
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
File: 324596f5-1cf7-4d92-9c68-ecfb27205d68.cer (raw, json)
Hash identifier: u3d070AEv3rufg6eYIpotLH+9+8FGkWQAh0vNRXDM1U=
Subject key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F43285849E382A8B622FD65F3E9FE66A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 18 May 2025 00:45:34 +0000
Certificate not after: Sat 21 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 400115
IP: 23.130.152.0/23
IP: 2606:9b40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:e3:82:a8:b6:22:fd:65:f3:e9:fe:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: May 18 00:45:34 2025 GMT
Not After : Aug 21 00:45:34 2027 GMT
Subject: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:b6:6c:71:8a:fa:65:10:d7:8c:5a:97:23:
5e:9e:b3:fc:67:1f:74:1e:3f:28:25:9d:8d:9e:55:
79:af:ef:49:b3:e1:40:1f:86:4d:01:97:4e:40:db:
a4:5a:31:85:76:b1:2e:bc:c1:bb:94:78:cf:a2:8c:
a8:09:d0:0d:60:b8:9c:4b:70:f1:5b:fa:dd:af:05:
51:18:0c:87:9b:35:37:a4:d6:2a:37:ea:58:18:f2:
ee:15:76:b5:40:69:23:dc:96:ee:14:26:a6:6f:a2:
be:d5:ff:9d:71:81:87:99:0d:8e:71:e9:b1:ca:67:
76:b0:56:75:5d:84:1d:7e:7d:dd:9e:8c:04:15:d1:
e4:03:49:00:e8:a5:92:9e:28:6f:5e:c9:bc:79:a6:
89:07:2a:b0:ae:12:3e:3e:29:97:d3:bc:ff:4e:5d:
76:51:c4:ea:2c:ac:ed:d5:e2:11:72:2a:4c:f2:fb:
51:a7:30:79:a8:02:ae:5d:ab:26:b2:aa:41:4e:5f:
bd:14:1b:0e:63:d1:b6:6f:e8:be:ae:6d:22:b0:07:
ac:49:8c:c7:b3:af:85:b0:6a:a9:87:5d:25:42:bf:
83:9d:43:55:99:63:40:4d:47:92:22:90:25:3a:0a:
12:46:4e:b9:b8:02:d6:68:86:a2:6d:9b:0a:28:2c:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.152.0/23
IPv6:
2606:9b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400115
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:59:62:28:60:1d:b6:6a:b4:04:46:4f:65:35:28:55:28:39:
a2:ff:24:1b:0b:95:b5:76:b8:63:ac:5e:ce:b3:5f:e4:24:98:
63:26:03:7c:1d:73:27:77:4b:7e:90:c4:91:75:4f:32:ea:c4:
50:e6:89:77:34:27:af:9a:ab:7b:e0:43:a9:51:20:3d:b9:6f:
f3:08:06:c5:33:08:77:be:e1:bb:14:ac:d9:e5:64:61:86:37:
53:92:aa:2a:98:49:00:0d:4a:07:46:05:8b:ec:e9:4f:20:b8:
8d:41:ba:c8:aa:9c:d5:c7:80:0f:b9:71:39:df:d8:20:23:66:
ef:1f:7a:83:be:74:d2:2e:7e:69:0d:f2:91:e7:e9:84:41:56:
97:c2:7c:c9:38:8e:02:a5:76:90:20:bb:6a:c0:5f:6e:72:b3:
7e:2e:e2:a1:5c:39:37:9e:c2:7a:af:60:6d:5c:a3:84:27:5b:
a2:4b:6c:33:6d:40:aa:b4:b3:4f:44:20:65:5f:d5:a5:61:87:
29:e4:2f:4d:d2:c7:36:07:38:ca:9c:9f:ed:3f:fe:29:fb:d2:
ce:39:19:84:f7:ba:9a:01:34:9c:3b:f6:ec:62:85:a3:72:52:
98:27:dc:60:56:82:a0:da:9a:b0:93:ad:b4:24:93:45:a5:9b:
bd:c6:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:25:04 2025 by rpki-client