
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer
File: a3e00c5c-5e66-4d69-8173-b03c82880bc1.cer (raw, json)
Hash identifier: k9zyMCqwzngjESgNZX4viec0HoU3bDmLtmx91eIQqI4=
Subject key identifier: D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D19AD00C1341F2076F45F5B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 08 Mar 2026 12:45:21 +0000
Certificate not after: Sat 10 Jun 2028 12:45:21 +0000
Subordinate resources: AS: 26661
IP: 199.96.184.0/21
IP: 2620:12b:2000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:ad:00:c1:34:1f:20:76:f4:5f:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Mar 8 12:45:21 2026 GMT
Not After : Jun 10 12:45:21 2028 GMT
Subject: CN=a3e00c5c-5e66-4d69-8173-b03c82880bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:e1:e1:2b:ef:9d:c6:d8:f5:09:2c:b7:c0:
5c:cd:72:27:a3:06:05:34:1e:ac:14:87:e2:12:29:
bb:42:4a:7a:7c:21:b8:a0:83:76:9e:39:fa:86:49:
b5:cc:b9:64:6e:4a:0c:6c:d4:15:49:ce:d4:e3:ea:
c8:76:a7:36:ad:55:11:6a:71:44:f6:4c:38:50:f4:
37:7d:38:ac:3f:03:44:c6:a1:66:0a:23:47:3a:0f:
85:50:38:2e:81:cb:f1:72:ab:62:52:ab:28:ba:20:
01:74:b0:9f:44:b7:58:ae:19:a2:ca:54:c8:33:49:
8a:07:e8:4b:1c:1d:52:bd:ec:6c:ce:9f:28:82:06:
6d:52:f5:3f:4f:46:af:55:cf:31:f4:d7:eb:f7:1b:
68:ff:f3:a3:2e:92:98:85:82:f8:59:90:60:f5:45:
13:9d:ad:33:d9:8a:8d:9a:94:16:3f:78:a1:87:18:
07:79:d6:5c:b1:15:29:88:9b:c5:32:16:0a:94:df:
36:86:74:09:ca:85:82:ae:49:e9:e1:e1:ac:8a:b0:
99:c9:39:bf:c5:22:78:89:12:a4:43:13:fb:60:6e:
ea:a2:6b:89:ae:46:71:b2:9d:f1:8c:54:f0:e3:a3:
b5:b2:01:c9:e8:a7:05:07:9a:06:bb:24:7d:1c:60:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:74:D8:AD:B3:79:80:04:10:A4:04:FA:EC:10:CA:29:C1:49:53:E3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3e00c5c-5e66-4d69-8173-b03c82880bc1/a3e00c5c-5e66-4d69-8173-b03c82880bc1.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.184.0/21
IPv6:
2620:12b:2000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26661
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:1a:b6:4c:b7:f7:7f:a0:be:a7:40:bc:0a:cb:de:2a:86:d8:
16:4d:b3:91:e9:f1:0b:7d:94:74:d6:af:fe:d1:fd:e1:69:bb:
a4:80:f1:25:c7:13:e0:61:4e:21:46:0b:17:b3:67:a4:0f:ec:
f7:68:6d:15:f4:f0:44:0e:3c:0a:8d:20:78:21:47:76:52:01:
71:79:b9:97:41:51:dd:b8:4e:95:c2:52:0d:d3:af:3f:c7:d3:
51:97:a8:87:43:86:3d:d6:72:8d:48:18:72:01:63:a8:39:dc:
85:eb:0a:8d:63:7a:36:bc:59:fe:80:c8:55:a9:5d:44:87:f0:
95:0d:17:d1:27:0a:2f:f0:1f:fe:59:2f:d6:22:88:77:95:9c:
d8:d0:0c:73:c0:3c:34:ce:21:84:61:3e:c0:46:ab:14:15:1e:
f8:05:c8:24:eb:fe:85:e6:a4:47:51:fe:7a:a1:d4:35:73:a9:
11:c3:56:b8:b1:57:f9:53:7f:ae:e8:bb:1c:f0:86:17:94:f6:
86:c8:b7:e2:bb:df:ef:fa:b7:29:49:b9:be:f5:49:b7:32:57:
e1:4a:c8:83:af:3e:5c:d9:55:63:29:f2:80:14:f9:3e:60:58:
b3:c0:1f:c7:34:a1:a0:f1:71:85:ff:bd:5a:5e:2d:28:0d:35:
79:3b:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 11:43:08 2026 by rpki-client