
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer
File: b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer (raw, json)
Hash identifier: w6+00hj1ZwTBTOLciB2iWVILq+X73Krb7Y3wrHx0b+U=
Subject key identifier: 67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584DCDBE17A615248AADCA6C1580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 12 May 2026 00:45:18 +0000
Certificate not after: Mon 14 Aug 2028 00:45:18 +0000
Subordinate resources: AS: 11665
IP: 23.166.176.0/24
IP: 2602:fcfe::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cd:be:17:a6:15:24:8a:ad:ca:6c:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: May 12 00:45:18 2026 GMT
Not After : Aug 14 00:45:18 2028 GMT
Subject: CN=b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:a2:3a:c6:dd:a5:b1:01:b9:74:99:a6:65:
01:98:d9:65:2d:ea:61:6c:98:7c:5c:0f:b9:ef:18:
20:8d:f2:19:f4:49:f3:61:c7:05:90:12:83:3c:1b:
2f:99:3a:fd:a7:69:05:17:49:16:a2:77:73:61:a8:
ac:11:ad:23:a6:c1:b4:c4:68:82:59:41:4d:63:99:
65:a8:6f:ee:a7:20:c4:bc:bb:ff:5b:16:55:7d:51:
bd:7a:d6:c7:24:96:f0:ee:d6:94:bb:bb:dc:c8:cd:
62:4f:33:63:25:4c:05:05:36:d9:db:34:80:80:d5:
29:7b:cb:06:3c:c2:29:38:ef:f8:97:c1:ba:4a:55:
b1:30:ac:74:48:69:3e:48:dc:6e:00:9b:e9:b3:49:
ab:5b:88:43:3b:c0:33:47:ff:94:ce:d0:00:7b:0c:
47:bf:53:8a:1c:9e:3e:00:ff:d4:47:bf:6d:2f:5e:
ff:27:9f:09:a2:c3:0a:f1:b4:0e:9b:6f:7d:93:20:
ea:98:3c:cb:a9:56:1c:d3:4e:1d:e4:57:17:d7:8a:
1e:ba:eb:20:d0:ae:a8:21:c8:7e:bd:1f:02:74:64:
bc:d5:7e:b1:20:65:f0:4c:5d:25:dc:63:ab:1b:1a:
64:a4:ad:85:9c:b9:a4:3e:fe:11:97:d2:c8:fd:04:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.176.0/24
IPv6:
2602:fcfe::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11665
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ae:48:57:4b:4d:29:c2:42:c3:24:62:9c:06:c3:93:f0:d8:
fd:d3:3b:91:cf:e2:9f:a6:fc:60:69:00:00:b5:12:50:ee:8d:
5f:50:ee:f7:22:3f:a6:3a:11:ca:4a:c2:99:eb:7e:ce:ec:fb:
41:ed:16:33:35:15:31:80:ca:fa:dc:06:fc:ca:ee:df:8f:16:
a0:dd:e9:a1:df:22:66:d6:98:46:99:92:6d:8b:3c:55:c0:b3:
5d:74:20:d2:77:4f:ea:7c:98:da:ae:11:d6:d0:12:cf:e1:a4:
7d:63:5c:53:56:50:09:b4:96:52:ad:bf:00:bd:5a:b2:5c:58:
6e:40:0e:10:b3:8f:a2:45:16:27:b5:21:c6:c7:22:1c:02:7e:
99:08:f6:99:92:36:af:e1:6e:2a:a6:5c:c5:7d:cc:ac:c2:1b:
b4:e3:9a:23:9e:2f:2c:f7:df:64:68:81:91:d2:2f:e7:86:98:
7f:ac:3d:26:5c:9d:ae:ba:60:1c:70:91:c3:4f:95:8d:4a:83:
6f:1b:a0:6e:4d:ec:af:89:63:76:6b:33:e1:92:be:67:d3:b1:
d7:38:54:c6:bd:a4:d0:69:28:2f:93:11:87:22:5e:f7:a8:29:
46:99:d7:91:9d:25:e6:14:08:4d:c5:7c:5a:42:f3:8c:05:b1:
fa:85:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:31 2026 by rpki-client