
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b3b41c-2484-406a-a980-43173bf7af25.cer
File: b0b3b41c-2484-406a-a980-43173bf7af25.cer (raw, json)
Hash identifier: 4bScHxovFzHqLSqL6UKVyjrOu3bziyF6ComYcFr2+jA=
Subject key identifier: 00:09:6B:B4:56:21:59:39:F5:6B:1D:11:04:DF:AE:A6:15:AC:F7:2A
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584F3E4053EE8734D72D1714BEE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b3b41c-2484-406a-a980-43173bf7af25/b0b3b41c-2484-406a-a980-43173bf7af25.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b3b41c-2484-406a-a980-43173bf7af25/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 21 Sep 2026 00:45:11 +0000
Certificate not after: Sun 24 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 395867
IP: 160.231.0.0/18
IP: 160.231.192.0/18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:40:53:ee:87:34:d7:2d:17:14:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Sep 21 00:45:11 2026 GMT
Not After : Dec 24 01:45:11 2028 GMT
Subject: CN=b0b3b41c-2484-406a-a980-43173bf7af25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:25:22:15:1b:ed:eb:5f:8c:71:96:ea:43:
19:bc:09:96:2f:c7:ab:eb:4b:6e:86:4f:9a:d9:37:
74:c0:cb:63:65:ff:ff:79:2c:59:0c:0d:29:b1:ab:
b5:ec:2b:7d:f2:08:c8:fe:2c:61:e2:56:2f:3d:44:
95:75:9c:bb:74:f6:0e:7f:7d:f9:8d:ac:8a:f7:71:
0f:6b:1b:2c:2f:ef:17:a0:3e:ed:f0:55:ed:87:90:
21:f9:18:38:f7:c7:e3:10:28:75:72:3e:c1:0f:2d:
5a:c8:4f:fc:e1:82:7f:9a:b2:61:f3:4b:f0:e0:e0:
12:07:30:de:84:3d:3d:a2:b4:cd:3e:e4:61:32:f4:
79:45:d7:22:88:8e:0b:ad:dc:83:c5:dd:8b:0e:24:
58:c0:d7:65:0e:0b:ae:a7:6a:84:40:82:59:43:e7:
95:a6:21:17:e6:0a:a4:d1:cf:31:dd:1a:b6:22:a8:
08:87:70:57:be:b6:a9:70:22:ca:c0:8f:01:03:22:
45:27:cd:9b:09:80:e1:da:65:1a:95:41:b6:bf:75:
23:0f:91:3c:b1:95:7f:ec:4e:08:c9:91:88:df:d0:
52:fd:4b:15:e3:8b:8e:1f:14:21:02:9b:d4:65:b3:
f0:39:7f:ca:52:7e:64:38:ee:37:66:4c:ef:7e:fc:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:6B:B4:56:21:59:39:F5:6B:1D:11:04:DF:AE:A6:15:AC:F7:2A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b3b41c-2484-406a-a980-43173bf7af25/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b3b41c-2484-406a-a980-43173bf7af25/b0b3b41c-2484-406a-a980-43173bf7af25.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
160.231.0.0/18
160.231.192.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395867
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ea:47:b6:f2:c6:a9:98:77:de:4a:c7:68:fd:57:cf:41:81:
85:c4:0f:a6:8b:eb:da:96:60:0d:11:83:9f:8e:3d:a3:f2:41:
db:d2:be:1a:0f:c2:37:c1:8b:c7:9b:e5:f2:d7:7b:39:51:c5:
35:f0:0c:85:e9:b2:04:df:19:38:ef:42:a0:65:af:ff:8e:84:
1b:b8:86:0a:39:23:30:3a:2a:c4:0f:40:94:e4:b4:ad:2b:2d:
db:29:a9:5e:ae:a7:90:6d:be:44:22:e3:10:dc:75:04:53:eb:
b3:16:65:9f:c9:7e:55:bd:f0:77:bd:31:ce:a0:ec:77:ec:53:
1c:bc:3e:84:36:4c:a2:79:31:bd:7a:a3:55:7c:dc:6f:6f:9d:
9e:79:93:32:2a:aa:b2:1a:af:f4:33:ef:3e:80:37:69:40:05:
29:0c:01:54:06:61:31:a7:ac:70:03:0d:1f:de:bc:9b:5c:d3:
da:ac:fc:d6:98:2d:58:02:dc:c1:41:e8:6e:02:e0:ac:49:78:
ae:4d:f8:f9:23:f1:7d:0b:fe:0d:fb:f7:f1:4b:cd:b5:ea:aa:
fd:e0:cf:0c:66:56:0e:58:bd:e5:61:ca:11:5a:2f:79:fd:4f:
8b:ff:78:fc:56:0f:53:01:e8:54:1f:e4:b6:1b:c7:f6:f3:fc:
58:09:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:14:41 2026 by rpki-client