
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2dc0edd1-bb68-4d33-b76f-01adde27ae10.cer
File: 2dc0edd1-bb68-4d33-b76f-01adde27ae10.cer (raw, json)
Hash identifier: ItkmrCy+iCe44fszTrlynuI8EbEVdIDCsNEeWv+GRDs=
Subject key identifier: 9B:EC:87:49:D0:F8:2E:D4:50:8C:C7:6B:EE:55:36:74:43:E2:CA:03
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD9B5C6865877920CF9FA5800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2dc0edd1-bb68-4d33-b76f-01adde27ae10/2dc0edd1-bb68-4d33-b76f-01adde27ae10.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2dc0edd1-bb68-4d33-b76f-01adde27ae10/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 13 Feb 2026 14:51:18 +0000
Certificate not after: Mon 24 Apr 2028 18:57:05 +0000
Subordinate resources: AS: 30594
IP: 66.51.80.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:b5:c6:86:58:77:92:0c:f9:fa:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 13 14:51:18 2026 GMT
Not After : Apr 24 18:57:05 2028 GMT
Subject: CN=2dc0edd1-bb68-4d33-b76f-01adde27ae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:a4:ab:7e:80:08:4e:52:3e:ed:ac:fd:40:
c2:1b:81:62:33:5f:5f:db:75:8f:e4:b6:43:df:33:
31:5d:d4:b3:6c:b0:78:cf:aa:30:64:bd:7a:a4:15:
eb:e1:06:4f:76:52:ea:1b:e0:94:f1:2f:f9:7e:79:
fc:84:12:ef:f4:46:48:c7:d6:d0:69:a4:15:67:c0:
48:7c:0f:a7:70:99:57:d4:41:96:29:d8:98:a2:11:
f8:01:fa:6c:9f:bc:94:a3:e0:ad:07:0e:9e:6c:21:
89:15:77:8e:7d:5b:3f:c7:7f:ff:ff:3a:7b:c7:65:
fa:cc:3c:a8:be:fb:8d:00:36:84:97:0a:44:97:62:
dd:88:dd:59:26:83:2c:86:f9:7c:d9:ce:fc:18:6e:
3d:62:9f:23:f8:b6:da:fa:e2:a8:72:57:4a:32:e2:
b8:bd:2a:ae:59:c2:c3:1a:fe:84:2f:e9:9d:43:0e:
5a:5a:70:a3:28:f6:2c:0c:0f:90:40:a4:f0:c5:0e:
49:15:5a:05:3f:b0:53:dd:5c:41:c2:87:9d:13:9b:
ba:d0:99:50:e2:88:27:67:7f:73:43:6f:79:a0:79:
31:49:6d:09:70:60:52:68:b8:cc:43:79:85:40:bd:
d6:85:82:a0:ba:fe:ec:84:a6:d4:45:04:77:cf:b9:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EC:87:49:D0:F8:2E:D4:50:8C:C7:6B:EE:55:36:74:43:E2:CA:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2dc0edd1-bb68-4d33-b76f-01adde27ae10/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2dc0edd1-bb68-4d33-b76f-01adde27ae10/2dc0edd1-bb68-4d33-b76f-01adde27ae10.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.80.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30594
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:25:a5:af:a9:df:98:34:f3:4c:2e:dc:73:10:92:ed:9c:80:
32:d2:8b:40:3f:fe:6b:9c:c3:9a:43:85:12:fe:77:28:3d:a6:
46:af:77:fa:69:1f:d5:57:41:5a:a8:84:de:51:3f:ba:b5:fe:
b0:e8:9c:95:f8:df:3e:63:17:a6:c4:cf:66:9b:f0:18:aa:59:
02:8b:cf:c3:e9:b2:1f:e9:cd:72:b3:62:e5:b4:09:81:6d:8a:
bd:c9:87:4b:e5:52:89:3f:cb:59:7e:2f:da:58:eb:a3:33:95:
ec:4a:39:9a:97:38:cf:5d:5c:07:5b:3e:6e:10:51:2d:26:6f:
b0:67:ed:f4:f5:d6:68:cd:d6:49:3d:bd:97:78:9a:dd:d7:8e:
d8:27:28:fe:81:2c:e9:f1:18:42:ac:37:a0:00:7c:33:4e:2a:
36:c8:68:84:1f:2d:8c:77:d6:b7:48:c1:4c:73:2f:be:2c:58:
d8:0c:e7:ad:35:4b:ca:75:7d:c3:8b:5d:bb:26:3f:d1:67:a8:
ae:96:dc:d3:4c:5c:e6:e9:eb:e8:15:19:1b:b7:38:30:97:df:
91:5d:43:cc:0a:a2:aa:91:54:df:36:f5:0b:8f:05:1d:92:46:
a0:0a:03:2b:2c:0e:77:d6:f2:c6:09:b0:60:a6:7a:d5:be:99:
71:ab:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:20:56 2026 by rpki-client