
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer
File: a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer (raw, json)
Hash identifier: HDXunPxLeVnQKXRwDokb0AtUbXd/xznvUHxQa36DfO8=
Subject key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584CF2B533C2A427F759182CB080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 22 Feb 2026 13:45:21 +0000
Certificate not after: Sat 27 May 2028 12:45:21 +0000
Subordinate resources: AS: 393869
IP: 2620:11f:5000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f2:b5:33:c2:a4:27:f7:59:18:2c:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Feb 22 13:45:21 2026 GMT
Not After : May 27 12:45:21 2028 GMT
Subject: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:95:44:a2:3a:0b:5c:06:ff:41:9c:b5:69:
e9:55:da:a2:aa:01:2b:1f:a0:5f:f1:35:86:ba:18:
d8:fd:b1:5a:5d:a1:98:be:0b:fe:de:d8:37:59:46:
88:d9:31:17:30:2d:fd:bb:62:40:dc:78:60:d7:27:
18:5a:f1:25:84:52:7b:8e:18:34:2b:cb:16:a0:01:
e9:18:23:06:11:9a:71:1f:e6:14:95:50:42:34:78:
62:68:36:8a:3a:79:81:ab:37:75:d3:df:94:f8:e0:
02:4f:22:7f:29:79:cb:36:12:1c:bf:08:18:d5:0f:
1a:2b:2c:c8:2a:e6:fb:f9:8d:60:41:73:7e:a5:89:
7a:62:95:50:f7:80:a0:7b:5a:dc:4d:1c:9e:d2:a4:
a0:53:cd:49:96:34:26:42:69:9b:86:6b:dd:6c:97:
13:45:f6:c9:23:3c:3c:30:71:4b:41:17:4e:de:c6:
e1:22:d1:a6:25:d1:9f:7b:45:ff:2a:22:d3:4b:f9:
d7:ec:2b:f1:68:e8:ce:12:32:34:a4:b7:fd:b8:b5:
8d:19:44:d5:6d:7e:e1:fc:da:92:37:99:2e:81:8e:
3c:1e:4f:0e:53:64:cf:b1:e6:07:a0:1f:69:1c:d3:
05:78:d9:cf:b5:a4:fb:8a:9a:7d:10:16:89:87:b6:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11f:5000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393869
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:75:8a:2f:e3:eb:5b:bd:38:13:48:4c:b9:cd:c8:7d:27:b8:
ac:9e:d6:3c:74:fb:bf:5b:48:71:99:4a:50:b5:63:c0:5c:e2:
1d:80:ad:5e:6e:0a:6d:e1:44:47:3b:5c:f0:4a:f2:49:31:cd:
40:f5:c5:06:58:56:0f:0d:c8:73:c1:57:93:54:d3:b3:4c:66:
07:46:90:96:3d:19:58:dc:e6:7b:f3:73:ce:de:9d:b6:48:84:
3a:e7:8e:df:fd:6d:8b:96:ce:bd:19:96:97:c7:f9:39:ed:24:
5a:5a:27:d5:bd:18:f3:08:1e:6a:4d:0b:1f:80:06:ae:43:dd:
c7:02:63:f0:68:6f:7d:b3:b4:82:83:fd:24:6f:5e:97:31:9f:
bc:41:6b:60:b1:bc:88:4c:a0:98:3b:f6:fb:da:d5:b4:00:85:
10:e8:41:25:79:7f:05:06:d9:00:9e:83:67:70:fd:89:2c:39:
ee:66:5e:5a:0f:42:89:2f:af:a3:a6:29:05:32:28:b0:2a:91:
79:0a:76:3d:77:69:bf:1f:a5:5e:e2:5a:ca:f7:a7:10:c5:e1:
76:4a:d2:9e:0c:69:f1:f1:d6:c3:82:a2:27:c6:62:1c:b4:5c:
ed:42:10:3c:92:77:cd:60:52:5e:b5:1b:7a:9d:27:bf:0b:1d:
1f:10:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:08:13 2026 by rpki-client