
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer
File: ceabafc1-2de6-4194-a43b-862ad745c553.cer (raw, json)
Hash identifier: go30MruY94nr8GUWd2PPSh1ZZEZkeA736WRSirPBrLY=
Subject key identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial: 010D0C9F4328584AFC6C232B8DFC38D5A6AC1000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 26 Aug 2025 15:42:21 +0000
Certificate not after: Wed 04 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 53740
IP: 23.159.32.0/23
IP: 98.142.180.0/24
IP: 149.112.62.0/24
IP: 2602:fe26::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fc:6c:23:2b:8d:fc:38:d5:a6:ac:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Validity
Not Before: Aug 26 15:42:21 2025 GMT
Not After : Aug 4 00:45:34 2027 GMT
Subject: CN=ceabafc1-2de6-4194-a43b-862ad745c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:b4:3f:49:db:7f:2e:e0:32:a9:cf:79:9a:
85:9d:80:4b:5b:0f:a4:e5:eb:02:ab:41:17:24:dd:
ce:6c:b0:72:12:5d:2e:48:c8:04:ef:17:b3:e5:0d:
b7:51:03:17:e1:f0:ab:2d:94:31:7f:67:45:f9:f6:
08:26:a0:4c:c7:68:21:0e:8f:46:3d:f1:fb:f8:69:
2d:9d:71:0f:4a:6e:6f:6c:30:ab:87:f9:64:bc:7d:
ce:22:39:ac:39:35:18:62:c7:61:fd:76:cd:67:03:
97:09:3f:9e:1b:75:e9:67:5c:9c:a8:56:49:39:83:
e9:ca:ab:73:ce:15:7e:85:d2:7a:8d:33:b9:ba:33:
e2:5e:9f:6d:c7:f6:b3:8a:a2:2d:68:96:1c:7c:25:
48:6a:fa:52:6a:a7:39:89:0b:ea:55:d4:e7:b0:18:
8f:99:94:a1:36:9d:1a:a2:78:f4:43:c7:9b:f9:df:
a3:38:ab:9a:59:8a:77:37:4a:5d:84:5d:c2:2e:f1:
29:02:3e:e1:9f:66:15:fd:52:d5:4a:1b:3a:79:81:
dc:2a:89:2c:79:41:13:8e:17:50:96:8f:a8:e8:a7:
00:5f:44:4f:81:49:68:57:07:e3:92:66:e9:27:7c:
fc:b6:b9:0e:31:cb:cf:c9:00:02:4b:2f:79:a8:ff:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
X509v3 Authority Key Identifier:
keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.32.0/23
98.142.180.0/24
149.112.62.0/24
IPv6:
2602:fe26::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
53740
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:c7:e8:f1:35:98:42:f4:66:cf:33:46:1f:47:f5:e3:8c:71:
db:4d:bf:b0:b2:78:22:b1:3f:58:16:91:de:60:64:71:73:45:
7c:ca:5b:c8:c5:34:7b:37:c7:0b:b6:41:8a:fc:fb:78:72:98:
46:79:e5:13:ea:7b:77:68:40:4a:4e:5d:c7:98:63:66:18:7b:
98:bd:a0:69:04:b0:02:b8:fa:fc:71:20:db:12:68:35:ea:92:
0d:89:13:cb:8d:a0:d6:f0:6c:08:6b:72:97:12:b1:14:3a:10:
ad:13:53:e9:07:06:5b:93:7f:2c:d7:7f:45:dd:a8:ba:95:ce:
b2:04:03:7a:20:db:af:10:4a:6c:33:46:0f:69:c3:d4:2e:1e:
64:65:99:3b:9e:20:1f:f9:1c:20:be:32:8c:d1:63:bb:30:27:
53:e0:23:28:8a:1d:40:af:15:9c:04:a1:02:90:b5:63:e7:08:
81:f1:21:95:83:a4:79:56:ff:a5:ac:e1:7f:28:d9:8d:9b:00:
52:a3:f7:d7:b7:94:19:d4:18:ba:85:10:cc:6b:cf:19:1c:47:
04:74:12:8b:31:da:cd:69:8b:17:00:22:bc:1c:5c:51:b5:9f:
14:de:42:9e:79:2e:b6:d0:d5:15:29:1b:a2:8a:8e:76:9f:53:
90:b6:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:33:03 2025 by rpki-client