
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
File: 0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer (raw, json)
Hash identifier: UdiNQWNarQnYXsqQ6M3XbdXdwGpvQYjAVVtK4DLlN4o=
Subject key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584CE1F51A88455B932EC3A53780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Feb 2026 13:45:22 +0000
Certificate not after: Sun 21 May 2028 12:45:22 +0000
Subordinate resources: AS: 397181
IP: 23.128.160.0/24
IP: 142.249.0.0/22
IP: 206.168.174.0/23
IP: 2604:c840::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e1:f5:1a:88:45:5b:93:2e:c3:a5:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Feb 16 13:45:22 2026 GMT
Not After : May 21 12:45:22 2028 GMT
Subject: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:0a:f4:9e:dd:9d:e2:6d:1c:a9:2c:62:ed:
77:02:29:36:92:55:c5:67:86:b4:f1:6d:fd:5e:fb:
fc:fd:0d:a2:28:68:cc:17:79:56:26:bf:e7:48:92:
a0:1f:38:88:c5:f4:2c:a0:b0:11:5b:d1:7e:c7:bf:
d3:6b:07:b4:61:0a:91:6a:0d:0a:40:fa:ae:ac:e9:
bf:0b:e1:b3:66:4c:44:93:15:ee:c6:00:cf:d5:71:
61:6c:87:f2:23:1e:04:b1:c0:5b:d6:ba:c9:44:cf:
4a:40:66:2d:d4:34:9d:5b:10:93:4d:99:1a:17:b6:
56:20:12:83:13:1a:f6:f7:24:91:79:eb:c6:50:78:
56:39:ad:6c:93:92:44:ba:12:ab:8d:81:d9:29:10:
0f:1e:f4:97:31:9f:f6:ef:44:aa:0b:a9:c9:73:b0:
3a:4a:17:c7:ac:7d:81:78:53:69:08:67:dd:15:fd:
93:c6:37:6e:b1:fb:ed:b5:dd:3a:30:45:9b:fc:0b:
8a:81:58:d2:33:3a:09:68:5e:1d:2b:d6:a7:cc:16:
08:26:7f:3b:95:c9:0b:2d:eb:b9:27:61:76:02:79:
0a:a3:f1:6e:b7:01:37:ea:74:39:e1:7b:6f:f6:38:
22:7e:a9:4c:8e:06:7f:1f:19:72:fe:7b:56:56:0f:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.160.0/24
142.249.0.0/22
206.168.174.0/23
IPv6:
2604:c840::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397181
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ff:b6:31:d1:97:0c:05:4e:a1:ee:98:0e:ba:63:5c:85:1a:
76:30:24:e5:9f:01:3c:92:60:1f:7f:c5:0c:eb:7a:e9:69:07:
4b:29:8b:43:0f:a3:a8:e9:68:b6:97:fa:74:a5:9a:c8:45:70:
28:28:4c:7c:a1:c5:34:b4:df:f4:d8:3a:36:39:f7:be:e6:d9:
e7:93:61:9a:bd:67:6d:cd:bc:d7:fc:74:7a:30:db:a1:ad:01:
98:a0:68:33:34:da:58:de:0f:e4:a4:a4:b8:92:f9:3d:de:50:
3c:37:0c:46:e8:4b:55:a2:47:09:8f:41:78:91:8c:2c:32:f2:
60:fa:04:70:f9:d2:99:c9:06:7e:7e:66:e9:38:99:fd:83:5b:
7d:98:21:a6:9a:98:a0:bd:ca:68:44:17:af:1e:79:48:f4:f3:
ca:1e:88:b7:d2:56:68:53:2e:23:68:6a:e5:ff:b5:17:16:9f:
9e:ea:88:9a:8a:6f:e1:18:6e:f0:be:84:2a:67:a3:43:d4:01:
ed:1e:19:0e:96:5d:63:f3:0d:a4:e1:a6:7b:43:b0:07:77:c2:
41:a3:dc:71:19:de:11:24:15:e4:03:3a:c8:5f:40:bc:90:43:
b4:f9:01:33:fd:24:e0:4d:d1:5b:18:cf:98:98:47:07:5e:25:
09:c0:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:56 2026 by rpki-client