
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5087ddb6-5599-45ec-beae-703c8b949631.cer
File: 5087ddb6-5599-45ec-beae-703c8b949631.cer (raw, json)
Hash identifier: PGs9VDzVtM3K2P0+s/PaW8iYeHU4xe8zTB1yJOWukCI=
Subject key identifier: DE:56:55:D4:BA:A0:99:EE:C2:8F:9C:0A:0B:66:F7:1F:7D:EC:FB:A6
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CC0FC180A685EFA951EA64080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5087ddb6-5599-45ec-beae-703c8b949631/5087ddb6-5599-45ec-beae-703c8b949631.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5087ddb6-5599-45ec-beae-703c8b949631/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 04 Feb 2026 18:17:47 +0000
Certificate not after: Tue 09 May 2028 17:17:47 +0000
Subordinate resources: AS: 398886
IP: 163.123.139.0/24
IP: 2605:f240::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:fc:18:0a:68:5e:fa:95:1e:a6:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 4 18:17:47 2026 GMT
Not After : May 9 17:17:47 2028 GMT
Subject: CN=5087ddb6-5599-45ec-beae-703c8b949631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:b8:e1:79:28:64:ae:76:3a:fe:e3:e0:56:
36:23:b8:cd:d3:6f:e1:6b:ce:a1:20:03:0b:82:f8:
5a:f4:d4:0e:47:fc:9d:4c:02:8c:3f:a4:97:e0:9e:
b2:d6:e1:40:49:85:c3:21:aa:74:04:f6:61:a9:a8:
28:9d:d5:08:9c:44:aa:02:78:73:98:5c:ec:ee:b1:
68:e9:90:ad:f4:8e:29:58:86:c5:5f:1c:0f:7b:7d:
78:56:e7:a2:1b:78:df:ce:b6:e0:d0:63:1c:d4:bc:
63:89:3f:63:51:e0:6d:e0:12:52:83:3b:e5:f5:ee:
db:03:63:4c:6f:ec:93:a4:b4:d2:a3:99:e7:4d:13:
8d:da:62:43:6e:27:d4:b3:c9:34:cf:5d:ff:fd:1b:
0d:d0:8a:e3:10:74:27:34:74:ef:86:c9:b3:02:23:
9e:90:ae:af:8d:2f:a4:e0:cd:5a:f4:b5:ca:86:25:
f4:2e:db:8d:a5:b0:73:af:aa:9f:03:05:d3:87:cc:
56:94:4a:01:07:50:dc:02:7f:9d:13:30:50:8a:ea:
f1:36:7c:92:ff:4c:5c:07:f6:be:4d:5c:e0:ba:07:
32:23:87:ab:64:23:01:ab:9c:fb:1d:47:aa:f6:06:
a5:1c:08:99:a1:ed:80:97:c5:24:98:29:80:2b:29:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:55:D4:BA:A0:99:EE:C2:8F:9C:0A:0B:66:F7:1F:7D:EC:FB:A6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5087ddb6-5599-45ec-beae-703c8b949631/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5087ddb6-5599-45ec-beae-703c8b949631/5087ddb6-5599-45ec-beae-703c8b949631.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.139.0/24
IPv6:
2605:f240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398886
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:eb:0b:25:cd:27:25:34:12:55:64:77:5b:b0:7a:d9:d9:c1:
79:63:f3:2e:71:54:87:db:37:27:12:42:49:80:6e:61:05:b0:
ca:8b:7e:d5:4b:31:4a:e5:1c:8d:04:22:1d:58:7e:0a:aa:70:
4c:bb:62:9f:22:0f:ea:e8:4a:b0:da:89:79:b7:e2:61:eb:8e:
40:6e:2b:84:5b:28:10:17:d1:35:23:a8:7f:d8:bf:ff:ad:18:
2f:55:77:31:6c:f7:7f:4e:d7:89:00:dd:d5:fa:50:df:32:3e:
8a:cd:cf:c6:3c:16:75:79:a1:8d:2c:dc:28:08:37:62:b4:76:
3e:0e:34:7f:c6:16:b2:44:85:28:3d:e8:0a:92:15:b0:02:25:
8f:50:0d:87:99:f0:f4:9c:51:ed:85:30:9a:7c:54:10:21:23:
cc:5a:27:00:02:e6:07:ab:b9:ce:7f:c6:34:e2:3a:fb:a3:6f:
07:b6:f2:e9:0d:b8:9d:17:eb:e8:d4:87:2f:6e:b8:3a:69:e3:
d0:6a:13:b5:8d:5c:0c:a4:5d:33:df:30:bb:a4:6b:b5:77:ce:
16:c3:16:55:0b:01:1c:5e:39:28:4f:20:74:aa:be:99:c2:5d:
4c:17:f8:3f:c6:59:32:c3:98:eb:0c:92:d0:67:56:f8:5f:cc:
06:89:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:53 2026 by rpki-client