
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
File: 541b7255-dab8-4786-bbe3-843423870307.cer (raw, json)
Hash identifier: L5HMCw2+0VELzhO4qBxFSb3blhWeEBLW2TRbTCU2asc=
Subject key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584CED277D3D444C911F782FB840
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 20 Feb 2026 14:00:47 +0000
Certificate not after: Thu 16 Sep 2027 18:15:41 +0000
Subordinate resources: AS: 400956
IP: 160.79.116.0/22
IP: 198.203.200.0/22
IP: 2604:1460::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:7d:3d:44:4c:91:1f:78:2f:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Feb 20 14:00:47 2026 GMT
Not After : Sep 16 18:15:41 2027 GMT
Subject: CN=541b7255-dab8-4786-bbe3-843423870307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:94:19:87:14:c2:b9:dc:0e:0c:92:d4:df:
5e:e4:6d:b0:ac:3b:6b:b2:7a:80:cd:f7:c3:16:b4:
73:7d:20:73:b7:76:05:33:bf:07:cf:6e:9c:8c:80:
cb:d8:a6:a2:2d:bc:c0:07:1f:92:74:9f:10:14:63:
cf:c4:7c:a8:ac:93:56:a9:60:ec:97:9a:86:5f:f9:
66:97:d5:98:a2:7a:56:ab:38:59:30:22:18:be:55:
fd:c1:2d:5b:b9:e4:66:02:f1:96:f3:bc:1a:7e:cc:
7a:04:9e:42:b7:6f:08:4b:1d:a8:86:48:a1:d9:49:
3c:df:f2:78:15:c9:6c:07:84:81:57:81:c7:bf:02:
52:78:95:b4:38:1b:b0:2a:7d:c1:e9:ff:c7:f8:1f:
8e:ea:ad:11:c4:ea:3a:94:ba:5f:2d:3b:cc:bf:fd:
5f:7d:2a:4c:48:63:9d:48:aa:4e:09:93:8a:11:2d:
0f:65:76:ab:40:53:4c:45:85:41:b4:2c:a6:72:a9:
f6:4a:33:65:d9:85:2b:e3:a8:9e:2a:52:3e:0d:be:
b7:1c:ca:4b:80:3f:f9:1e:e7:ce:f7:72:67:44:45:
8b:14:c2:37:2e:fe:4d:98:b3:fa:bb:f5:3d:8b:65:
8d:8f:f3:7a:1d:d4:d1:67:b6:07:4a:59:e5:08:d7:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
160.79.116.0/22
198.203.200.0/22
IPv6:
2604:1460::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400956
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:3c:67:a0:48:80:85:23:03:81:b0:06:c2:8f:73:04:e8:5a:
06:e4:e1:3b:63:5f:cc:5b:9e:78:dd:d6:aa:82:8b:81:71:d1:
b8:99:86:84:87:e5:7b:06:f8:70:1a:8f:90:fd:3b:ad:b4:9c:
b6:f5:82:d4:81:81:e6:66:8c:05:4a:86:c2:95:20:cb:e5:85:
58:e0:7b:29:47:99:27:b8:09:e6:4b:f6:1b:19:fc:43:e9:b2:
ff:89:68:c6:93:da:f9:de:6a:2d:70:ee:bc:02:f4:6e:0c:56:
81:7c:96:20:de:b8:6a:a8:a6:69:46:55:f5:3a:b5:48:7e:ec:
02:a9:e0:4c:e3:6c:a8:8b:26:92:a7:4f:54:c0:3a:5d:f7:46:
70:9b:12:e1:b5:ea:a5:47:7f:ee:6e:11:81:4d:4a:a7:b2:19:
ec:6c:b8:79:91:b6:7f:e7:95:35:e5:37:ba:04:9d:db:b0:22:
d1:e0:08:f6:84:16:1b:ae:60:e6:9f:bc:8f:be:cb:cc:ea:3b:
41:09:27:41:c7:e3:df:ac:7e:8f:f4:e0:27:af:7c:ed:05:5c:
44:d0:dd:4b:e3:7d:da:64:ee:07:69:23:0a:64:bb:a7:9f:cf:
79:94:c5:2b:5b:7c:b3:a8:e9:91:61:ce:17:c8:73:f7:15:3b:
ec:70:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:48 2026 by rpki-client