
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
File: c9b2f783-ae49-438b-a994-34e0ab78157d.cer (raw, json)
Hash identifier: jbpPKVF8SV2WTvjZU7QOWskLr3oxHg/ECTlmmWTGS0o=
Subject key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584E1A0CBDB374AC06D56F0EBF00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 08 Jun 2026 08:45:12 +0000
Certificate not after: Sun 10 Sep 2028 08:45:12 +0000
Subordinate resources: AS: 16628
IP: 104.171.144.0/20
IP: 104.237.224.0/19
IP: 107.181.112.0/20
IP: 2602:ffbc::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1a:0c:bd:b3:74:ac:06:d5:6f:0e:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Jun 8 08:45:12 2026 GMT
Not After : Sep 10 08:45:12 2028 GMT
Subject: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:46:17:e3:02:81:a2:a0:b8:5a:f7:28:97:
c3:42:a0:40:54:6f:e5:d4:3a:79:81:b1:e7:20:13:
db:14:b4:a4:fe:a2:b6:8a:ba:d8:f7:2c:9b:a7:ed:
9c:3a:81:bc:76:28:fe:88:29:77:22:bd:15:e5:b5:
25:4f:99:19:2a:e0:7c:0c:33:4c:f5:97:cb:65:1c:
f7:ba:60:0f:e1:2d:35:33:ad:a9:1d:57:4a:a8:18:
20:c3:60:19:a8:96:14:c0:f1:e4:64:24:c7:ad:e2:
fe:73:21:6a:3f:dd:18:d0:9d:be:1c:97:92:f3:27:
89:7c:26:ed:27:49:dd:e0:24:28:97:c7:e6:f2:64:
d5:0f:f1:c4:e7:a0:1a:23:45:88:bd:5b:46:1a:79:
18:7e:1e:7e:94:ba:97:74:b5:d7:93:08:e9:5d:cc:
01:2d:7d:3d:fe:df:27:b1:42:37:fd:2d:6e:ae:8b:
5e:3e:7f:00:6f:92:14:99:15:5b:d6:71:ea:08:88:
4c:e8:4a:47:be:0b:d5:58:4f:67:85:a5:73:b8:a5:
03:25:92:e8:7d:2a:2c:15:4f:72:96:67:0a:a0:9e:
e4:7d:a7:20:0e:cf:10:60:39:37:7c:88:e2:6a:5d:
86:4b:42:47:75:99:25:36:7d:67:ce:87:cc:fc:9e:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.144.0/20
104.237.224.0/19
107.181.112.0/20
IPv6:
2602:ffbc::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16628
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:2c:46:eb:4a:0c:92:bd:ea:47:e4:cc:d9:b7:ef:5b:bc:bc:
8a:17:55:17:af:1a:4a:fd:4b:ba:6f:4d:28:d0:14:48:c5:3b:
69:80:37:05:82:b5:8a:93:1b:ab:ee:3f:5a:74:e9:9b:f2:f7:
f0:67:34:db:ac:47:17:43:da:04:27:93:6b:f0:8a:10:bd:c1:
b6:2f:3f:82:b3:9b:79:98:f7:25:fb:5d:3d:26:b0:4e:a6:ff:
b8:08:f6:79:6a:fd:f2:38:5e:54:e8:92:80:c4:17:ae:58:90:
0a:ed:32:c0:2d:c2:39:b6:55:1a:88:e7:3d:17:40:64:f7:ad:
69:24:e0:40:18:76:e0:a2:86:f3:33:c3:bf:c9:b0:67:51:8d:
78:bd:4c:55:86:2a:cc:f8:9a:7a:ec:e6:6a:d2:5b:83:4c:c0:
3f:fc:39:cb:a9:00:89:c3:e8:f2:b1:b1:02:a5:3c:ce:42:72:
b0:8f:5e:c5:3a:9c:f4:af:f7:5e:5e:20:94:1b:5a:41:ae:a9:
91:28:6e:08:bf:c4:55:c4:a2:1d:0a:73:bc:c3:57:00:30:c5:
17:a5:95:a1:c1:15:bc:40:47:c6:1b:fa:72:31:82:38:d1:76:
c5:8c:81:0c:e5:72:7f:34:e4:a1:ab:c9:f9:68:04:83:f7:8c:
d4:3a:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:12 2026 by rpki-client