
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
File: 6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer (raw, json)
Hash identifier: iz3kyBr8/0gqVDN6woo/JAhlzYjZb80X5AwJ7qJsMb0=
Subject key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D438D4588E634B1A4C5F16500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 23 Mar 2026 12:45:22 +0000
Certificate not after: Sun 25 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 19755
IP: 162.223.176.0/22
IP: 199.73.124.0/22
IP: 2620:13a:5000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:43:8d:45:88:e6:34:b1:a4:c5:f1:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Mar 23 12:45:22 2026 GMT
Not After : Jun 25 12:45:22 2028 GMT
Subject: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:7c:fb:2b:b1:7a:31:d4:45:e6:3f:5f:08:
9c:0d:a6:ba:aa:b1:16:c4:4c:1a:8f:0d:d6:a1:7a:
2b:b6:bd:b8:1b:38:60:43:39:e5:93:65:71:23:89:
51:8a:c3:0e:32:9d:62:b7:e4:c3:1a:c2:65:bf:35:
94:c7:b5:70:61:1b:23:73:bb:20:ea:26:14:e2:9b:
16:4f:cf:02:fd:4e:b9:54:f3:95:d3:c1:00:08:ea:
4c:1e:ae:e7:7d:eb:7d:c8:0d:d9:4e:6a:3a:6e:cc:
05:b8:f6:a0:09:5a:c8:a2:31:0e:c6:a7:b2:02:19:
5d:5c:f9:8a:d1:72:e1:16:33:ca:67:6e:d1:65:06:
e4:36:f9:f6:47:f5:19:31:2b:bb:b6:2e:a2:ef:a2:
f2:c4:f8:de:d4:56:41:72:41:de:0c:50:d9:f6:8b:
2a:40:a5:55:98:de:65:14:ed:37:59:e4:1b:c8:4d:
99:e2:ee:6f:ec:ee:8f:08:b3:5d:9a:2f:85:d3:ab:
82:e3:e1:e6:80:63:5d:88:61:ed:62:54:49:38:4c:
0e:26:1b:d7:0d:fa:82:fd:75:ce:ef:e9:75:57:92:
a2:56:58:36:dd:4e:b1:7c:35:26:7d:a5:77:88:43:
78:2c:ac:d8:87:cf:b9:6b:0c:aa:4d:59:10:54:eb:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.176.0/22
199.73.124.0/22
IPv6:
2620:13a:5000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19755
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d0:af:37:04:45:d9:c1:26:ef:72:9f:3b:98:d3:ad:c0:c5:
3f:82:41:55:2d:db:49:0a:8d:9d:65:2e:12:2f:ed:18:f5:14:
26:0a:15:68:07:c9:5b:ad:ad:50:e2:a9:2c:b0:0c:fd:9e:cf:
f3:58:3b:76:a2:3d:25:bf:46:70:9f:fe:c7:3a:fb:db:d0:ec:
a9:49:c7:30:ec:d3:8e:08:b5:d9:f3:42:3b:72:6f:ff:ce:2e:
d2:9d:fa:7f:22:52:63:d8:f2:3e:4a:5f:7d:99:5b:39:51:98:
99:8e:a1:f1:9f:43:d3:79:d4:8b:b6:2d:b5:f6:10:20:8e:19:
ac:ee:ed:5a:5f:9c:c8:e3:75:8d:a6:64:58:34:f6:d7:c2:ff:
35:7c:e5:ad:14:43:21:01:5a:f0:64:e2:12:44:27:10:d6:55:
9f:4d:56:29:16:1a:5e:97:f4:a3:82:62:92:ae:af:08:9c:45:
2b:4e:ba:ff:99:6b:c1:cd:49:e8:80:0d:60:b9:ec:db:42:66:
4e:1b:28:ce:5b:4c:da:00:f4:e1:a6:7e:a8:2f:af:c2:60:ff:
c2:af:43:c5:26:72:ff:ed:51:6c:bd:0b:c2:e0:c6:e2:c0:e6:
8d:f6:f3:d8:6c:d2:ec:65:79:f8:fb:01:28:47:23:7d:fb:05:
fd:1b:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:40 2026 by rpki-client