
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
File: b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer (raw, json)
Hash identifier: /bUGEYDyaRycvifbYd9LHRjG5KE1e7CM1O4GeW0jSfE=
Subject key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584CE4BFCC66D87726B6149657E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 17 Feb 2026 13:45:23 +0000
Certificate not after: Mon 22 May 2028 12:45:23 +0000
Subordinate resources: AS: 20460
IP: 72.14.128.0/19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e4:bf:cc:66:d8:77:26:b6:14:96:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Feb 17 13:45:23 2026 GMT
Not After : May 22 12:45:23 2028 GMT
Subject: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:67:9d:61:31:79:99:fc:32:98:1f:93:7f:
ba:df:30:5c:2d:c0:c4:40:c3:dd:a1:ce:50:ad:26:
d0:21:69:98:b0:b4:90:b7:36:0f:3a:1c:e2:9b:56:
9d:06:dc:34:da:f3:78:3a:e0:25:fa:dd:b1:45:9b:
ad:36:2b:15:fd:2f:a7:db:3d:0d:61:c8:a3:d2:0c:
5a:31:ff:df:ae:32:01:5f:88:a0:cb:78:a5:41:ae:
41:e5:af:f0:56:cf:4e:21:c7:12:ef:13:68:45:0f:
5c:95:ef:c4:bd:fb:0e:f6:11:af:30:0b:84:d4:74:
1b:b3:fb:99:a2:72:5c:a9:a4:52:f2:91:a9:4a:70:
a3:15:20:2b:95:5f:31:b4:ed:b9:3d:70:9b:77:28:
ed:a3:da:a9:1c:22:06:09:73:67:84:4b:a3:2a:dc:
47:e8:3a:ee:b9:12:e9:99:3b:62:bf:42:6d:83:60:
4f:20:8b:79:80:5b:12:04:80:df:c1:5c:a3:ea:f2:
34:03:7f:7a:42:6c:82:5f:22:68:94:ea:7a:71:bb:
40:9c:a6:83:40:64:41:17:49:ba:8d:3a:a3:22:84:
84:86:d5:55:dc:f7:a0:fa:ac:69:44:85:fb:01:2c:
e4:ab:c1:ad:c8:e4:f9:9f:a4:5a:ed:00:2e:91:4a:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.128.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20460
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:df:50:cf:a2:0e:10:6b:ca:90:23:f4:e6:42:e2:a5:54:aa:
a3:c2:7a:96:d8:77:5e:96:d9:ed:70:04:8d:ae:2e:79:a3:e3:
d5:d2:a0:5d:da:c6:71:33:be:e9:ca:bc:ff:da:21:b8:48:0c:
7b:89:fe:e5:68:90:c7:82:2d:c2:eb:0e:17:23:34:62:c8:28:
54:39:a4:3e:f1:1d:a1:9c:c6:a7:81:75:8f:8f:95:e0:17:7a:
96:9f:66:dd:ae:95:dc:94:47:07:b8:a7:b0:b7:4d:a8:41:4f:
05:79:cc:67:db:f6:ab:f5:7f:4f:96:9b:e9:a5:eb:82:10:92:
c0:5f:2f:a1:b8:30:2c:f8:9c:93:a6:5f:c4:a7:f2:85:31:62:
05:ff:6d:c6:15:1b:07:d3:31:43:89:74:ae:b7:a4:2b:7f:c8:
13:56:73:32:a8:d5:7d:a5:66:28:d5:df:57:c2:e2:d2:c0:e0:
8c:11:dd:9b:a8:b8:7c:c1:ef:80:ee:78:39:00:17:8b:f4:89:
04:f7:df:a3:8d:ab:77:6a:43:3d:03:d9:bc:78:33:8d:71:9b:
6a:16:8b:a3:85:ea:72:a1:a9:f2:28:88:0b:83:56:85:67:33:
a0:7f:9f:e4:56:5c:95:84:2a:2a:79:11:4f:38:50:9f:a6:ea:
e1:04:a1:3a
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEzkv8xm2HcmthSWV+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI2MDIxNzEzNDUyM1oXDTI4MDUyMjEyNDUyM1owLzEtMCsGA1UEAxMk
YjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZkMWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhChnnWExeZn8Mpgfk3+63zBcLcDEQMPdoc5Q
rSbQIWmYsLSQtzYPOhzim1adBtw02vN4OuAl+t2xRZutNisV/S+n2z0NYcij0gxa
Mf/frjIBX4igy3ilQa5B5a/wVs9OIccS7xNoRQ9cle/EvfsO9hGvMAuE1HQbs/uZ
onJcqaRS8pGpSnCjFSArlV8xtO25PXCbdyjto9qpHCIGCXNnhEujKtxH6DruuRLp
mTtiv0Jtg2BPIIt5gFsSBIDfwVyj6vI0A396QmyCXyJolOp6cbtAnKaDQGRBF0m6
jTqjIoSEhtVV3Peg+qxpRIX7ASzkq8GtyOT5n6Ra7QAukUrNTwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFPsRYyeBzuOaKHR0wigsLpTdgwjEMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i
NTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2I1NmY2NjVkLTNjMjgtNDU3Zi1h
YjZmLWE0NzQ0NGQ2ZDFmNy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRk
NmQxZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAVIDoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
T+wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAT99Qz6IOEGvKkCP05kLipVSqo8J6lth3XpbZ7XAEja4ueaPj
1dKgXdrGcTO+6cq8/9ohuEgMe4n+5WiQx4ItwusOFyM0YsgoVDmkPvEdoZzGp4F1
j4+V4Bd6lp9m3a6V3JRHB7insLdNqEFPBXnMZ9v2q/V/T5ab6aXrghCSwF8vobgw
LPick6ZfxKfyhTFiBf9txhUbB9MxQ4l0rrekK3/IE1ZzMqjVfaVmKNXfV8Li0sDg
jBHdm6i4fMHvgO54OQAXi/SJBPffo42rd2pDPQPZvHgzjXGbahaLo4XqcqGp8iiI
C4NWhWczoH+f5FZclYQqKnkRTzhQn6bq4QShOg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 16:11:53 2026 by rpki-client