
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782.cer
File: 492b5237-6113-4678-8542-d7f56ce00782.cer (raw, json)
Hash identifier: LZhl7yGr9i+usvz+f5Gd6SOzDr/2Ykz7+SRgIP4YbBo=
Subject key identifier: F0:59:EC:09:2F:2B:57:F1:78:B2:89:C0:9C:C8:00:DF:A8:11:53:57
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584DEDD8F8A7CD529416974C9C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/492b5237-6113-4678-8542-d7f56ce00782.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 23 May 2026 12:45:19 +0000
Certificate not after: Fri 25 Aug 2028 12:45:19 +0000
Subordinate resources: AS: 400806
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ed:d8:f8:a7:cd:52:94:16:97:4c:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: May 23 12:45:19 2026 GMT
Not After : Aug 25 12:45:19 2028 GMT
Subject: CN=492b5237-6113-4678-8542-d7f56ce00782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:cb:f8:fa:b6:4f:6c:c2:e2:3d:60:e7:76:
32:b0:74:db:09:41:f6:78:7d:44:58:4a:08:9f:68:
1a:d2:37:d4:fe:73:96:a8:a3:85:3c:0c:10:05:15:
ba:e4:1b:5b:78:5d:25:9e:d0:dc:3e:36:b6:eb:ea:
f8:2e:12:80:9d:f6:65:b0:67:3c:5a:f2:9c:6e:c1:
82:04:e9:3c:fa:f4:65:40:c7:9f:8a:f8:97:63:be:
0f:e7:c8:cc:a6:83:e7:84:2e:5f:97:1d:bf:87:57:
7e:d4:60:74:62:63:d8:46:07:31:c0:a9:9a:99:22:
9f:e7:90:3b:66:e9:5b:68:67:18:3f:25:0e:24:83:
36:96:7b:50:cc:0f:c3:55:41:05:90:aa:ed:e4:29:
66:c0:59:09:87:05:da:c6:2b:f4:01:72:0a:f1:31:
7d:0c:b0:f0:4d:d9:ff:5e:6f:12:fe:fb:b9:1b:de:
99:90:d2:92:6e:f6:58:09:4e:b8:d9:b0:b4:e3:b1:
bc:17:b1:db:59:ef:3a:83:73:73:ef:02:24:ec:a6:
b7:6c:4a:16:98:f9:b0:07:26:e2:0d:7a:bd:42:e5:
e7:5b:e0:7d:a4:df:36:d8:c5:a4:15:39:0d:b2:2f:
58:8f:58:b4:43:22:6e:76:49:c3:3b:85:c0:ec:57:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:EC:09:2F:2B:57:F1:78:B2:89:C0:9C:C8:00:DF:A8:11:53:57
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/492b5237-6113-4678-8542-d7f56ce00782.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400806
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:db:55:e0:36:78:3a:b6:cd:63:e5:3a:9c:7b:1b:ad:56:3b:
d9:b6:5e:91:fd:8a:71:a0:7b:c7:39:37:95:a3:89:4e:10:0e:
8e:c6:2f:39:78:e6:25:35:a6:ea:0d:fc:fb:7e:ac:d9:54:f1:
52:62:91:5e:53:df:86:5a:0c:13:1b:e8:fe:de:3d:f9:5b:bd:
70:07:9a:7d:66:2a:e2:0a:34:32:9e:3e:94:a0:bc:b1:5d:7f:
08:d7:b1:6e:dd:89:a1:7d:2d:cc:34:fa:4d:50:aa:14:e1:2d:
8b:47:36:aa:23:26:b4:dc:28:d2:40:14:7f:b4:f4:24:da:19:
95:17:ca:a4:a2:a4:1d:1a:96:76:e1:a4:ec:4a:aa:53:5d:54:
e3:ec:db:9b:96:2f:33:16:ab:6d:31:9d:43:eb:5f:7c:6e:36:
4a:17:ee:2d:7e:f8:e1:38:c0:77:a9:da:3f:ec:9d:6f:0c:d7:
97:26:6b:57:7a:dd:8d:5d:c7:9a:35:4c:eb:05:49:d5:a5:c5:
29:1c:50:35:8f:de:f8:d3:6b:f4:64:af:d5:d8:3c:31:39:e4:
f5:fa:88:6b:46:26:9e:5d:e7:ae:2b:f0:8a:7d:19:59:cd:f5:
e7:24:8c:cf:7a:6c:d2:57:f0:fe:00:4f:0d:df:7a:b1:51:c1:
67:12:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:31 2026 by rpki-client