:91:7e:54:05:8f:98:10:21:de:73:3d:09:67:60:
36:32:d8:54:9f:f5:49:8e:10:05:25:78:76:0c:d3:21:3b:59:
48:64:90:57:13:22:be:08:1d:8e:12:37:75:7d:9c:04:f5:f6:
07:49:40:5d:7d:51:5d:53:95:67:d4:0b:c8:91:1f:17:4b:fc:
8d:8c:3c:f5:01:cc:0d:9d:7f:0c:6e:40:b3:a7:a9:39:a7:f3:
a8:e7:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:05 2026 by rpki-client