
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c.cer
File: c8735afd-0489-4381-a272-01f568cf031c.cer (raw, json)
Hash identifier: gwTZ+j/FqxJI5KKPr6S+Hxq4B2jO+3Phdz8LeZa8UGw=
Subject key identifier: 1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E03B742949DC898C0F2657090
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 31 May 2026 08:45:11 +0000
Certificate not after: Sat 02 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 36786
IP: 2620:0:1af0::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:03:b7:42:94:9d:c8:98:c0:f2:65:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: May 31 08:45:11 2026 GMT
Not After : Sep 2 08:45:11 2028 GMT
Subject: CN=c8735afd-0489-4381-a272-01f568cf031c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:74:f4:2b:63:f6:4e:8c:5e:15:a3:ab:00:
60:71:37:77:e0:e4:76:42:10:ee:3d:e8:39:e5:62:
b5:c0:e1:d0:a6:91:be:a2:b8:40:3b:81:6f:9b:15:
1c:df:76:3f:bc:d6:b2:f3:4a:83:ea:22:ed:6c:bf:
11:4a:60:ea:f6:93:cf:df:ba:fc:28:40:00:33:76:
fb:d8:bb:41:3b:02:58:df:06:11:38:fa:ca:c2:54:
fb:26:42:0b:b5:88:9d:16:60:65:e7:34:39:34:ed:
cc:81:2e:8e:4a:2e:4d:a9:0d:87:b6:c9:5b:be:6a:
65:a3:37:ba:a2:78:85:78:d2:7c:f2:a8:f9:4a:ca:
06:e7:da:02:91:eb:cf:78:95:c2:92:85:7b:5f:cb:
8e:6d:0c:14:2f:9d:8c:e3:67:c0:4a:a6:6a:4e:0b:
05:ea:e1:29:59:0a:5a:93:8f:8a:f2:73:dc:80:ed:
b7:e7:28:fe:6b:b3:6e:c9:34:b8:33:75:f8:d4:01:
94:ed:10:2f:5d:18:f7:b1:b3:80:be:44:b3:da:8c:
9c:a0:29:00:b2:f0:3b:63:66:18:a6:30:f2:e9:5c:
ed:3c:7d:58:b8:43:b4:05:14:e4:d1:26:7b:4a:1e:
72:c6:8d:1d:5c:bd:15:0f:3f:1f:01:97:d5:22:98:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:16:0D:B0:62:36:BA:5C:93:02:BF:E0:CB:34:FD:44:D2:97:73
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c8735afd-0489-4381-a272-01f568cf031c/c8735afd-0489-4381-a272-01f568cf031c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:1af0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36786
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:51:c6:80:1e:96:e3:66:5d:c0:c6:84:93:3a:f3:f2:f7:db:
15:a9:19:66:bd:97:f3:3f:39:89:87:45:96:8a:cc:5d:02:69:
72:7a:38:59:e0:12:a1:74:3e:f0:c5:04:84:23:18:8e:9b:3e:
04:6f:76:8a:75:54:80:fc:35:e0:48:71:7b:fa:7e:70:94:49:
3e:98:f1:a3:31:0c:e0:b3:e1:f2:8e:79:55:cf:a2:2c:89:24:
11:e5:84:8b:b3:04:0d:12:03:d2:21:c5:29:d5:63:8a:18:0a:
b3:47:ae:1e:26:75:9a:b5:a6:a1:d5:dc:6c:15:d6:c0:6b:ec:
fd:02:33:eb:42:e4:3c:46:ba:04:4e:b3:c0:32:5c:14:54:ef:
59:01:5b:21:ec:71:87:29:d0:e0:b8:bf:40:8c:3c:37:86:74:
12:a0:85:55:73:dc:9d:93:47:e5:17:cb:de:72:3e:f7:3d:a8:
4a:d8:43:e7:23:b6:16:d3:3f:8e:b1:ee:70:75:1c:33:84:a4:
54:95:04:df:80:07:34:1a:1d:5e:65:8e:f3:02:73:87:9e:65:
ab:42:a5:ce:19:f7:f2:b4:f1:73:70:0e:ea:83:43:7e:8c:fe:
08:c9:73:2c:a1:d4:54:f0:6a:64:6b:1e:96:2b:17:cc:a7:8f:
1e:1e:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:49 2026 by rpki-client