
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
File: 370b86f5-0ae7-4e6c-a32e-08310156df3f.cer (raw, json)
Hash identifier: a7EICOrcTGJsu2ZGAKv4r03aYo8rr2edyADcK32taiA=
Subject key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584E748DEAE3161313250E8B4980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Jul 2026 18:48:14 +0000
Certificate not after: Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 4317
IP: 50.20.196.0/22
IP: 64.237.104.0/22
IP: 134.49.244.0/22
IP: 148.64.62.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:74:8d:ea:e3:16:13:13:25:0e:8b:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Jul 10 18:48:14 2026 GMT
Not After : Jul 2 12:45:17 2028 GMT
Subject: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:5f:f9:ac:64:92:88:5b:b7:e3:8f:fd:c0:
64:a9:d0:73:d8:11:63:c7:84:13:1e:52:d1:90:41:
ac:e7:73:ed:6b:99:b3:9c:63:a6:60:ed:f8:8f:19:
e9:24:77:e2:35:91:6d:12:2b:40:e0:70:88:84:f3:
ed:8c:46:c5:80:5a:d3:09:af:49:93:3d:67:ac:c6:
82:93:00:39:ba:a2:3b:ca:8e:eb:77:c1:dd:e6:49:
62:e0:f7:62:26:01:74:b9:0d:49:38:66:37:c2:08:
0a:76:c0:9b:4a:2e:5b:db:d3:1a:0f:62:55:11:dc:
af:4e:0d:8d:f7:ed:b0:fa:9f:d5:83:0a:53:55:67:
dc:fd:59:4c:cc:e3:7d:8c:28:5c:7c:f9:f4:0a:b6:
98:71:77:79:ac:60:83:d2:93:4a:f7:e3:00:28:96:
13:1a:bd:73:c6:bd:95:10:46:16:cc:d5:0d:3a:4d:
a9:e1:41:3e:88:47:3c:38:a6:52:b0:22:0a:bf:9e:
3c:e1:80:c5:82:6f:21:20:24:0c:95:1e:c4:41:82:
28:f4:88:a6:74:03:f1:03:86:7e:bc:7e:23:7a:b0:
af:ff:2c:af:90:1f:e2:24:f2:96:03:43:52:d4:78:
a2:3a:f6:f1:d2:af:94:0b:51:ea:19:ec:23:e3:6d:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.196.0/22
64.237.104.0/22
134.49.244.0/22
148.64.62.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4317
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b9:1d:d9:53:8c:ef:a0:fa:7f:d1:30:a2:d7:50:58:11:a1:
f0:92:88:e2:b5:7f:c6:27:c2:89:9c:e3:4d:c6:de:7e:c5:05:
1d:05:77:bd:b9:37:e6:e1:9c:14:3a:3f:ce:0e:72:7f:a3:58:
63:1d:f0:a7:6e:00:9b:c7:67:79:68:a5:79:9a:e5:9d:d6:0e:
56:cf:cf:e6:34:a5:f0:d6:95:bf:1b:36:f6:7f:7a:f6:6d:e9:
15:e2:8d:16:e9:2f:82:93:b2:79:12:55:ff:3b:40:3c:3c:06:
6a:60:32:3c:b3:4f:74:00:f9:da:ff:d6:0a:dd:c9:fc:b2:e7:
89:9d:88:23:21:4e:78:e8:2d:11:e5:7c:59:4a:17:93:1f:4c:
d4:70:ad:ac:24:61:7b:fd:ae:f4:d6:15:cf:ed:4b:a2:8b:6f:
f2:68:57:f8:78:cf:70:0d:89:5e:91:5e:70:39:a0:f6:4c:61:
93:8e:da:74:fa:69:bd:c0:f4:52:59:ce:5a:07:e1:b5:4e:cf:
29:b8:fb:33:5b:2c:78:1a:07:30:17:42:eb:6b:c3:76:f5:78:
7d:d4:db:02:61:96:36:98:10:a6:c5:37:76:86:f6:04:ed:47:
9f:a0:22:dc:1e:2b:67:99:22:af:a9:aa:4a:38:b0:9c:70:8e:
66:ca:23:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:03 2026 by rpki-client