
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
File: 4eb5326f-ee03-4174-b355-9916b3e826aa.cer (raw, json)
Hash identifier: suey9gynYHJ9kkadHVSfGX66u4qc2/8YDarlcBRV2R0=
Subject key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584D4EB80260BFAD14385E93CDE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Mar 2026 12:45:22 +0000
Certificate not after: Thu 29 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 32076
AS: 400380
IP: 64.30.148.0/22
IP: 81.199.36.0/22
IP: 81.199.144.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4e:b8:02:60:bf:ad:14:38:5e:93:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Mar 27 12:45:22 2026 GMT
Not After : Jun 29 12:45:22 2028 GMT
Subject: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:69:7a:db:d5:26:e0:32:52:95:f5:bd:6d:
b0:9f:c6:61:ec:14:3e:ce:5b:eb:b1:e0:b8:dd:24:
78:7c:10:e1:75:ed:fc:69:32:9e:b3:9b:c3:a0:34:
61:6a:80:c2:d6:70:be:50:7b:00:7a:2c:f3:c0:cc:
a5:02:5c:a3:62:a1:bb:1f:6c:bf:d0:59:da:ee:10:
07:a5:ee:38:f1:2a:02:f0:04:0c:90:8e:8d:f6:bf:
7e:15:6d:66:a4:a9:8c:ba:f9:7f:d3:7b:ce:a6:73:
85:49:96:31:2c:8c:d9:ee:9d:ce:c7:0b:91:82:85:
bb:14:11:62:51:f7:3b:10:62:4a:81:25:ca:31:a2:
8b:7e:9b:0d:31:7b:54:bd:63:96:b7:e4:4b:83:b7:
f0:57:5b:22:cf:69:50:09:63:87:c9:f3:fc:65:c5:
a9:fa:fb:32:38:e0:d2:b4:27:3e:d9:01:5c:25:93:
e9:da:ed:72:71:77:3d:1c:d6:c9:8a:45:23:a3:e0:
76:66:b4:9e:40:b0:e8:d6:c6:11:8c:ce:d5:2e:33:
38:8f:d1:8b:d0:ec:af:7e:d3:2d:b3:e8:bf:3f:f3:
b3:19:a0:93:73:7e:7f:21:8c:4f:de:1f:84:48:b1:
14:d5:d1:1c:f5:42:8f:96:ac:1d:f4:af:74:65:2e:
76:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.30.148.0/22
81.199.36.0/22
81.199.144.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32076
400380
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:2f:7e:2c:fa:7b:52:22:fd:bf:d9:08:4f:a1:1e:a5:0f:fd:
2c:9d:35:17:d5:17:39:f7:45:cb:71:64:38:a9:ed:a2:9a:65:
ac:d8:32:51:7f:02:f6:17:b7:08:22:9a:f3:ac:1f:cd:4d:05:
9f:45:3f:cf:37:29:d9:0b:8d:18:60:5b:aa:a4:f1:40:2c:8e:
7b:2b:91:32:f2:1b:05:09:5a:70:65:27:64:0c:ab:c8:7e:c1:
d9:b3:f4:60:a6:d9:9d:66:a6:cd:c1:d7:11:63:a2:22:0a:c8:
2f:e9:1d:e0:bb:ba:f5:86:bd:b1:2e:c2:f6:80:ba:42:22:cb:
3b:96:7b:61:26:bd:a1:05:d9:7a:2d:f4:79:72:01:bb:81:66:
99:a6:9b:eb:50:1f:15:7f:d0:e3:ed:86:8a:73:b6:a0:c2:18:
23:5c:86:5f:a1:b3:45:80:52:0a:ae:37:9f:11:a2:90:bb:6b:
d7:4a:19:9f:f6:d6:25:b9:36:2d:8a:95:8b:10:08:9e:16:46:
92:f4:61:d2:47:c4:a4:c4:18:12:bd:54:00:b7:3e:5f:f4:54:
a6:68:9c:92:e8:c0:c6:21:26:13:37:1f:75:3a:3f:dc:95:e2:
5a:c6:0e:2d:d2:de:f1:96:ec:c6:58:cd:ff:89:87:4c:3d:9a:
81:1f:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:05 2026 by rpki-client