
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
File: 0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer (raw, json)
Hash identifier: Itd3mUThdkQ8FZ+o5PeENKA0Lb0Xm3KcBbZ2xJ3OM70=
Subject key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D895855B3577B40485CD7A780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 17 Apr 2026 12:45:18 +0000
Certificate not after: Thu 20 Jul 2028 12:45:18 +0000
Subordinate resources: AS: 393529
IP: 160.129.0.0/16
IP: 2620:4e:a000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:89:58:55:b3:57:7b:40:48:5c:d7:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Apr 17 12:45:18 2026 GMT
Not After : Jul 20 12:45:18 2028 GMT
Subject: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:6f:d5:b0:22:84:94:c3:18:b4:bc:8d:59:
48:49:ef:bb:2a:07:1a:b0:b3:21:ca:f7:20:80:ed:
54:74:74:7a:f4:79:bf:23:9d:bc:34:13:fd:71:b9:
67:54:00:a5:63:fa:04:08:c3:da:62:20:a9:38:05:
fd:10:33:33:f4:16:d0:71:48:23:84:ce:c3:dd:0e:
e9:02:71:07:88:b1:13:d1:c5:62:e4:ca:82:dd:da:
20:85:fd:ea:11:66:3c:ae:08:ac:fa:71:33:c4:92:
03:2b:43:9f:6c:59:b6:c1:6f:99:d5:7c:50:4e:9c:
4b:8b:38:dd:55:08:41:0b:e2:f7:49:7f:a4:72:c0:
c9:89:c4:36:39:a4:19:fd:31:9d:14:c4:41:85:fe:
e1:80:27:37:ab:79:bc:47:81:c8:fc:67:de:26:ed:
de:e6:44:2f:77:f1:08:ec:3c:26:5b:56:e4:89:5e:
1b:a8:a9:6c:e4:7b:ee:f6:87:02:27:77:2d:17:33:
66:8f:43:99:48:eb:e3:51:86:03:7f:7f:c4:61:f1:
b8:83:ee:6e:ba:d8:fa:00:82:00:f8:b7:1c:25:e8:
e5:4c:4f:6c:61:88:14:88:45:66:ea:07:42:09:5c:
86:1a:a9:b6:3b:f9:6c:fa:0d:b1:5b:6b:9d:b9:9a:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
IPv6:
2620:4e:a000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393529
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f7:fe:c1:04:9b:1d:83:af:3d:64:f4:3c:cc:1d:36:60:f9:
c4:b1:5d:6b:e7:4d:89:13:3a:27:8d:88:af:54:43:1f:86:1a:
b1:94:0f:f4:77:bd:88:3c:aa:d7:3d:92:e6:87:04:37:d6:4e:
1c:8c:71:c5:e5:f2:2d:29:28:34:b6:19:51:91:94:c8:19:1c:
73:6d:51:11:ce:9b:32:a4:25:f0:a7:38:94:de:cf:f0:0c:49:
a2:c3:30:53:ef:dd:5c:87:3a:ea:dc:89:f5:bd:cc:77:37:5c:
1a:42:fe:73:4c:08:c2:47:a0:33:7a:47:20:05:c3:46:18:65:
87:18:ac:e2:f2:63:83:a3:45:b1:9d:97:4b:b0:b8:f5:60:5e:
5e:84:6a:af:0e:42:a1:1c:bb:f9:bc:2a:c1:09:ef:01:31:db:
b3:a6:d4:56:7b:f1:d6:86:70:d1:a9:b4:e2:9c:52:ab:eb:d2:
72:47:a9:b7:fc:84:13:d9:a7:bb:d6:ae:af:0f:32:96:1a:87:
14:f7:0a:e5:9a:81:03:6d:55:02:87:3b:06:3c:b7:95:34:3b:
af:63:3e:58:af:9f:4e:20:84:6c:c6:ea:5a:85:9d:32:88:0f:
7a:d5:e7:52:6f:9c:17:35:d6:2e:f3:52:88:08:44:19:d9:dd:
36:03:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:24:01 2026 by rpki-client