
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4ddbdfb-acc0-47fb-9d15-aba202832d1d.cer
File: f4ddbdfb-acc0-47fb-9d15-aba202832d1d.cer (raw, json)
Hash identifier: vhG7TdENykuTjh8xlUHQrLwnjIORX01WbXHV6x017lY=
Subject key identifier: 3E:FE:84:51:52:91:FE:8A:0A:CA:3A:6B:71:35:D0:9A:A3:7F:02:46
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584D7EAFF10B64E248BA97F69000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4ddbdfb-acc0-47fb-9d15-aba202832d1d/f4ddbdfb-acc0-47fb-9d15-aba202832d1d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4ddbdfb-acc0-47fb-9d15-aba202832d1d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Apr 2026 17:07:56 +0000
Certificate not after: Sun 16 Jul 2028 17:07:56 +0000
Subordinate resources: AS: 402260
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:af:f1:0b:64:e2:48:ba:97:f6:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Apr 13 17:07:56 2026 GMT
Not After : Jul 16 17:07:56 2028 GMT
Subject: CN=f4ddbdfb-acc0-47fb-9d15-aba202832d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:e0:63:99:98:e8:78:eb:ae:f7:53:a1:9a:
3a:de:72:f1:03:af:55:3a:59:06:b5:fa:0d:bd:3b:
dd:55:f9:54:cb:92:ed:86:c1:d1:3b:6b:5f:e0:ef:
2d:3f:e5:06:28:a9:48:c0:7e:fb:c9:8c:dc:dc:29:
3f:80:b2:17:bf:28:35:3d:b2:e0:f7:27:b5:d1:34:
37:5c:f8:e8:4a:54:a1:f0:18:d2:31:95:e8:d8:01:
31:53:6d:c1:a7:88:63:6a:a1:d2:54:61:88:81:7f:
4c:7d:bb:3a:e6:45:c2:ac:1c:1b:d3:ac:69:67:9b:
2b:4d:14:0b:f8:12:5c:3e:96:e6:3c:db:c1:7e:46:
ac:0f:5f:40:0a:84:17:40:5c:aa:d5:80:a8:96:05:
6b:0f:6c:a2:7f:f0:29:22:2a:d9:6e:c1:51:56:f5:
b7:e4:ce:20:cc:0b:f0:d2:a4:c6:e1:11:a6:70:ce:
ec:e0:1b:29:93:38:17:79:35:2f:63:a1:d3:ad:be:
d2:48:20:1a:b1:87:1a:9e:e3:43:f8:8e:f8:17:3f:
3f:46:ae:60:96:99:00:44:b0:d3:f9:08:3a:d0:21:
13:53:cd:90:99:1f:31:07:8b:22:ad:3e:62:3c:0c:
a4:7e:36:9a:6c:81:07:a2:70:d9:c3:06:d7:4c:b8:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:84:51:52:91:FE:8A:0A:CA:3A:6B:71:35:D0:9A:A3:7F:02:46
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4ddbdfb-acc0-47fb-9d15-aba202832d1d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4ddbdfb-acc0-47fb-9d15-aba202832d1d/f4ddbdfb-acc0-47fb-9d15-aba202832d1d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402260
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:58:f8:a9:a9:f6:ee:ae:e0:e5:9a:bf:55:81:13:41:31:42:
be:2c:d2:70:70:ee:49:e2:85:8b:0b:9e:24:5b:a9:ec:75:2c:
02:b3:4b:0b:51:f7:5a:9d:67:61:72:ae:ec:d5:d8:b1:9c:c5:
48:a9:b9:2a:f6:b2:64:dc:bf:32:e9:c8:5b:92:8a:99:8f:d4:
c8:ab:77:0c:bd:b3:cf:cd:cc:be:90:2e:a2:f1:b5:d5:da:48:
0c:07:3e:46:14:f3:69:2c:c8:87:19:d1:7d:6d:bd:35:b7:c0:
21:7c:15:43:8a:be:9c:b1:a2:f7:93:68:35:49:c7:ac:a9:3f:
ba:d4:74:9d:8e:1b:26:93:a3:05:b7:68:85:e2:fd:1d:97:e6:
f6:ab:46:64:9b:82:9a:f9:c7:24:c9:33:1e:42:d3:1e:33:2f:
d4:29:f5:fb:e3:b6:56:02:f3:1a:58:d8:6a:00:00:4f:60:e8:
e9:75:36:dd:20:81:2d:b3:80:48:4b:8d:1f:85:20:15:27:b4:
3a:2d:6a:c7:d7:0b:39:02:05:34:e8:7a:cb:71:bf:ec:00:ac:
f1:e7:0f:40:34:94:50:cb:12:c6:b8:40:26:be:01:f0:ac:4e:
7e:0f:8e:76:39:a8:95:80:ee:ba:5a:e9:a0:5f:66:ec:41:09:
df:71:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:23 2026 by rpki-client