
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer
File: d88eebee-785b-4505-a5a1-35be5246bc78.cer (raw, json)
Hash identifier: 4jw9neF9erEI3wfybcCjeIJj/GqyacJYtX3mBf1I8tE=
Subject key identifier: 60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584D5CAD60EA212C5FFE17AD63C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Apr 2026 12:45:17 +0000
Certificate not after: Tue 04 Jul 2028 12:45:17 +0000
Subordinate resources: IP: 204.130.133.0/24
IP: 2602:fab7::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5c:ad:60:ea:21:2c:5f:fe:17:ad:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Apr 1 12:45:17 2026 GMT
Not After : Jul 4 12:45:17 2028 GMT
Subject: CN=d88eebee-785b-4505-a5a1-35be5246bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:54:1c:f3:d1:22:81:64:aa:d1:67:61:fe:
a2:b7:50:1c:62:ec:5d:60:2d:f0:b6:be:1d:1e:7d:
0a:0f:c8:bb:c8:c2:55:95:4b:0a:1f:fa:e5:fa:a1:
1d:50:32:f7:31:b2:09:32:42:59:90:7e:42:99:4a:
74:26:a8:cc:d1:3f:5a:b5:37:6f:11:2b:00:82:58:
b6:05:5b:3d:b6:9b:64:30:fb:b0:2a:ee:76:83:01:
96:7d:bf:14:43:05:8d:67:fa:96:75:10:44:a4:a1:
d9:bc:08:db:83:c0:be:39:83:07:d1:d9:0f:7d:d0:
b5:36:d3:11:e3:e2:88:95:b0:4e:a4:86:e1:e9:f5:
eb:b1:3e:ad:d1:e2:07:c7:d6:c5:11:39:87:b7:ba:
91:b4:35:43:ae:03:10:99:19:52:29:76:2f:6e:ee:
1b:e7:e7:1e:cc:1b:13:b7:0f:13:7d:30:50:57:52:
eb:94:82:6d:3f:62:f6:75:b1:b6:21:a0:a7:5d:9e:
03:d8:a2:f8:65:d7:98:11:7d:28:6a:35:a8:e7:9e:
f8:cd:85:04:45:80:eb:b1:4f:c4:59:bb:06:49:8f:
66:16:82:5c:6d:ef:c2:c7:7c:c6:16:3e:a3:30:f9:
55:22:48:e0:03:44:61:9d:62:fa:4e:f6:75:0d:95:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
204.130.133.0/24
IPv6:
2602:fab7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b2:31:28:60:f4:8d:bb:14:7d:6e:28:1d:07:a1:9c:bb:ad:
b8:cd:86:4c:97:36:88:44:1a:8d:b4:79:8e:72:ff:e5:a6:d7:
67:16:a1:99:ad:c4:58:62:86:51:10:9c:db:c5:3c:2f:d5:78:
03:55:af:2f:f8:fb:bd:1e:d0:5d:f7:7c:99:f5:54:86:29:13:
67:5e:3e:2a:44:e1:c2:bb:68:02:27:27:48:86:79:e8:31:70:
fb:2c:e9:f8:07:5a:77:00:34:4d:60:b1:81:6f:2a:31:ae:ca:
4e:f1:20:f8:29:6a:09:f4:9e:f8:26:9f:a9:c0:80:45:23:f7:
53:e9:5a:a5:9b:0d:9e:89:ff:b0:60:1b:ba:81:64:4b:78:4f:
b4:b8:30:54:0d:e6:02:02:5d:70:67:ee:41:af:43:02:c5:9f:
1c:ff:2d:44:f9:d2:fe:a8:12:85:c9:53:89:d8:87:b9:1d:b8:
36:2b:e1:f6:54:6d:47:22:e3:6d:3a:47:47:a8:b4:34:9b:95:
0d:0e:f0:fd:e2:bc:24:08:5f:a1:04:04:d0:2b:08:dc:54:7e:
e5:90:07:fc:fd:cc:fa:b8:26:d9:13:9b:82:92:2d:a6:78:47:
92:c1:be:43:94:17:37:75:2d:41:73:ed:05:72:13:d9:90:47:
00:03:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:44 2026 by rpki-client