
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
File: 78a3d836-1df8-4303-a944-17cd53d7d04e.cer (raw, json)
Hash identifier: 6mIlUsMzzU8Zchk0BrFARk8/vAl4d3rto+ybH+lvUx4=
Subject key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584F2685855EA4E094AE58DA5E60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 12 Sep 2026 12:45:12 +0000
Certificate not after: Fri 15 Dec 2028 13:45:12 +0000
Subordinate resources: AS: 11956
AS: 14307
AS: 20033
AS: 26100
AS: 27629
IP: 149.112.108.0/24
IP: 2001:504:13e::/48
IP: 2601:a000::/20
IP: 2610:20:8000::/35
IP: 2620:2f:c000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:85:85:5e:a4:e0:94:ae:58:da:5e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Sep 12 12:45:12 2026 GMT
Not After : Dec 15 13:45:12 2028 GMT
Subject: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:bc:b7:8d:90:13:8e:fd:2d:c9:f9:6c:c8:
69:9b:10:07:d9:1b:6f:a5:97:df:a4:69:96:44:3b:
fc:2a:99:66:36:bd:a8:2b:ff:21:31:56:8e:31:ac:
1f:63:e7:a8:2b:3a:93:45:d6:4a:51:a3:64:10:2d:
67:38:07:b0:4c:a4:d7:8e:c0:7b:93:0d:31:7d:74:
6c:dc:97:6e:03:1b:46:3c:df:8f:a7:13:b8:2c:d5:
d9:25:9d:c1:d9:88:4e:5a:31:1f:3d:d0:88:bf:7a:
f0:fe:fc:4b:31:a1:8c:93:a3:74:43:44:6e:28:68:
92:17:55:06:25:65:19:5a:c8:fd:10:6d:e5:94:d9:
64:fb:68:d7:eb:ce:55:83:6f:ce:ba:12:6b:82:ce:
8c:c4:e8:68:9a:bc:54:f3:7e:97:ff:20:9d:7c:46:
df:12:1d:eb:4c:cd:59:e7:10:40:0d:5e:d0:4f:20:
eb:c2:02:63:ed:8d:72:54:ea:92:64:5c:73:ff:ff:
b9:a2:fa:77:be:33:52:ab:de:3b:b9:69:38:2d:58:
ab:4c:21:e8:47:7f:8c:5a:f4:b3:aa:f6:94:bc:f3:
ac:3e:7d:54:a0:68:1d:1a:ea:a4:6c:a3:5d:0b:a8:
91:a8:af:56:14:6b:15:42:5f:37:40:f3:bf:d6:9d:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.108.0/24
IPv6:
2001:504:13e::/48
2601:a000::/20
2610:20:8000::/35
2620:2f:c000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11956
14307
20033
26100
27629
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:40:22:58:75:e2:ff:04:c4:dc:80:7e:e6:53:18:0d:fc:12:
41:a3:98:4d:89:1a:8c:8d:cf:d6:ce:7d:fe:8f:dc:e7:52:3f:
99:e5:86:08:5d:55:a6:94:50:22:31:ce:43:a5:27:6d:8c:6c:
4a:b8:1b:5f:dd:ed:4b:18:ef:bc:93:be:0b:a7:85:d2:60:4c:
3d:29:23:ff:ed:7a:2f:81:97:a4:6c:b7:36:da:b1:3b:b1:8c:
5a:25:2e:9b:b3:ab:20:f8:d2:3f:ce:ac:7b:3b:d3:01:29:ef:
92:3a:02:78:8b:fd:97:0a:67:b9:6c:e1:b1:99:6f:9a:d4:80:
12:0e:49:71:3c:ca:36:9f:00:7d:88:47:01:19:65:6c:71:93:
b5:f1:73:da:14:64:b9:f9:ec:51:fb:1e:dc:1b:62:2f:21:5a:
b2:3a:0c:2c:47:31:b3:ee:f8:4b:c1:f3:a6:11:16:c4:c4:38:
43:61:aa:fa:39:2e:5b:45:ef:8e:c8:25:5c:79:0a:aa:e6:9e:
e4:35:f7:9f:60:65:c4:99:2c:38:bf:21:cd:77:cd:03:90:5f:
50:75:0d:d8:09:6d:ed:d7:85:16:5e:29:51:d2:08:e9:54:ba:
59:18:1c:94:d6:6d:d0:65:f6:9c:ca:f6:bc:41:90:7c:ab:b3:
d5:29:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:00:42 2026 by rpki-client