
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
File: 4bc701e5-cff5-4660-9102-08342e5ad35f.cer (raw, json)
Hash identifier: h9JqFhqAmTa+cEE36xk7voOCXVTFEx1qsfLHLoj3rxE=
Subject key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D83C2F5C340166A36155EAD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 15 Apr 2026 12:45:17 +0000
Certificate not after: Tue 18 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 17120
IP: 2620:0:f0::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:c2:f5:c3:40:16:6a:36:15:5e:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Apr 15 12:45:17 2026 GMT
Not After : Jul 18 12:45:17 2028 GMT
Subject: CN=4bc701e5-cff5-4660-9102-08342e5ad35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:73:90:62:a4:18:30:40:c4:45:2f:a5:68:
a8:37:a1:6e:4e:5c:fb:dd:ac:c1:08:b0:8f:7c:be:
05:56:7e:c3:5f:09:9b:3d:4d:27:65:eb:52:9d:1c:
f7:c1:6e:84:12:e8:d1:94:03:8d:81:2f:f9:f8:66:
7d:be:3b:59:56:38:59:a0:03:d9:de:db:b4:39:87:
5f:6f:56:ab:5c:ec:a1:45:a6:70:e8:98:10:67:c6:
86:ef:7b:e3:5c:df:e2:8c:c2:f7:7a:ae:ea:96:20:
7e:db:d8:43:08:3d:5b:a0:97:e2:11:f9:e0:b0:1c:
f8:64:56:93:e2:28:f1:32:67:23:32:f8:6c:52:96:
0d:9c:2d:b3:5e:ef:da:53:8b:dc:30:d0:54:97:5f:
e7:55:dd:8a:83:fa:83:fc:ff:09:49:a4:2e:f1:6a:
f4:18:53:1b:5d:a1:46:c7:4e:58:1f:65:01:b6:03:
cb:42:9d:47:cf:67:b3:55:d5:07:6c:81:98:6e:b8:
fd:e3:ef:50:23:a2:23:46:82:f7:46:4b:65:49:af:
8f:98:d7:99:4c:08:f3:10:ee:9f:2f:1e:30:57:39:
d3:4f:d4:b9:c7:52:64:22:d6:65:dd:76:fb:ce:57:
80:ec:4b:51:f2:fc:c1:12:e7:24:2b:21:72:16:65:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:f0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17120
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ee:d1:47:4c:d4:ec:5f:fd:b8:fc:10:f8:25:00:0e:62:0f:
57:00:37:80:32:05:d9:14:2a:30:ac:09:ed:d5:46:28:4b:ac:
ba:a2:f6:a0:b9:d2:73:38:1e:0d:de:82:8f:a5:9f:d0:76:c9:
80:a8:28:5b:30:11:69:58:ce:67:7c:49:04:49:57:05:eb:e7:
fd:31:a0:15:98:4d:f1:fa:5c:ee:bd:3b:7b:11:97:43:bb:96:
8b:81:50:53:81:2c:d7:49:0c:23:5f:0f:2b:2d:c3:d6:fa:ee:
65:60:61:95:79:da:e9:4a:72:66:b3:c4:ec:fa:6c:ce:aa:0a:
9e:05:81:df:cb:4a:16:d3:e3:f8:c6:2b:fb:3a:1f:9b:9d:7e:
d2:ea:f9:51:3c:66:59:8f:8b:12:ae:54:8c:a9:66:52:c8:df:
03:f7:9c:08:46:ae:0d:39:33:2b:cb:0e:0a:36:a2:41:e9:bc:
0c:a2:40:ab:e9:bf:89:f8:cc:0b:6a:4c:b5:65:1d:9f:31:70:
74:90:9e:57:d8:79:4d:81:e9:eb:45:e2:42:27:74:82:07:11:
9c:c7:72:38:8b:4d:99:37:8c:cd:86:1c:3d:d6:4d:48:6f:9b:
16:7a:3d:7a:02:30:33:48:b3:34:5b:84:59:aa:c3:8a:50:95:
ef:55:93:26
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE2DwvXDQBZqNhVerYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI2MDQxNTEyNDUxN1oXDTI4MDcxODEyNDUxN1owLzEtMCsGA1UEAxMk
NGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFkMzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0tzkGKkGDBAxEUvpWioN6FuTlz73azBCLCP
fL4FVn7DXwmbPU0nZetSnRz3wW6EEujRlAONgS/5+GZ9vjtZVjhZoAPZ3tu0OYdf
b1arXOyhRaZw6JgQZ8aG73vjXN/ijML3eq7qliB+29hDCD1boJfiEfngsBz4ZFaT
4ijxMmcjMvhsUpYNnC2zXu/aU4vcMNBUl1/nVd2Kg/qD/P8JSaQu8Wr0GFMbXaFG
x05YH2UBtgPLQp1Hz2ezVdUHbIGYbrj94+9QI6IjRoL3RktlSa+PmNeZTAjzEO6f
Lx4wVznTT9S5x1JkItZl3Xb7zleA7EtR8vzBEuckKyFyFmVCNQIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFGJkU365VriJVyxE1EGiH/peAbu2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80
YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRiYzcwMWU1LWNmZjUtNDY2MC05
MTAyLTA4MzQyZTVhZDM1Zi80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1
YWQzNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIAAAAPAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICQuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAD+7RR0zU7F/9uPwQ+CUADmIPVwA3gDIF2RQqMKwJ7dVG
KEusuqL2oLnSczgeDd6Cj6Wf0HbJgKgoWzARaVjOZ3xJBElXBevn/TGgFZhN8fpc
7r07exGXQ7uWi4FQU4Es10kMI18PKy3D1vruZWBhlXna6UpyZrPE7PpszqoKngWB
38tKFtPj+MYr+zofm51+0ur5UTxmWY+LEq5UjKlmUsjfA/ecCEauDTkzK8sOCjai
Qem8DKJAq+m/ifjMC2pMtWUdnzFwdJCeV9h5TYHp60XiQid0ggcRnMdyOItNmTeM
zYYcPdZNSG+bFno9egIwM0izNFuEWarDilCV71WTJg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:50:24 2026 by rpki-client