
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.cer
File: b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.cer (raw, json)
Hash identifier: ycoYkinFe7UTAEaPENuJPiU4w1YofAl0JT2vWLeGqbU=
Subject key identifier: 76:10:05:86:D1:AD:6C:50:27:9A:74:0D:1B:2E:48:8F:86:F0:08:40
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584EBF3A35EA652247BE2CB84000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 06 Aug 2026 12:45:12 +0000
Certificate not after: Wed 08 Nov 2028 13:45:12 +0000
Subordinate resources: AS: 1030
IP: 23.138.168.0/24
IP: 2602:fb46::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bf:3a:35:ea:65:22:47:be:2c:b8:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Aug 6 12:45:12 2026 GMT
Not After : Nov 8 13:45:12 2028 GMT
Subject: CN=b576d583-2b59-4fc2-a5c0-b3b3bf040e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:c7:28:5f:31:9f:c7:d7:25:e9:4a:d2:09:
2d:df:49:6c:bb:4a:74:35:00:2d:0a:62:29:24:d4:
04:fb:b2:71:cc:c4:2f:f1:08:d2:79:19:44:96:bc:
f1:55:a3:90:66:f9:b9:3a:95:e4:d2:a1:ff:f4:bf:
fe:f8:a1:ef:ab:5c:7e:9b:d6:63:f8:b3:25:25:3e:
4c:7f:30:2b:ec:a2:22:6a:0f:ff:c3:bd:56:49:1c:
a2:93:b8:38:d4:3f:d7:1d:b9:44:87:d5:92:c1:7c:
a4:b0:c6:ac:e7:36:cc:fe:88:8b:1f:32:c0:53:0d:
7d:21:56:40:a5:3b:72:8f:a7:97:25:52:cb:75:ef:
2f:4e:77:e9:74:06:a7:ca:de:9f:06:e5:1b:a7:68:
3a:ab:53:e8:87:cb:de:7f:6f:d3:d1:72:20:63:ac:
bf:ca:ff:23:fd:99:d5:5d:a6:03:ac:24:e4:93:46:
3e:b6:94:2a:e9:5f:fc:34:cc:4d:1c:c9:4d:bb:a0:
74:6e:8f:77:e2:92:30:d3:a4:f6:b4:53:b5:99:60:
f0:0a:c3:63:96:40:2e:3e:1f:e5:0f:ea:7e:4d:de:
36:7b:5b:42:d3:b3:d1:a6:5c:0e:c1:94:52:c5:5d:
f3:33:bf:05:e7:97:d2:89:0f:76:62:cb:2e:52:d5:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:10:05:86:D1:AD:6C:50:27:9A:74:0D:1B:2E:48:8F:86:F0:08:40
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c/b576d583-2b59-4fc2-a5c0-b3b3bf040e5c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.168.0/24
IPv6:
2602:fb46::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1030
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a4:08:61:c8:dc:b2:c1:0b:8f:31:4f:65:be:68:f6:d5:01:
df:24:e5:12:96:95:2a:41:92:08:46:6e:13:9b:2d:28:c6:a8:
0b:b4:38:11:f3:65:8f:3e:31:ef:77:1d:6b:26:96:c2:7e:d1:
71:38:f2:6f:63:5f:57:7c:7b:a0:99:08:81:e8:d6:1d:e6:9b:
ea:32:f9:c6:b4:a8:73:e9:48:75:dd:d4:cd:60:80:db:e0:93:
b5:59:8c:4f:13:36:22:d7:f5:93:8e:57:29:65:1a:25:b8:0d:
99:6f:99:30:3b:ed:1c:74:51:b6:bd:96:31:22:88:b3:6d:4a:
23:4f:6f:ec:8d:09:cd:dd:3b:1f:07:11:65:62:2e:4c:3d:44:
2e:66:45:38:02:42:60:0a:a6:7e:95:0d:3b:cd:8e:da:ce:4f:
86:f0:6d:e3:f5:3b:e7:ff:50:7e:bf:07:17:cb:65:be:f9:fe:
5c:2e:0d:cd:50:e7:1e:8a:5c:44:6d:5f:a3:c1:71:1c:80:c7:
82:92:6d:81:1e:86:b3:0c:de:33:54:c4:47:89:93:97:01:fc:
97:96:65:20:e2:62:00:11:3d:fe:f9:e7:51:2c:3d:55:77:1d:
3e:aa:e3:0f:84:f0:fd:18:7b:8e:ec:70:75:1a:90:50:b5:fe:
b4:38:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:51 2026 by rpki-client