
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer
File: 0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer (raw, json)
Hash identifier: +IS4rpU7AQFFTKirYreannOCodzyxmc+jhLtkkywV+s=
Subject key identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D220D0F5F81E38B3ED3A5E700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 11 Mar 2026 12:45:22 +0000
Certificate not after: Tue 13 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 395648
IP: 167.253.63.0/24
IP: 2602:fac9::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:22:0d:0f:5f:81:e3:8b:3e:d3:a5:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Mar 11 12:45:22 2026 GMT
Not After : Jun 13 12:45:22 2028 GMT
Subject: CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:32:2e:d1:4d:22:68:aa:7c:65:dc:af:a6:
85:d3:ed:46:7a:80:3b:7d:13:8a:c8:0f:3f:23:f3:
2a:6e:35:c0:f7:44:9b:6b:cb:4a:db:0e:b9:c7:5a:
53:ad:02:50:73:5c:25:a5:b2:ae:3c:4a:45:c8:4a:
54:f8:d5:df:33:d7:aa:7a:60:53:60:32:b9:44:10:
2c:19:4c:61:8f:c6:7a:fa:23:9a:07:30:a6:1e:95:
4a:94:01:fc:5a:b6:ca:18:d4:ca:b7:09:9c:10:88:
ab:ae:6f:6b:a7:a0:af:30:05:79:50:10:53:db:23:
39:02:96:6c:c0:41:d9:2d:cb:af:2d:59:dd:ba:5a:
d9:3d:14:54:04:5e:9b:5b:59:68:bd:85:88:49:7c:
3c:0d:30:fe:3e:a4:9b:2f:18:45:fa:08:5d:5b:9c:
64:83:fa:f0:30:b3:a7:60:74:31:ff:f3:0c:2d:d3:
79:da:a9:cb:1e:4e:41:4d:8b:8e:1e:19:3f:f6:4d:
35:9e:51:1f:77:65:8a:a3:a2:6c:7d:7b:82:16:06:
f8:76:76:f9:e7:27:e5:83:8b:41:39:c8:a5:ef:39:
37:73:12:f8:97:95:3d:a6:39:5b:5f:99:6e:dc:fd:
c2:12:e2:b2:c4:88:a4:bc:93:9a:df:1a:b5:f9:0d:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.63.0/24
IPv6:
2602:fac9::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395648
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:5f:95:7c:bd:b9:9b:07:9f:4f:61:b2:19:66:54:26:20:8c:
2a:50:32:c7:f1:31:4b:cb:3a:f6:ad:38:b0:1b:cc:75:2e:6f:
d6:7a:74:cb:4a:31:d4:c9:0b:3c:46:b5:45:74:9b:b1:81:a9:
c0:50:4c:48:59:71:86:73:09:1b:d8:9f:55:02:6d:cd:6c:e7:
37:79:a3:e9:ac:c6:18:2d:ca:f5:61:e7:37:a9:b9:7c:63:70:
7f:d6:9c:e4:44:82:09:d2:e5:bf:4a:5a:d9:b5:b5:7c:bb:16:
59:79:6a:83:95:53:98:00:09:9f:46:ba:fc:47:20:fa:08:d8:
d5:bd:18:06:5e:71:e5:88:64:2f:90:50:28:0c:e6:2a:59:62:
77:5c:ea:03:e3:c9:aa:48:68:ff:96:e1:49:3f:72:e3:4a:7f:
a1:eb:5e:6f:d0:69:9f:40:87:d2:f7:a6:bb:c4:bb:bd:4a:fa:
42:df:1d:e6:e0:09:98:33:99:6b:8f:c9:da:a3:42:f4:d6:b6:
8c:03:cd:0d:52:39:2a:9f:83:e1:66:9a:fd:84:af:a3:77:3b:
c7:bb:86:e2:ba:69:31:94:72:f2:91:a7:76:74:b2:ed:42:14:
83:a1:e3:06:4e:ad:e4:93:81:a9:16:cb:a2:62:29:ff:ad:d5:
44:fd:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:36 2026 by rpki-client