
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer
File: ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer (raw, json)
Hash identifier: w41z54Sy55AMUIFROEr8zP/V7gS3dbrpvPG648jjv+Y=
Subject key identifier: B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584EFF6FF191E6E537EA31480660
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 29 Aug 2026 12:45:11 +0000
Certificate not after: Fri 01 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 23094
IP: 199.180.140.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:6f:f1:91:e6:e5:37:ea:31:48:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Aug 29 12:45:11 2026 GMT
Not After : Dec 1 13:45:11 2028 GMT
Subject: CN=ad2a8414-575e-4d7a-8c69-a1fd4f31ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:94:86:4b:cf:82:c7:08:0e:a1:1d:a9:d3:
9c:b8:f9:dd:78:ac:d5:4a:3b:da:b6:d3:fd:59:98:
20:bb:b9:b8:63:6e:07:69:f0:5e:61:35:8d:5a:b3:
40:a4:52:b7:05:22:cb:59:a5:5b:ff:ac:83:35:f4:
87:87:e5:e2:cf:1d:47:9e:63:a2:0c:db:fe:80:4f:
80:21:dd:3e:b7:5c:81:8c:c6:68:f1:82:02:54:12:
9b:f2:d9:bf:c2:bf:f6:6e:3f:d7:8f:70:a3:f8:51:
3e:eb:a6:e3:8b:c1:d5:1d:2f:a6:aa:07:ba:a3:d6:
9a:bb:18:9a:e2:22:24:86:dc:e3:33:21:44:0e:50:
7f:90:e7:81:78:ea:42:ea:cc:7b:79:c9:98:59:b3:
4a:26:e7:7b:74:f8:79:7d:1a:14:b5:f2:0d:41:cf:
72:d4:76:c0:f0:c7:97:42:f5:0f:24:23:cf:2a:90:
f6:e5:e7:30:1b:c6:fb:64:13:40:da:c5:bf:c3:1f:
f7:a1:e3:97:39:74:a5:88:5f:f6:8e:cf:21:7f:1b:
3a:53:fb:20:fa:08:9e:18:6b:b5:1c:e2:26:79:80:
3e:4b:47:5d:13:d1:2f:77:64:49:66:cf:ae:40:87:
be:c9:4a:b8:36:a4:05:83:78:9d:35:5c:99:ee:32:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
199.180.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23094
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ed:c8:d8:b4:b6:46:c4:3b:8c:2d:4e:cb:46:b0:ea:78:29:
fc:6d:76:f9:5e:26:8e:76:11:63:1a:38:a2:01:a9:46:3e:7b:
53:fd:c8:21:49:6d:94:79:ca:54:75:52:76:40:cd:44:98:65:
49:06:85:b5:56:a3:25:bd:66:2b:39:68:6f:e3:5c:4f:5a:15:
df:a4:c0:e4:c5:eb:4b:bb:d5:e9:bb:e1:05:3b:b2:24:fe:8f:
46:9c:a4:2e:b3:0b:87:65:be:05:79:05:a5:34:17:0e:b1:d4:
fb:48:7b:c9:56:dc:92:59:f5:bc:2d:39:f5:14:b8:eb:8c:08:
f7:4c:6c:d4:bd:c5:d4:4a:a7:fb:cf:e6:4e:c2:88:2a:65:5f:
86:3f:5a:25:5c:8b:0e:9f:36:6d:55:b6:33:9e:ba:90:18:48:
0a:8c:43:f7:b1:ca:32:95:b0:89:fe:22:a1:1d:e9:08:8d:f3:
ee:56:ab:f9:d6:75:56:28:3e:13:ae:d4:ef:8d:49:80:4e:1c:
76:08:7f:8a:a9:2f:ff:5e:54:34:b7:e8:ac:f7:bc:5a:ba:98:
d2:f1:23:12:45:39:85:77:c3:be:7a:43:61:b3:6a:71:f7:d8:
c9:e3:9c:cd:83:68:d9:d6:bb:aa:d5:41:b0:d8:fe:b2:c8:6f:
f5:68:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 22:59:39 2026 by rpki-client