
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer
File: f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer (raw, json)
Hash identifier: 03kaJiPECQG5JEU7axDUXYuWvCjyp/+FFJZz8ppLFFg=
Subject key identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584CFB15428B30E26B9600FE8B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 25 Feb 2026 13:45:22 +0000
Certificate not after: Tue 30 May 2028 12:45:22 +0000
Subordinate resources: AS: 393256
IP: 204.124.152.0/22
IP: 2606:fec0::/32
IP: 2620:c3:4000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fb:15:42:8b:30:e2:6b:96:00:fe:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 25 13:45:22 2026 GMT
Not After : May 30 12:45:22 2028 GMT
Subject: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:d9:5e:2f:5d:29:63:27:6f:98:3f:2f:c4:
e9:ad:d4:62:91:98:0c:07:34:ff:39:e1:40:b7:2a:
96:cd:f0:7c:56:2b:72:b7:57:24:eb:55:b2:9a:69:
a1:86:fc:b0:4a:30:3a:99:c3:be:1d:ca:62:0a:3f:
cf:31:e6:50:85:f5:34:9f:79:6e:bd:a7:01:f6:91:
68:6d:d1:02:21:10:2d:10:26:27:9b:ac:a0:99:7c:
61:da:8c:62:39:ba:05:ad:b0:be:f7:51:b8:b0:48:
b8:2a:86:cb:f8:74:55:aa:8c:d4:87:69:95:4e:4a:
32:7f:b8:46:dc:eb:41:55:ab:51:06:ce:6f:90:1e:
91:37:25:3c:12:87:fd:19:d4:51:af:2f:02:a3:bb:
88:a0:34:75:74:85:da:52:67:6e:3f:31:6b:8d:3b:
1a:1c:de:e0:f1:a8:1d:9d:be:3d:41:03:9f:fd:19:
c4:1e:0f:a1:54:7e:c2:e4:a9:d2:e6:08:27:55:8b:
d6:d1:35:d0:45:2e:b9:87:ad:8f:56:44:09:4c:ba:
42:b8:d7:6d:42:7a:c0:b6:1e:7a:b2:cd:71:35:7e:
eb:d5:1f:09:d9:ce:2c:6c:0f:66:d1:8b:8a:a9:f2:
53:aa:73:72:13:40:0d:98:9a:06:fd:6a:33:d4:a6:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.124.152.0/22
IPv6:
2606:fec0::/32
2620:c3:4000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393256
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:f2:de:91:e0:8b:50:86:76:81:5c:d7:f6:ef:bd:cc:c0:c4:
c1:58:d2:2b:ae:9a:b5:5b:17:3d:d1:66:e6:0e:7a:ec:80:61:
66:b0:66:09:39:4f:e6:dd:80:b0:d4:97:67:ff:76:fa:5c:4e:
b3:14:35:b5:52:48:1d:e1:b6:d7:38:ec:44:43:00:d5:98:97:
dc:82:c4:ec:cf:20:d4:78:fc:74:4f:65:59:41:4c:f8:b6:d2:
cd:07:56:50:2f:11:18:9e:a5:1c:9a:4c:93:d0:cd:9d:63:7b:
13:5e:3a:7e:09:89:1e:71:0c:0d:c0:50:56:9b:68:55:fe:d0:
ae:bf:3f:a5:97:31:d5:32:63:e2:32:39:b5:77:c7:65:7e:01:
64:15:c0:45:4e:5b:9d:45:24:72:92:dd:cb:4e:ec:24:74:bd:
ac:53:2f:53:0d:dc:06:02:5a:a4:2d:f5:8d:9a:35:44:9e:f5:
d2:a3:3d:8d:0e:c1:6d:fe:9d:c9:87:f1:6f:10:1e:ca:8f:22:
e7:e6:21:74:ab:d5:e1:b7:f9:65:45:be:90:96:5a:e2:bb:65:
ab:c1:38:ab:27:03:e1:c8:b4:85:e6:a4:28:a6:3a:e5:4d:9a:
15:dd:12:e3:2b:62:86:4e:42:10:b6:24:8b:af:b7:80:8e:6b:
af:d7:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:37 2026 by rpki-client