
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
File: d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer (raw, json)
Hash identifier: klBaf+TWEyFYOWZKx3cKSBbavaMv2nQEcVgX0796+cI=
Subject key identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584CC074E259B7AAF9D3527774E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 04 Feb 2026 13:45:21 +0000
Certificate not after: Tue 09 May 2028 12:45:21 +0000
Subordinate resources: AS: 398415
IP: 23.142.136.0/24
IP: 148.163.180.0/22
IP: 2602:fafc::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:74:e2:59:b7:aa:f9:d3:52:77:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Feb 4 13:45:21 2026 GMT
Not After : May 9 12:45:21 2028 GMT
Subject: CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:36:c7:2e:bf:e4:12:8b:5f:97:c5:6b:eb:
1a:97:af:93:3a:72:5f:61:66:35:ba:6a:69:a4:2f:
0e:1c:4e:f7:78:9b:a9:f0:9c:af:9e:c9:c4:93:8f:
32:a6:c3:f0:ef:fd:68:d9:a0:af:1c:05:92:67:6b:
54:30:14:1d:5b:3e:04:87:bd:f3:9b:01:6d:46:b0:
8a:24:17:39:f1:0e:d0:a3:45:6b:03:f5:e3:4c:7d:
4f:b3:fb:45:d4:c7:82:e5:a4:d7:0c:27:75:90:bb:
85:50:d8:ec:f8:d9:28:68:1f:ce:f5:0b:e8:47:87:
54:77:6e:4f:34:ba:62:ed:fd:56:8d:85:c7:3a:3f:
a5:7a:6b:14:80:3e:31:10:34:8f:aa:6c:7b:99:df:
0a:60:c5:a8:ff:d9:ac:94:5f:29:72:cb:73:7f:7f:
b5:ce:af:b6:4c:2a:92:b2:dd:b1:63:6a:9a:34:38:
80:74:f4:9f:e4:63:ab:94:ff:08:7a:c9:88:ab:33:
b1:1a:94:e3:43:50:67:1d:78:96:5c:25:10:bb:8e:
06:98:db:87:6f:c3:a5:b7:f3:be:3d:4e:33:d1:86:
fe:5c:62:66:ed:fc:a0:39:53:ba:64:da:da:e6:0b:
10:a1:36:1c:9b:f6:9f:b6:f4:24:44:eb:2d:5e:a5:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.136.0/24
148.163.180.0/22
IPv6:
2602:fafc::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398415
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c8:17:be:f0:8c:74:d7:37:50:46:29:82:0e:30:e2:bd:7d:
57:35:1d:70:e1:a5:79:29:88:63:9b:9f:d9:4d:25:3d:5c:f1:
93:ba:e3:2a:e2:05:f8:ed:56:8b:4c:07:e0:89:04:f3:d6:c0:
51:c7:5a:4b:4c:e1:7b:eb:70:b9:bd:14:2a:85:d3:99:fa:7e:
20:0f:6e:9e:d1:bf:78:10:cc:2c:f9:dc:66:c2:4a:c8:5b:c6:
8c:e1:79:2f:7b:0a:d7:c2:4d:d4:e0:cd:9c:8f:6a:17:81:cd:
ab:e7:4f:8e:e4:05:b6:65:e1:4d:de:cd:26:e6:03:21:2e:c9:
0d:18:23:fc:07:31:58:52:5a:d1:65:28:f9:25:73:13:12:07:
4b:8d:66:fe:1d:c7:14:57:cc:54:b1:4d:ae:91:3e:76:57:12:
a5:04:2b:bd:87:8d:26:8a:64:0c:05:08:25:e8:2e:c3:6f:f5:
57:62:ef:a5:32:7f:e2:35:53:9a:e9:2e:a1:b2:1b:46:d7:23:
24:21:0b:09:a2:78:53:ff:63:a6:76:46:e0:2c:72:c0:8f:c9:
ba:50:b9:3a:e2:4c:f4:60:a0:76:13:8b:51:9f:8e:6f:aa:6f:
05:5a:a4:a7:f0:e0:42:89:c6:5b:8f:53:a1:c6:ea:e4:d6:7b:
a9:fd:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:08:13 2026 by rpki-client