
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2.cer
File: 22d5f618-5b64-4804-88ef-e125dd90d7e2.cer (raw, json)
Hash identifier: xmgq/BC0YEh9g3TAe3Fo9PV731SE3mXJhxCbd8/M7KU=
Subject key identifier: 51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584EAE7A1A527DC00F25CC796900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 31 Jul 2026 12:45:11 +0000
Certificate not after: Thu 02 Nov 2028 12:45:11 +0000
Subordinate resources: AS: 988
IP: 23.138.120.0/24
IP: 2602:fb4b::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ae:7a:1a:52:7d:c0:0f:25:cc:79:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jul 31 12:45:11 2026 GMT
Not After : Nov 2 12:45:11 2028 GMT
Subject: CN=22d5f618-5b64-4804-88ef-e125dd90d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b3:1d:3e:d1:57:6f:27:59:c2:6f:a7:cb:55:
e9:3c:db:80:5a:cd:60:4b:62:61:2e:e1:af:1e:50:
78:8b:66:6f:fa:cb:cf:24:8f:d2:0c:18:ce:c9:d9:
60:99:53:a0:26:e3:ac:7f:55:d0:65:b7:8f:f5:8d:
d6:84:14:67:be:2e:dc:73:c7:45:c2:49:c5:66:de:
e5:18:46:4e:cd:a9:20:ee:8c:c9:1b:4e:b6:92:09:
4a:b3:89:48:83:0f:ed:b4:9a:7c:dd:2b:73:06:35:
a4:31:2e:b7:ee:80:ac:07:85:2c:d4:f8:d8:35:da:
d5:a1:c6:41:50:80:59:40:6d:bf:4d:b2:5a:72:77:
11:0a:25:3e:a8:d9:a2:74:e4:0a:ab:00:dc:ff:ed:
b2:c4:52:2d:a8:ae:d7:84:ca:08:7b:c2:fb:19:9a:
8b:8e:5f:bd:62:7f:d3:ab:61:e4:fb:2b:68:c4:f2:
b3:22:ca:9d:0f:ad:5d:1a:4c:85:71:5c:03:44:46:
d4:e8:46:1e:3f:b0:51:e7:46:75:2a:41:94:b9:c0:
e7:01:5a:32:90:b1:b5:0a:20:39:66:14:b3:b5:b1:
e6:a7:e4:01:2f:d0:68:e1:30:0f:f9:86:4c:65:32:
62:a2:9d:8a:19:a9:56:2e:92:8d:b5:e8:f6:b7:b9:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:B4:5D:AB:73:A3:7E:EC:9A:47:7B:05:74:05:B7:39:6D:E9:2C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22d5f618-5b64-4804-88ef-e125dd90d7e2/22d5f618-5b64-4804-88ef-e125dd90d7e2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.120.0/24
IPv6:
2602:fb4b::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
988
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8b:8d:4b:b3:8e:35:f9:ab:30:24:bf:28:71:dc:cb:32:b6:
75:68:56:fe:ae:67:46:92:bb:64:9d:65:2b:d8:d4:a7:3b:3f:
b6:28:c3:b2:3d:f2:40:1c:8b:d9:3f:a9:f3:34:dc:57:fc:6c:
4b:83:46:29:12:a0:db:3c:a1:7d:a3:31:e1:9b:27:d6:81:54:
93:fa:07:9a:c2:a2:45:7b:55:c7:d6:01:cf:e6:46:46:b8:5f:
c7:20:4e:2a:c2:ac:42:b6:ed:d7:bc:20:93:d0:87:c4:06:40:
34:57:ef:4a:0e:f5:31:29:f6:a9:03:3c:56:9f:99:6b:d2:96:
17:3e:a9:54:6d:66:26:2d:94:87:59:1d:0d:d1:be:cf:e7:a1:
fd:dd:fd:f3:af:db:dc:b6:b1:7d:28:16:cc:0f:88:3f:0e:72:
fd:3b:3d:2a:18:62:b6:ea:6c:24:2a:d5:51:40:1b:be:c5:b7:
ce:04:c1:dc:a8:89:61:8d:11:51:6e:a3:ba:22:82:34:63:f7:
0f:ff:18:3b:7c:3d:44:eb:7f:e1:13:b6:ce:58:03:e5:d9:ad:
27:47:94:8c:33:48:3a:ad:20:be:82:0f:a1:e5:4d:40:4b:73:
54:bd:b8:b9:3c:bb:40:a6:3b:fc:92:9e:55:5a:a1:06:55:9d:
1b:99:47:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:12:20 2026 by rpki-client