
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d.cer
File: 1c5765e2-83ee-46d6-8c41-fbc6330fcd8d.cer (raw, json)
Hash identifier: HyLdWpqDYUYnK64Bs/vCoc9CdNS9OSC9Za/r+h/y6HQ=
Subject key identifier: 30:35:50:2F:B6:C5:53:9C:17:8E:16:56:F4:8A:0B:19:44:9D:BF:A5
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD6B4FA10CE554E8F9F26FA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Feb 2026 13:02:16 +0000
Certificate not after: Wed 17 May 2028 12:02:16 +0000
Subordinate resources: AS: 402186
IP: 23.153.100.0/24
IP: 2602:f46b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d6:b4:fa:10:ce:55:4e:8f:9f:26:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 12 13:02:16 2026 GMT
Not After : May 17 12:02:16 2028 GMT
Subject: CN=1c5765e2-83ee-46d6-8c41-fbc6330fcd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:74:07:88:2d:10:da:c9:7f:1e:4e:77:2f:
21:ac:c5:39:28:0a:6d:b5:20:7f:cf:ab:ae:4e:13:
fa:ec:7b:bc:3f:2c:02:b6:34:07:1e:58:b9:90:d2:
16:93:6f:17:29:95:b5:e3:29:30:22:a7:a0:53:a0:
50:4c:38:89:a8:6b:b7:23:b3:9a:dc:7f:b9:94:4d:
ed:00:78:08:07:5a:99:b1:6a:c7:75:03:14:82:83:
f8:88:79:ef:28:66:71:06:35:f0:a6:bc:36:d3:76:
88:81:68:e5:9f:58:0e:b4:a6:1d:18:23:9a:a3:da:
ab:66:20:26:c9:a8:a8:8b:da:98:d1:17:4e:74:15:
51:8f:c4:6c:16:a0:87:fb:6c:47:66:8d:69:6e:b9:
07:9f:fb:e5:bf:f5:30:19:77:92:8f:eb:9c:68:69:
57:4c:ca:69:78:d6:ae:36:ad:a7:da:4a:5d:d8:02:
7b:e8:ba:42:08:77:2d:86:8b:1e:8a:a9:9f:98:99:
94:9f:cd:f6:0f:55:37:ed:91:7d:1d:a4:8c:4a:9d:
94:94:05:01:10:4e:3c:c8:89:c1:d4:44:1c:c0:a6:
51:0a:07:bb:77:10:44:f7:c7:5f:04:41:85:b5:fe:
dc:9c:cf:d9:d0:6f:e5:d0:38:38:72:09:a0:08:14:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:50:2F:B6:C5:53:9C:17:8E:16:56:F4:8A:0B:19:44:9D:BF:A5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d/1c5765e2-83ee-46d6-8c41-fbc6330fcd8d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.100.0/24
IPv6:
2602:f46b::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402186
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d3:ef:15:9a:96:d0:57:f9:36:df:25:8c:50:48:ee:af:98:
3f:b3:3e:2c:b3:a7:bb:8f:8b:e8:e9:ad:dc:f7:02:b4:e0:f1:
61:fe:c8:01:88:64:4c:30:a6:09:62:56:ad:9b:86:fa:70:8d:
89:4e:b5:d3:30:7e:a9:67:fb:cd:1f:0e:78:da:c2:de:33:ca:
0d:a8:a2:e8:9c:d5:cd:12:31:80:a4:4d:d6:99:b6:72:8d:08:
11:e3:70:f4:4d:f5:e8:06:f6:44:cc:5f:93:d9:86:ad:be:1b:
2c:cf:c7:f7:a9:aa:7b:21:6d:7c:ce:ea:cf:9d:e9:c0:9b:7e:
ab:20:aa:f4:d9:80:d4:4a:a6:df:7b:cc:99:22:b6:e2:a0:ce:
35:ed:b0:c8:59:ea:73:ea:90:06:bb:54:d0:2b:8e:4b:77:d8:
b1:37:79:6a:88:a5:33:02:1f:ad:c3:89:ef:8b:4a:34:9d:38:
07:06:97:55:79:8c:5d:7b:30:dd:9b:eb:73:8f:08:39:1e:d4:
e9:85:e9:ba:19:3a:2c:66:42:5d:23:a0:6f:2a:07:f4:47:2d:
c0:d3:cf:32:cd:9c:9c:ea:10:12:41:0b:c1:31:63:b2:59:7d:
75:31:b1:9c:77:0e:34:93:9c:81:69:65:ce:ca:20:37:7e:45:
a5:21:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:11 2026 by rpki-client