
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
File: b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer (raw, json)
Hash identifier: g9o5lmO3mzlZnvHylvj3mxsWSWzez+BcHxo92Y+uVCo=
Subject key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584DE578E5AF849074535A066500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 20 May 2026 12:45:17 +0000
Certificate not after: Tue 22 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 46427
IP: 23.151.136.0/23
IP: 140.235.115.0/24
IP: 2602:2c1::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e5:78:e5:af:84:90:74:53:5a:06:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: May 20 12:45:17 2026 GMT
Not After : Aug 22 12:45:17 2028 GMT
Subject: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:4f:25:c2:a0:d4:41:61:96:cd:cb:fb:d4:
32:ca:65:f3:e1:01:54:e0:8f:27:1c:79:d5:fa:88:
f9:bf:99:4e:9c:a4:34:5d:8f:3d:6e:ab:30:28:0a:
1f:53:44:70:13:3e:18:4a:c9:40:3e:15:e1:23:d4:
86:c0:93:6f:a6:10:6d:6a:6e:fe:05:60:7c:23:f3:
a9:6f:08:88:b9:b6:81:e8:9e:bf:fc:00:d6:48:00:
8e:a9:0e:06:46:f8:7a:bf:d2:b5:c3:cd:f2:09:61:
f7:78:bd:aa:1b:4a:05:0d:91:03:54:3d:87:03:2f:
b8:44:47:53:ca:ca:3d:fb:68:71:94:bd:a3:c3:87:
3f:87:56:1f:5e:aa:fe:dc:9d:5f:79:3a:d7:11:56:
e2:79:32:f2:53:64:c0:3a:97:48:8e:00:7c:33:6b:
c6:a6:f6:90:86:1c:ca:76:e5:c7:1f:27:3d:a4:b8:
d3:95:49:d5:44:3d:42:e5:6f:b0:25:f2:ab:36:0d:
17:54:b0:a6:b2:dc:55:7a:99:13:79:09:32:48:e4:
04:53:60:fc:62:3d:22:cd:52:fe:5e:bb:62:f6:48:
a3:9e:d4:d3:99:d5:83:ef:7c:cc:d8:40:4d:99:5e:
04:53:df:1e:ae:9c:1b:50:0c:95:76:36:73:f0:1f:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.136.0/23
140.235.115.0/24
IPv6:
2602:2c1::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46427
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c2:d5:2b:5e:96:9f:e8:7e:89:b5:a9:9d:00:07:1f:df:df:
d5:34:6f:99:a4:2c:6b:b7:0b:67:17:ea:00:eb:90:85:fc:17:
c6:a9:d2:7a:96:88:48:9d:d5:53:64:d2:00:e3:20:0f:51:aa:
dd:7d:d6:20:5d:c4:9f:fe:b7:f8:da:32:03:c1:d2:19:ce:96:
77:13:cd:7d:22:a8:4b:ea:6a:c7:54:b0:97:bb:ea:ba:a9:ea:
2d:80:d9:4c:61:23:3e:1c:7c:9e:64:56:9b:43:95:9d:b5:0f:
03:18:ca:bb:7d:94:0c:0a:5b:13:eb:6f:e1:61:06:3d:41:3a:
6e:55:dc:27:d7:1f:0b:d1:0a:80:61:58:12:46:32:35:d2:09:
0f:0d:25:3c:92:bb:84:04:d0:c3:58:24:52:61:a8:44:ac:27:
82:2d:40:fc:a2:99:53:0e:a5:fd:05:a0:4b:fc:79:e4:9c:64:
01:8f:b5:aa:56:eb:95:e8:e9:0c:c8:46:7c:b5:1d:f6:12:90:
1a:12:99:ee:ce:20:5b:05:2b:19:fe:8c:c0:ca:11:75:66:c4:
e8:81:ba:4d:51:06:61:a2:c7:63:a4:db:95:2b:c4:23:13:d8:
4b:59:9e:dc:35:0a:91:cc:4a:e8:4d:4b:5c:88:07:d7:4c:2e:
d9:2c:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:42 2026 by rpki-client