
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
File: 580e739b-bb2f-4e02-9a24-4813328e39cf.cer (raw, json)
Hash identifier: OWjGBSCZk4/HFa9LciPcbwCjbq+Qqk2wZQncWERQaXg=
Subject key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CF920F41D61EAC7F57ED98A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Feb 2026 20:57:19 +0000
Certificate not after: Thu 11 May 2028 17:59:17 +0000
Subordinate resources: AS: 3736
IP: 198.180.140.0/24
IP: 199.5.156.0/23
IP: 204.138.71.0/24
IP: 2602:f813::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f9:20:f4:1d:61:ea:c7:f5:7e:d9:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 24 20:57:19 2026 GMT
Not After : May 11 17:59:17 2028 GMT
Subject: CN=580e739b-bb2f-4e02-9a24-4813328e39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:41:9a:ef:bb:1e:fa:16:00:f8:aa:26:c6:
46:63:7c:c5:05:9b:96:14:e1:ba:f6:6d:cb:ba:13:
17:bf:42:5d:3d:0e:54:22:3e:c3:31:50:24:5d:b2:
5b:d5:31:78:a6:7c:b8:62:40:36:2b:2e:51:8e:f5:
11:3b:00:9c:45:e3:12:bf:5a:90:8d:dd:09:2d:fb:
ca:59:ed:b1:de:ba:4b:57:62:4d:41:25:56:f2:0a:
3f:c9:ea:21:31:39:6b:88:eb:0d:ae:b4:69:4e:64:
7a:76:e8:75:f2:d1:73:14:98:05:73:f2:03:3b:83:
66:95:eb:7d:5a:94:9e:d4:2e:d3:7e:7f:e8:b8:60:
2a:fa:41:f2:1a:49:df:37:f8:b5:cd:31:24:92:55:
56:59:3e:3c:b5:1f:61:40:c9:49:3f:70:2e:e1:57:
ab:d0:94:f4:41:5d:06:e9:ed:fb:32:38:e2:c6:c4:
d0:b8:6c:7b:c1:7e:cb:e6:56:83:43:47:f8:2e:79:
7a:b4:92:6b:bc:7e:0d:4e:78:c9:2e:e8:b5:b7:19:
29:2f:1a:79:a2:54:4b:db:24:c2:a7:dc:21:ed:8b:
80:df:1f:a1:ea:d9:1b:d6:be:8d:c4:e3:4d:4f:08:
d3:5f:58:aa:d6:71:e0:c6:b9:16:30:0c:6c:a2:a8:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
198.180.140.0/24
199.5.156.0/23
204.138.71.0/24
IPv6:
2602:f813::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3736
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:5d:dc:33:6a:84:d3:b8:07:e7:6e:37:59:98:58:8b:27:a1:
45:53:1d:11:2b:bc:ef:8a:ea:93:af:76:4e:53:b7:e6:b1:87:
21:76:8b:fe:7e:cc:0e:2a:b8:37:42:3c:ec:40:2d:ff:fa:b3:
03:4e:cf:10:78:ac:23:1b:3c:19:9f:88:c9:fc:04:73:c5:23:
49:5f:24:3d:0c:86:92:c6:b7:03:91:73:39:ee:30:4c:79:85:
69:60:8b:32:41:dc:2b:93:22:d0:da:38:1f:25:70:69:fd:6c:
54:55:e5:b0:df:f1:5f:63:72:35:82:93:b3:f3:a7:49:8e:86:
0c:3f:7a:62:49:4d:c9:26:21:0d:46:24:fd:84:e9:74:12:db:
36:e9:2f:d7:15:a5:b7:0d:1a:f6:b7:e2:5a:c5:54:af:a4:bd:
8a:f5:06:29:97:74:b5:07:fe:34:34:cd:10:70:bc:d0:c2:e5:
00:1d:02:be:c9:d7:6c:67:8c:fd:a8:40:ff:d5:5f:f0:23:09:
d7:72:3f:66:db:78:3f:f9:6b:eb:49:c7:51:d2:f1:1b:94:54:
81:e5:25:56:6a:7f:2c:3d:89:41:95:91:53:fe:05:1a:af:de:
f2:86:3e:ab:01:89:cf:ca:1c:04:6c:b0:cc:14:f0:07:7b:15:
34:22:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:00 2026 by rpki-client