
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
File: afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer (raw, json)
Hash identifier: YxZdCrkE7vRhArA4h1blTaZmFtz2+QY6D05pKipVyyI=
Subject key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584EB6DA28D74CC1C25F84ECEF00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 03 Aug 2026 12:45:12 +0000
Certificate not after: Sun 05 Nov 2028 13:45:12 +0000
Subordinate resources: AS: 985
AS: 1007
IP: 149.112.46.0/23
IP: 2602:fb4a::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b6:da:28:d7:4c:c1:c2:5f:84:ec:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Aug 3 12:45:12 2026 GMT
Not After : Nov 5 13:45:12 2028 GMT
Subject: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:8a:9e:fe:db:0d:3c:fa:4c:26:1e:43:e3:
0a:36:68:05:ba:01:a8:bb:75:07:2e:17:06:4c:92:
3c:4c:12:36:ec:d8:8e:47:9d:39:36:46:84:ed:80:
b3:d8:59:0f:77:08:3d:ed:8c:cf:82:51:48:8b:7b:
7d:d4:9b:7d:e1:16:50:cb:7c:df:ea:88:fa:24:58:
bd:f3:6c:a8:dc:3c:49:f3:60:39:aa:a1:ef:40:64:
3c:e2:3a:ff:af:95:a8:ed:68:3c:9e:b9:92:aa:75:
4c:79:50:b0:02:88:14:9b:7f:0d:4c:cc:40:dc:ca:
b3:8a:38:05:9c:b4:c1:11:45:15:a4:a2:8e:c5:7d:
0c:7a:6f:ea:95:8c:ba:94:85:9d:5e:91:56:fa:33:
d8:01:a1:8d:b1:69:7a:b4:37:1d:6d:18:e6:f9:bd:
cc:78:ba:0c:11:15:ab:66:a7:fb:62:28:4f:b7:82:
82:81:9a:dc:64:0c:a9:d4:02:a5:8d:5b:df:53:c5:
26:5d:61:a7:3d:64:44:cc:db:55:b5:3a:2b:77:77:
9e:76:09:dc:1f:f0:6e:64:aa:ba:47:c8:11:5e:96:
de:b0:a0:02:06:4f:64:41:df:1d:9c:73:63:80:46:
82:1d:ee:a1:e7:24:30:97:a6:0e:27:7a:7f:97:b3:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.46.0/23
IPv6:
2602:fb4a::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
985
1007
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:1a:75:eb:d1:0b:7d:ba:3e:fa:2f:ed:3b:78:4f:a5:01:9c:
37:e4:4d:4b:7d:e4:0c:ac:ae:cd:40:36:87:fb:c0:d3:f5:f0:
f9:77:01:5b:e0:7d:d2:eb:da:8a:df:47:37:ce:95:a9:cd:c7:
da:e7:3e:21:61:f2:07:f1:00:a2:16:32:11:c9:c6:94:bb:c3:
78:a7:c6:5e:4f:6d:cd:08:8e:cc:24:b7:46:89:10:bd:86:92:
fd:1e:a2:24:55:27:57:9e:56:7d:05:89:21:80:85:75:42:50:
c6:02:7e:ae:76:61:a5:84:4d:86:49:1b:51:81:ab:23:c3:7f:
e9:b9:d4:af:8c:9c:55:78:b1:bf:9b:76:6f:cd:c9:4e:02:e0:
16:36:75:1f:4f:34:47:bb:48:44:62:b2:85:99:9f:41:90:64:
24:26:aa:f9:af:ef:96:99:81:e5:f0:68:03:c7:6f:ba:2f:cf:
64:e6:20:47:97:33:77:d0:9f:d3:d6:2c:99:cc:b5:d5:aa:a2:
14:ac:e5:36:4c:a4:95:ef:fe:a8:8e:e2:b0:f4:c3:e1:03:f4:
cd:8e:65:e9:12:8c:c9:66:8a:0e:77:39:37:34:1b:2d:dd:ba:
83:a2:e9:17:06:78:ec:67:da:55:e0:9d:03:c0:cb:49:11:17:
6c:31:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:41:57 2026 by rpki-client