
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
File: 28591b95-39d7-4e54-90f3-1339338b842c.cer (raw, json)
Hash identifier: XmjpN9Q6n8s3a/DMzSKCJ/PbTBPyOyq0bJhOzng6nLA=
Subject key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584F8570C7E067ACBBADA136B980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 16 Oct 2026 12:45:12 +0000
Certificate not after: Thu 18 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 32069
IP: 208.78.16.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:85:70:c7:e0:67:ac:bb:ad:a1:36:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Oct 16 12:45:12 2026 GMT
Not After : Jan 18 13:45:12 2029 GMT
Subject: CN=28591b95-39d7-4e54-90f3-1339338b842c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:55:8d:6f:5b:08:ab:43:d9:67:b8:43:43:
04:31:c9:76:70:69:54:a8:56:ba:8c:40:a6:67:8c:
67:9b:f2:31:4d:db:c7:b4:a5:8e:92:93:30:8a:3f:
3a:ee:bc:f0:42:6c:4d:6f:07:c5:38:be:96:c5:90:
01:e3:60:c9:2a:aa:3d:5c:9e:02:81:fa:e5:e3:84:
87:91:0d:b2:5e:96:44:53:5e:00:5e:29:4e:1f:61:
e6:ab:2e:ac:1c:59:1a:fd:7a:14:8d:6d:92:cd:65:
df:8d:f6:32:d8:3f:34:d8:2a:15:02:43:ea:2b:9a:
f3:7b:43:c5:06:5b:f3:25:ee:5c:67:0a:8c:70:3c:
81:2e:3e:5b:d7:cc:0d:70:3c:7e:23:de:e9:8e:7d:
99:00:66:a7:f2:3a:a3:9d:66:38:2b:45:99:ed:fc:
65:df:15:d6:97:46:b0:16:b8:24:f8:6d:71:e5:10:
d7:6b:6b:a5:6e:c0:2e:01:ae:24:f1:89:71:c2:34:
70:71:b5:3d:af:9e:e4:bd:73:f5:21:01:8f:32:75:
49:b7:b3:77:af:92:50:6d:41:66:c9:87:16:f7:2a:
b5:30:47:74:46:63:a1:1e:48:e3:4b:09:0f:e0:94:
18:4a:b6:77:62:3a:25:d5:7c:9b:6d:33:42:6a:61:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
208.78.16.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
32069
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a3:dd:55:14:28:e6:4e:d5:0b:af:84:21:37:cc:ad:02:9c:
85:46:98:36:50:f4:25:f7:f0:be:65:ac:39:da:c5:17:82:03:
03:78:ad:40:29:ad:b6:a4:8d:d9:ce:55:e6:b3:d5:d7:93:ea:
81:01:36:98:37:35:9c:28:20:82:6e:71:c4:c8:9b:09:e4:ac:
93:da:88:4c:a6:5c:e6:34:e1:92:a7:2c:5b:22:1e:73:07:30:
47:a8:31:bb:a5:d8:b9:4a:45:9d:08:0d:7e:17:9f:31:54:5c:
c8:a3:8f:ad:36:f5:19:80:d3:2c:12:0f:af:dc:1e:4c:a8:f9:
75:da:86:ca:3a:5a:f9:bd:d0:c1:57:1c:37:a0:17:9b:5a:00:
10:17:1d:6b:8a:64:75:ab:1c:4f:fe:67:d5:2f:b3:0e:07:38:
2a:76:91:a6:5f:47:2a:6a:64:4c:1a:04:b9:f5:b2:c3:8f:ad:
99:22:ae:52:09:68:cc:38:d5:e9:f6:31:34:28:ec:6f:26:a6:
22:e2:93:a3:e7:dd:17:4c:5f:a0:21:9b:f6:5a:31:11:21:96:
0c:b0:7e:a3:88:f1:17:b0:4d:8a:23:ad:c6:73:c9:72:2b:e7:
ad:cb:cf:5f:9d:87:27:15:73:6f:9a:03:9f:af:69:6d:a8:5b:
d6:58:d1:1e
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE+FcMfgZ6y7raE2uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI2MTAxNjEyNDUxMloXDTI5MDExODEzNDUxMlowLzEtMCsGA1UEAxMk
Mjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4NDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N1VjW9bCKtD2We4Q0MEMcl2cGlUqFa6jECm
Z4xnm/IxTdvHtKWOkpMwij867rzwQmxNbwfFOL6WxZAB42DJKqo9XJ4Cgfrl44SH
kQ2yXpZEU14AXilOH2Hmqy6sHFka/XoUjW2SzWXfjfYy2D802CoVAkPqK5rze0PF
BlvzJe5cZwqMcDyBLj5b18wNcDx+I97pjn2ZAGan8jqjnWY4K0WZ7fxl3xXWl0aw
Frgk+G1x5RDXa2ulbsAuAa4k8YlxwjRwcbU9r57kvXP1IQGPMnVJt7N3r5JQbUFm
yYcW9yq1MEd0RmOhHkjjSwkP4JQYSrZ3Yjol1XybbTNCamGYZQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFP4Q9345bcnUN88P0Udfsv0UxsVqMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y
ODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzI4NTkxYjk1LTM5ZDctNGU1NC05
MGYzLTEzMzkzMzhiODQyYy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4
Yjg0MmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALQThAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
fUUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAP6PdVRQo5k7VC6+EITfMrQKchUaYNlD0JffwvmWsOdrFF4ID
A3itQCmttqSN2c5V5rPV15PqgQE2mDc1nCgggm5xxMibCeSsk9qITKZc5jThkqcs
WyIecwcwR6gxu6XYuUpFnQgNfhefMVRcyKOPrTb1GYDTLBIPr9weTKj5ddqGyjpa
+b3QwVccN6AXm1oAEBcda4pkdascT/5n1S+zDgc4KnaRpl9HKmpkTBoEufWyw4+t
mSKuUglozDjV6fYxNCjsbyamIuKTo+fdF0xfoCGb9loxESGWDLB+o4jxF7BNiiOt
xnPJcivnrcvPX52HJxVzb5oDn69pbahb1ljRHg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:21:49 2026 by rpki-client