Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
File: d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer (raw, json)
Hash identifier: DcLFcJsHZEUpkHt4AR/Gnu9KAJcG5Iy3Clte2n5Gzv4=
Subject key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer: /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial: 010D0C9F4328584D037550CF766D628E481E1600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 28 Feb 2026 13:45:23 +0000
Certificate not after: Fri 02 Jun 2028 12:45:23 +0000
Subordinate resources: AS: inherit
IP: inherit
IP: inherit
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:75:50:cf:76:6d:62:8e:48:1e:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Validity
Not Before: Feb 28 13:45:23 2026 GMT
Not After : Jun 2 12:45:23 2028 GMT
Subject: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:c3:a7:ab:85:4f:80:e1:5d:20:d4:a7:ab:
05:33:a1:17:4f:13:25:30:49:bf:2e:c1:f5:00:cc:
f6:60:4f:e7:c3:01:ec:30:75:ea:fd:f1:31:95:0e:
40:3e:9d:06:d4:00:9a:3e:47:c3:3c:e2:3d:30:c4:
c7:14:6d:01:f1:77:36:b3:f6:29:dd:62:10:d1:8e:
02:95:b0:d3:bc:e2:1b:56:05:2b:42:bc:cc:8e:3b:
2f:61:9d:06:28:04:0d:8d:8f:2c:a8:53:a6:4b:4a:
29:3b:3b:06:75:8a:9a:e4:dd:83:2b:7d:24:f0:9c:
cb:ec:e2:db:39:e7:de:bc:62:76:ed:f9:37:af:b0:
62:3b:58:cb:24:18:99:a2:2b:eb:01:5e:59:73:4f:
96:ba:0a:23:26:26:07:57:cb:2a:8e:04:7d:4d:aa:
62:d0:d1:3c:06:ac:2d:aa:68:d6:8f:c9:fd:9d:09:
93:ef:dc:97:6a:56:9d:24:e8:48:39:98:65:8c:4f:
3e:82:35:dc:60:3e:78:d3:9a:3c:f8:8d:d0:14:28:
b1:f0:7a:f1:29:e3:84:68:f9:f7:77:76:fc:25:5f:
df:ea:f3:61:47:58:2b:e2:73:cd:81:cd:03:22:87:
43:e2:a7:66:af:03:6f:56:93:ac:c2:b1:c8:ab:fa:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
X509v3 Authority Key Identifier:
keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:d5:e1:10:ff:a6:cc:78:96:0d:0d:a8:b0:75:a6:7a:18:a9:
92:04:f5:bc:6a:f9:0e:27:f3:5d:d7:dc:5b:36:5b:06:ec:c7:
ee:c5:a3:c7:b3:f6:fe:d6:13:56:e7:ce:11:ae:59:94:71:e7:
08:ff:a9:46:84:54:c0:c0:d2:3e:ae:5a:09:76:68:ee:fa:e4:
cb:25:95:fa:d4:d8:07:27:b3:00:5c:09:ce:54:f3:06:14:ba:
a4:ca:bf:bd:bb:e8:ad:1f:6c:c7:f9:c4:64:07:ee:0d:bd:75:
04:d6:0b:0c:2b:ac:c7:19:bb:e7:43:1c:e5:75:2d:ed:4b:cb:
ab:45:cd:47:56:6b:03:5d:59:75:11:83:34:40:ae:8f:86:c6:
4c:0e:49:86:b2:5a:27:73:5d:8c:97:b1:dc:dd:40:75:68:18:
71:87:de:02:37:a6:ac:25:64:88:f2:ba:6b:8b:65:ac:4f:d2:
d7:17:4c:ff:b8:56:2c:fa:5a:88:bf:2c:44:87:52:85:fd:06:
5d:7e:80:73:de:ce:c1:26:6a:d2:ce:ae:76:26:da:0b:6c:9a:
11:62:5f:69:dd:81:30:da:b4:1e:dd:76:5e:c8:3b:68:32:49:
5f:ae:d0:c7:56:7b:c3:53:69:1f:e0:5d:77:8b:9b:ec:c8:c5:
aa:dd:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:43:54 2026 by rpki-client