
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717.cer
File: a87b1d83-e792-4e63-8368-ef9202b2e717.cer (raw, json)
Hash identifier: VRpKyh6DAVb9C+3hAP8RZQexTEXTBy8CSqkP0y64Nbs=
Subject key identifier: D1:F6:38:2A:6F:33:5C:D7:65:5E:0D:B9:83:CA:E1:EA:9C:E3:E0:2F
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D2A6D1D8C7FE6A0CB83F1DA00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 14 Mar 2026 12:45:22 +0000
Certificate not after: Fri 16 Jun 2028 12:45:22 +0000
Subordinate resources: IP: 199.74.192.0/24
IP: 2602:fad3::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:6d:1d:8c:7f:e6:a0:cb:83:f1:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Mar 14 12:45:22 2026 GMT
Not After : Jun 16 12:45:22 2028 GMT
Subject: CN=a87b1d83-e792-4e63-8368-ef9202b2e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:7a:99:c3:55:3d:12:d1:d6:55:f3:3f:cb:
ad:48:a8:88:73:42:ee:33:76:5f:17:59:4e:f5:2b:
35:90:12:f5:9f:37:61:8d:4b:c4:6b:f6:1a:83:13:
1b:4a:28:dd:96:bc:9b:d0:49:c2:25:19:57:03:f2:
0b:52:ee:5d:d3:a3:b5:c2:41:c9:c2:35:57:1d:66:
ab:00:8f:ad:84:3f:f0:df:fe:b0:41:fb:fc:24:cf:
39:19:d0:13:b6:ad:9b:59:fc:32:bf:ad:a9:dd:37:
45:79:95:c0:c3:a4:15:fe:5c:35:14:03:b7:89:5b:
4e:d0:fe:f3:2e:f3:d0:1c:20:da:ec:08:e1:b9:d7:
41:79:b1:36:0c:cd:c1:6b:77:35:3a:2c:3b:f1:73:
e8:78:9a:7e:a4:6a:40:bb:33:68:74:8c:5b:ed:6d:
0f:2b:ba:1e:c6:c6:01:37:4d:20:dd:2d:78:f4:c6:
ff:df:d3:3f:06:46:fe:3c:1d:e4:30:59:7a:9b:74:
03:31:db:16:1c:9c:06:23:e0:71:4b:aa:3f:3d:f2:
69:eb:9f:02:ba:4c:88:a0:c1:bf:ac:8b:7e:5a:3d:
e8:88:97:6a:42:6c:ed:28:55:0b:2c:af:e7:a1:f9:
75:4f:3d:29:eb:59:7b:55:86:a0:58:c6:ca:cb:69:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:38:2A:6F:33:5C:D7:65:5E:0D:B9:83:CA:E1:EA:9C:E3:E0:2F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
199.74.192.0/24
IPv6:
2602:fad3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:33:8a:c8:bb:a5:32:4b:95:83:d6:03:48:24:0c:72:2a:1b:
49:a4:29:83:78:f0:e4:59:1b:bd:40:27:9d:44:bc:42:75:eb:
13:52:67:55:14:93:71:fb:f0:74:61:23:81:1d:c9:0f:92:93:
f1:f5:c5:e5:3e:5b:18:f7:53:2a:65:05:d7:ff:07:4e:83:0c:
4c:26:1f:53:23:5f:38:82:6b:60:e5:97:a8:ac:ea:5b:85:25:
5f:4f:79:f2:43:0c:b3:db:de:41:05:59:89:67:85:96:d7:80:
0b:bf:33:de:ff:65:a9:1f:6b:a8:62:27:1c:41:91:5e:e0:23:
a7:2b:c9:dc:e1:1a:2f:f2:1e:dc:83:16:95:7c:11:02:e3:cc:
9b:d8:bc:98:1a:2a:c0:18:81:80:ad:03:d1:19:02:2e:e3:b0:
cd:a1:45:9a:02:9f:20:3e:03:ff:0a:bd:16:23:c1:d2:e0:78:
3a:25:04:49:b2:9a:2f:bd:88:7f:b6:02:85:5b:0c:29:2d:17:
69:9d:ed:df:90:da:20:9b:6f:95:c0:3c:7e:8c:99:c7:a2:3d:
71:fd:51:db:e3:a1:72:c8:b3:a8:52:1b:d4:8d:c8:24:a0:55:
fc:2d:5c:7d:79:81:21:9e:d4:f8:71:6c:50:ff:6e:bf:18:e0:
9a:08:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:47 2026 by rpki-client