
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer
File: 03aa7869-00ee-4a38-9822-b5f285ade0c3.cer (raw, json)
Hash identifier: LOJhv+DJv2CcMWqxNfUDDPZCh7PKvqrIKE9MD+f+ObE=
Subject key identifier: B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D5F78112D499795C49D09B100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Apr 2026 12:45:17 +0000
Certificate not after: Wed 05 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 10546
IP: 130.18.0.0/16
IP: 192.208.128.0 -- 192.208.157.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:78:11:2d:49:97:95:c4:9d:09:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Apr 2 12:45:17 2026 GMT
Not After : Jul 5 12:45:17 2028 GMT
Subject: CN=03aa7869-00ee-4a38-9822-b5f285ade0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:81:59:b1:7e:0a:59:84:76:29:50:36:ac:
6c:a9:07:b9:19:b3:70:48:77:08:fa:0c:83:23:7a:
61:ca:da:47:ab:b2:f2:d6:8b:4b:67:c6:b9:3f:a4:
c8:73:50:b9:39:9e:12:3b:85:61:00:13:99:1d:62:
00:cb:40:fc:95:ef:29:43:59:68:7c:f3:7e:17:ed:
1f:27:eb:8e:81:6b:7d:70:4c:d7:84:b2:49:a7:4d:
d5:e2:e6:49:f3:95:24:c8:00:60:d0:a8:5d:8c:5f:
99:cd:4b:dd:7d:0f:91:00:b8:9b:68:ee:a0:16:6c:
50:14:ea:06:e9:a5:75:21:8c:90:bd:93:ba:d6:d0:
8a:3d:fb:eb:9c:1d:bb:f8:7c:5c:08:3f:11:b7:36:
f1:ad:11:3b:aa:56:8f:8d:b4:f1:15:37:6b:15:05:
52:56:11:ad:5b:e8:87:bb:1a:aa:55:31:c5:4d:ce:
8a:fe:54:fd:03:16:83:04:47:a0:d4:a6:21:24:d9:
9e:62:b4:4a:5a:2b:b9:0e:e1:be:56:e4:5b:00:68:
87:05:04:13:12:5b:8e:ad:e6:c8:75:38:49:5c:38:
05:03:50:96:97:ff:30:0f:56:df:23:1f:5d:4c:49:
08:04:83:71:fc:10:b0:21:90:8a:a4:9e:d9:e8:75:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
130.18.0.0/16
192.208.128.0-192.208.157.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10546
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:28:e1:9c:e5:a4:a1:64:83:37:30:33:e1:62:fb:73:f2:4c:
87:fc:56:92:c6:b7:8a:ba:10:9d:be:c9:22:b9:71:51:e7:c1:
75:6b:7a:d0:62:1c:c9:5c:17:2a:06:66:2a:80:2d:1e:1c:93:
ff:ba:2b:4b:38:f3:80:42:96:1f:8c:ef:fb:ca:2e:81:2a:06:
04:f9:c4:e5:c2:2e:8e:04:d9:56:48:71:7a:78:8b:19:a4:2c:
da:72:70:ed:ac:de:d8:df:bf:ac:ff:40:31:3b:90:ad:29:27:
b7:90:01:37:e6:cc:5c:c9:8d:da:0f:c9:7e:7b:aa:37:d8:61:
06:79:8c:ce:a2:f8:5f:83:3e:13:57:c9:dd:00:ef:45:e7:c7:
99:80:24:1b:d3:db:da:db:99:5b:7b:e2:6c:ad:f2:0d:00:b9:
78:18:ea:b6:a1:14:f8:86:ee:9f:f6:80:a6:ee:b8:ef:48:38:
c7:75:e8:bc:ea:f9:c2:aa:eb:e0:00:c9:ff:8a:45:40:54:28:
e1:ac:8a:63:5b:23:ac:75:eb:4a:5d:ac:64:e7:cb:b9:cd:6a:
be:76:33:2d:f5:0c:cc:8d:56:15:43:90:a5:8d:99:85:44:0b:
96:1c:92:38:c5:37:bb:f6:35:e1:99:f3:28:1f:db:e4:c4:de:
1d:e2:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:53 2026 by rpki-client