
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937.cer
File: fb47fd58-1b0f-4811-9575-772ff1792937.cer (raw, json)
Hash identifier: qjsPfYPhUyRgQYdehkYzLXv7iSt6a7V7itc6z0PGGqs=
Subject key identifier: 53:CE:D6:E7:21:C3:F1:52:88:CA:A1:CB:BB:AD:91:3E:EE:E4:66:F7
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F9D2B98DB573B39D81955E780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/fb47fd58-1b0f-4811-9575-772ff1792937.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 25 Oct 2026 00:45:12 +0000
Certificate not after: Sat 27 Jan 2029 01:45:12 +0000
Subordinate resources: IP: 23.142.76.0/24
IP: 2602:f5cc::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9d:2b:98:db:57:3b:39:d8:19:55:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 25 00:45:12 2026 GMT
Not After : Jan 27 01:45:12 2029 GMT
Subject: CN=fb47fd58-1b0f-4811-9575-772ff1792937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:df:62:47:12:82:38:9d:b8:37:cf:d5:77:
c1:aa:08:f4:35:62:a4:ed:0b:ed:fe:cf:05:c7:7e:
b9:d6:1e:1d:7e:f2:13:2a:34:89:f3:91:80:5c:7d:
35:7f:c0:f8:27:f1:cf:02:b2:f5:69:62:1c:ba:56:
f4:d9:46:f9:13:c3:02:74:f1:5b:94:ca:cc:f6:44:
99:84:3b:27:7d:a4:b7:75:79:06:41:75:87:f0:1d:
8e:1b:e2:56:80:04:b1:65:af:dd:68:3b:4a:25:8c:
6b:a8:bf:5f:ea:19:62:0b:a8:ef:c1:9f:92:94:40:
a8:a3:d4:38:06:0b:20:80:0c:74:0c:dc:35:75:bd:
47:06:73:d0:f4:d7:14:67:bc:2e:d7:0a:a6:f1:71:
01:bc:13:b4:c3:db:9d:57:b2:fe:50:71:df:dc:37:
b8:5e:35:68:7d:72:11:88:97:d4:84:26:2a:58:68:
ab:5a:0e:a1:a6:d1:7e:09:35:51:13:99:e8:4c:4a:
a8:5b:8c:33:1e:b4:d0:27:29:27:a3:b4:bf:1a:9a:
d8:87:fa:6e:6e:5d:c4:8c:53:55:fc:86:7b:8f:59:
9f:2d:0d:16:f6:86:b8:54:20:61:c1:87:ad:57:06:
ee:df:be:49:e5:fe:78:f4:81:f8:a2:db:fd:22:49:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:D6:E7:21:C3:F1:52:88:CA:A1:CB:BB:AD:91:3E:EE:E4:66:F7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/fb47fd58-1b0f-4811-9575-772ff1792937.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.76.0/24
IPv6:
2602:f5cc::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4f:c3:a8:d7:da:79:3b:cf:42:40:c9:59:74:af:47:96:4f:
6c:c2:03:c7:9f:dc:3a:71:95:9b:2f:10:1f:d2:7c:45:09:94:
49:59:f4:35:b0:7f:98:a8:b7:a3:e3:91:17:3f:35:a1:40:35:
37:20:fa:77:80:8e:45:8c:5b:d0:e1:04:fa:9b:3b:37:fa:e5:
50:47:cd:93:56:df:60:d7:9d:cc:33:ec:37:c9:57:ef:5e:8c:
70:5d:0f:0c:37:4f:aa:15:c8:1a:9d:ac:96:5a:10:06:88:28:
30:dd:fa:b9:4c:bf:6c:ec:8a:72:ed:c0:fa:92:4e:12:d4:86:
23:e2:55:63:ea:ea:d6:d1:33:c5:94:b8:b7:b6:19:46:b6:5a:
d3:32:6e:87:72:f2:1f:a5:3a:88:04:f6:23:e2:7b:00:5d:9a:
df:6f:5f:56:eb:45:ea:f0:20:45:c9:38:f2:25:ad:b2:33:f7:
f9:68:7b:af:bc:bc:ee:09:06:38:3c:ee:62:07:3d:f0:66:b5:
9d:b9:64:df:08:ff:63:15:95:06:db:94:da:ac:12:48:01:44:
17:62:1f:01:3a:44:06:e4:3e:8b:75:79:ee:19:b0:2c:0c:7d:
ff:47:2e:f3:f2:83:07:f3:4a:a0:93:87:92:05:da:6b:94:35:
05:28:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:34:57 2026 by rpki-client