
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
File: 2a006d48-b22f-4d9b-8138-c0de62d10e11.cer (raw, json)
Hash identifier: qnhTT3PFihcmFUqdsfvwN7tYnrmcc2Ft/lhCGZQ/GIg=
Subject key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584CD9950FA86BFB3D335C50E8E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 13 Feb 2026 13:45:23 +0000
Certificate not after: Thu 18 May 2028 12:45:23 +0000
Subordinate resources: AS: 17121
IP: 104.160.80.0/20
IP: 199.83.144.0/21
IP: 2620:51::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:95:0f:a8:6b:fb:3d:33:5c:50:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Feb 13 13:45:23 2026 GMT
Not After : May 18 12:45:23 2028 GMT
Subject: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:79:25:26:35:5c:c5:3f:b8:ab:e2:08:78:
1e:6a:38:ff:79:69:26:6d:c5:b5:10:af:8d:e4:4e:
81:17:e2:b3:f7:16:b2:0b:2c:aa:f4:e3:98:b2:a5:
81:3b:b1:4f:46:41:e1:1c:4d:c2:da:c1:08:7b:34:
88:bf:d3:a4:4a:2b:b8:35:40:c4:60:c7:7e:f9:9a:
24:d5:a6:a3:bf:2d:79:69:a0:a3:4a:96:9e:9b:cc:
0d:6f:8a:cc:a8:ca:e8:61:c5:06:2b:43:92:fb:66:
94:c3:6a:c7:e5:49:b7:fb:52:1a:1b:ca:ef:49:bd:
58:4b:04:c0:93:af:0a:af:08:89:f7:0f:b2:87:94:
d8:f6:2e:e3:5b:76:39:6a:3d:36:01:8b:49:dc:78:
bf:15:2a:c0:8f:d9:c4:b6:86:8c:ca:91:1a:66:24:
45:f0:5e:3c:5b:1f:56:b0:11:11:6c:43:91:28:8a:
11:5a:ca:08:91:2b:81:db:a2:1c:96:64:51:3c:ee:
1c:87:5b:16:f1:1d:2d:a7:f3:c1:28:9f:3a:9f:96:
ef:80:d1:e9:95:fd:0c:0a:6a:45:d9:27:b2:de:83:
74:43:23:fe:23:de:1f:32:21:71:8b:35:f8:50:16:
9e:45:53:64:96:07:b9:77:45:ff:6c:fb:bb:79:08:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
104.160.80.0/20
199.83.144.0/21
IPv6:
2620:51::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17121
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:88:42:d8:a2:b7:c2:37:e5:38:1d:07:ec:31:2f:ab:54:3a:
c9:5b:d9:f9:7b:07:ff:b3:20:be:d9:be:f9:f0:d5:f9:49:c6:
65:f4:0b:5b:df:bc:bf:4c:28:75:4a:9c:84:c7:b0:94:c2:d5:
08:ae:25:65:83:81:bc:09:c4:06:88:8a:94:fe:a0:53:6a:f0:
0a:bb:06:6b:69:36:36:a6:86:a2:f3:b0:5b:2c:e5:f0:51:eb:
00:bc:b5:bf:79:eb:db:27:4b:45:49:00:fd:4c:f1:58:cb:f6:
c6:2b:61:72:65:0e:f0:cb:f4:1c:d3:17:6f:42:5b:98:55:38:
f1:86:25:de:78:f8:31:d8:25:9b:31:92:4b:0f:0c:6b:c9:1b:
d1:83:b4:4f:25:f8:c5:e7:95:ae:37:1e:d6:db:75:07:5d:a1:
00:e5:2d:bc:0e:e3:1a:d5:eb:d8:d7:ea:e8:3c:a3:d1:08:b7:
ec:21:36:a4:4e:67:8b:9d:7e:03:b3:aa:44:1c:c8:11:70:c4:
b3:50:52:12:10:03:6c:46:75:50:47:0d:46:50:8d:15:14:cb:
45:ef:25:6b:ca:db:3e:5d:52:5b:f3:6d:db:20:72:92:4c:1d:
d5:e7:55:d7:49:e4:6b:96:c1:64:86:61:80:a8:1f:51:62:77:
4c:03:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:10:22 2026 by rpki-client