
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10.cer
File: 691c27e1-2f02-4b04-9b26-b0e5b0bc1f10.cer (raw, json)
Hash identifier: QnhLHl3PJwjtbDwJkLUvrB5FsgrtRazXAeDqVwXVuus=
Subject key identifier: 4F:F3:F9:87:98:B8:66:54:C0:DD:59:D0:DC:BB:22:AF:F2:61:50:55
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584CAFB4C9FF41FA3C98C49BBE60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 29 Jan 2026 13:45:22 +0000
Certificate not after: Wed 03 May 2028 12:45:22 +0000
Subordinate resources: AS: 11678
IP: 2607:2080::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:b4:c9:ff:41:fa:3c:98:c4:9b:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jan 29 13:45:22 2026 GMT
Not After : May 3 12:45:22 2028 GMT
Subject: CN=691c27e1-2f02-4b04-9b26-b0e5b0bc1f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:53:25:c8:97:27:5e:d2:bb:4c:60:d4:a0:
95:d2:c0:03:84:e2:86:c6:37:45:5e:55:6b:47:8b:
39:5c:56:df:0a:b8:9a:ae:e9:53:d9:77:29:e0:dd:
fe:ba:a8:28:6e:aa:4b:bd:71:fe:7e:8c:c3:5d:4c:
f9:76:55:90:46:46:55:d2:9a:8a:60:fe:c5:36:35:
92:7e:d5:97:a0:2b:dd:28:5f:c5:41:d9:e2:3e:a5:
be:78:b2:8a:2f:90:6d:fa:11:e3:0c:25:ad:04:b0:
8b:6b:9f:a1:61:77:d5:d5:e9:ce:c8:e9:d7:49:a6:
25:2b:74:4c:10:30:25:b8:22:c0:0a:66:6c:d2:01:
55:2c:2e:d3:a1:10:3a:d9:c6:02:cc:a4:22:63:c7:
19:7e:79:62:aa:99:4a:77:b6:bb:21:fc:10:de:65:
89:9d:03:a9:98:a7:9b:5a:34:64:f4:07:45:95:5b:
ea:19:b6:a0:ac:80:f8:86:67:64:f7:cf:c6:5c:af:
04:55:4d:c6:c5:d0:75:9a:75:c6:da:d1:bc:e4:aa:
56:6f:48:d9:08:e0:c9:31:d5:e0:b6:47:65:d5:e3:
71:d0:a9:14:ec:53:ea:a3:1c:ca:b0:a5:8f:f3:32:
f9:cf:e0:a7:f5:cb:6e:97:ac:8a:52:aa:08:be:fc:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:F9:87:98:B8:66:54:C0:DD:59:D0:DC:BB:22:AF:F2:61:50:55
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10/691c27e1-2f02-4b04-9b26-b0e5b0bc1f10.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:2080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11678
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f3:59:ce:03:43:3e:08:59:ce:2a:43:e7:48:f6:58:e9:12:
d4:c7:e8:96:06:99:2c:35:2f:cc:f7:f8:ac:ef:02:36:be:40:
af:12:90:1a:57:69:28:fb:97:d7:65:9b:c2:89:85:a2:5d:6f:
34:39:93:e2:c5:f0:8d:6f:40:a8:09:0b:a1:97:f0:c4:d9:25:
6b:a8:47:bc:72:18:4e:d0:68:72:ea:9f:68:f6:f9:de:9e:2c:
44:75:88:6e:c5:72:b7:75:00:c4:02:fe:6b:9e:54:93:dc:51:
ed:68:c3:ad:01:dc:73:0f:07:18:6a:69:bb:f0:a4:ac:3f:59:
b9:c2:17:bf:3e:09:7a:8d:cb:02:c3:09:df:ce:ca:23:b6:75:
7a:75:47:18:5b:5b:21:19:41:e0:90:89:99:6a:60:15:ae:f4:
80:15:e4:ac:58:cb:fb:4e:29:0d:83:59:02:86:7c:05:97:35:
d9:68:01:e9:52:d3:8b:23:4d:a9:2f:5d:52:71:c0:38:d1:fd:
16:4c:23:8e:85:e8:df:cd:c0:0d:2f:f7:fc:2b:2d:88:b3:cd:
51:43:9e:e5:ee:e0:3b:da:b5:5f:57:ca:79:a5:1d:69:fe:ba:
d3:77:5d:a2:98:a0:e3:b5:01:5e:98:45:d7:c1:ed:78:64:4d:
a7:62:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:10:24 2026 by rpki-client