
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer
File: 0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.cer (raw, json)
Hash identifier: aI8XhthL6bLrj7NsMpVK+uT9rBY+wone6+1Io2sHKcU=
Subject key identifier: 99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584E51E26B44C2EB3D4DC685EBC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 28 Jun 2026 08:45:12 +0000
Certificate not after: Sat 30 Sep 2028 08:45:12 +0000
Subordinate resources: AS: 22324
IP: 104.37.208.0/22
IP: 192.207.252.0/24
IP: 199.180.148.0/22
IP: 204.10.60.0/22
IP: 207.167.104.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e2:6b:44:c2:eb:3d:4d:c6:85:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jun 28 08:45:12 2026 GMT
Not After : Sep 30 08:45:12 2028 GMT
Subject: CN=0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:b8:fa:c4:8f:0c:80:a0:de:a0:6c:85:8b:
a3:17:b4:fb:57:53:5a:9c:30:b4:38:09:97:fa:33:
a0:c4:48:9a:08:74:40:e0:ea:dd:d6:54:67:2c:59:
cc:a7:80:02:62:92:1a:29:eb:d5:a4:1d:b5:d2:31:
0c:eb:bc:dc:e5:8c:5c:59:bf:c4:ec:7c:81:ce:55:
a4:0e:9c:e8:63:54:84:4e:d6:55:3b:73:a3:4d:49:
b2:c5:50:dc:9f:46:a5:c1:9e:14:ee:4d:4a:49:24:
f5:19:e5:26:a7:02:b7:df:07:4f:ff:8c:a8:9d:82:
39:31:db:db:6f:ba:37:92:ea:1f:2b:fc:2d:56:3f:
e2:99:f0:e1:a7:e3:d1:62:dd:e3:de:c8:5a:e2:93:
77:24:43:94:59:10:f0:85:3b:bc:b4:bd:bc:ae:a9:
69:3c:18:89:d7:8c:01:78:20:a5:04:5d:30:41:06:
53:f2:e7:40:37:96:2f:21:8b:e9:bf:de:f2:6b:07:
15:bc:8f:77:4c:a0:cd:7b:72:f9:89:8f:c8:6e:f5:
6f:cf:60:70:d0:14:11:f1:26:ad:28:b9:ea:2f:95:
f5:c9:ae:d8:ea:66:7f:dc:23:fc:d7:ef:7e:ec:c0:
12:f0:a2:10:24:ac:c2:82:d3:cf:62:32:c2:41:b6:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:6D:5C:07:3B:8B:AD:A5:66:59:56:D5:7F:FF:FE:26:D1:FB:94
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e/0993ad6d-02f1-4fe2-8a8e-e47e841c6e1e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
104.37.208.0/22
192.207.252.0/24
199.180.148.0/22
204.10.60.0/22
207.167.104.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22324
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:39:7b:a2:f7:70:a3:7d:a2:0c:78:76:66:64:61:fc:86:c9:
82:41:1d:04:38:76:aa:0a:53:1e:89:bf:cd:25:59:b8:f3:c3:
ed:42:13:a4:68:2c:39:75:e7:b4:9d:46:f2:cf:48:72:b0:6f:
5e:8f:47:65:11:76:1f:6c:5d:86:2e:73:4b:44:7b:d1:e0:8b:
f6:fd:4a:b8:47:1c:79:96:6e:15:34:d1:58:f7:d2:a8:0f:6a:
5c:36:92:d2:18:b5:94:b3:8e:63:50:c1:a3:ce:e8:d7:71:69:
bd:18:7f:d6:24:34:34:28:6c:42:e2:fe:e3:7e:cb:60:3e:68:
95:29:62:51:93:af:7e:7a:b3:c0:f1:ae:49:56:37:80:d0:c9:
5e:28:f8:98:0d:d5:15:3e:95:09:39:de:00:7e:60:a2:f2:38:
ec:90:8f:f7:a0:f6:86:17:b1:01:30:02:7e:2e:ef:79:ea:cd:
87:a2:7e:0f:58:b9:e7:c9:bf:ae:19:13:ae:e0:94:8b:e0:86:
d2:19:85:51:27:41:b4:3e:8b:73:8f:11:2d:c1:ea:c5:8c:16:
57:3a:10:f7:7c:f6:6e:6e:35:1b:74:9c:1a:fd:72:52:5e:7b:
58:4f:bc:6f:fc:f7:c8:be:97:cc:1c:8a:70:b6:70:92:d8:52:
6b:f9:0e:85
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE5R4mtEwus9TcaF68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI2MDYyODA4NDUxMloXDTI4MDkzMDA4NDUxMlowLzEtMCsGA1UEAxMk
MDk5M2FkNmQtMDJmMS00ZmUyLThhOGUtZTQ3ZTg0MWM2ZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk64+sSPDICg3qBshYujF7T7V1NanDC0OAmX
+jOgxEiaCHRA4Ord1lRnLFnMp4ACYpIaKevVpB210jEM67zc5YxcWb/E7HyBzlWk
DpzoY1SETtZVO3OjTUmyxVDcn0alwZ4U7k1KSST1GeUmpwK33wdP/4yonYI5Mdvb
b7o3kuofK/wtVj/imfDhp+PRYt3j3sha4pN3JEOUWRDwhTu8tL28rqlpPBiJ14wB
eCClBF0wQQZT8udAN5YvIYvpv97yawcVvI93TKDNe3L5iY/IbvVvz2Bw0BQR8Sat
KLnqL5X1ya7Y6mZ/3CP81+9+7MAS8KIQJKzCgtPPYjLCQbZ8YQIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFJnGbVwHO4utpWZZVtV///4m0fuUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w
OTkzYWQ2ZC0wMmYxLTRmZTItOGE4ZS1lNDdlODQxYzZlMWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA5OTNhZDZkLTAyZjEtNGZlMi04
YThlLWU0N2U4NDFjNmUxZS8wOTkzYWQ2ZC0wMmYxLTRmZTItOGE4ZS1lNDdlODQx
YzZlMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNwYIKwYBBQUH
AQcBAf8EKDAmMCQEAgABMB4DBAJoJdADBADAz/wDBALHtJQDBALMCjwDBALPp2gw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICVzQwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEDl7ovdwo32iDHh2
ZmRh/IbJgkEdBDh2qgpTHom/zSVZuPPD7UITpGgsOXXntJ1G8s9IcrBvXo9HZRF2
H2xdhi5zS0R70eCL9v1KuEcceZZuFTTRWPfSqA9qXDaS0hi1lLOOY1DBo87o13Fp
vRh/1iQ0NChsQuL+437LYD5olSliUZOvfnqzwPGuSVY3gNDJXij4mA3VFT6VCTne
AH5govI47JCP96D2hhexATACfi7veerNh6J+D1i558m/rhkTruCUi+CG0hmFUSdB
tD6Lc48RLcHqxYwWVzoQ93z2bm41G3ScGv1yUl57WE+8b/z3yL6XzByKcLZwkthS
a/kOhQ==
-----END CERTIFICATE-----
Generated at Thu Jul 9 08:31:34 2026 by rpki-client