
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149.cer
File: 2dadabff-708e-4d25-8157-f0b718476149.cer (raw, json)
Hash identifier: DgJEbMZzWhynxbXkX0Uq9HIz/sYRXNhL5MD2KPdJREw=
Subject key identifier: 64:27:AB:98:A9:38:A5:00:D8:9B:41:42:4F:03:AF:10:3A:69:53:62
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F43285849FF6D84CBF751C5AA91E9FDC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/2dadabff-708e-4d25-8157-f0b718476149.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 28 May 2025 00:45:37 +0000
Certificate not after: Tue 31 Aug 2027 00:45:37 +0000
Subordinate resources: AS: 10780
AS: 397415
IP: 69.64.16.0/21
IP: 192.30.188.0/23
IP: 208.88.152.0/21
IP: 2620:85:4000::/48
IP: 2620:125:9000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ff:6d:84:cb:f7:51:c5:aa:91:e9:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: May 28 00:45:37 2025 GMT
Not After : Aug 31 00:45:37 2027 GMT
Subject: CN=2dadabff-708e-4d25-8157-f0b718476149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:4c:fb:b3:1f:47:91:c1:8f:5b:cb:8f:f6:
18:6b:d5:3f:b7:45:28:7d:40:8b:3a:d8:28:cb:dc:
cc:ec:5f:d7:d3:6d:57:83:2f:a9:f1:b4:67:62:6f:
6b:47:7a:97:fa:b5:c0:e9:42:47:63:e6:ab:11:3a:
a3:24:48:e9:70:aa:23:dd:e5:bb:ab:dd:29:f9:95:
56:83:fd:b4:e8:e8:ba:f3:12:0a:38:fc:33:fb:fa:
c5:74:91:85:4a:7f:98:04:2f:4a:72:4e:53:9b:10:
0a:6f:c8:0b:f9:f7:6e:48:40:fc:a0:9a:9a:0a:cd:
bf:e8:eb:6a:6a:9c:ee:c7:44:ec:cd:19:89:60:d7:
83:88:a1:73:2d:82:b6:8f:c5:2e:6e:ad:9b:1a:f9:
20:1d:6f:af:c3:06:fe:e6:29:44:72:2e:f2:85:6e:
85:b3:dc:3d:d2:5a:4f:14:5f:e7:db:bd:1a:cd:a7:
44:86:3e:5b:8b:32:47:cf:76:58:e3:cf:94:d5:55:
61:ad:03:c0:f2:a2:47:f9:13:8f:70:2a:cf:3f:10:
e1:7b:ad:f3:7d:0f:7c:f2:1e:db:75:ec:e7:34:24:
a2:91:74:35:a4:38:be:a3:eb:59:5b:3f:28:f2:0c:
ad:00:81:88:29:27:f6:84:88:52:b9:aa:b1:40:30:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:AB:98:A9:38:A5:00:D8:9B:41:42:4F:03:AF:10:3A:69:53:62
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2dadabff-708e-4d25-8157-f0b718476149/2dadabff-708e-4d25-8157-f0b718476149.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.16.0/21
192.30.188.0/23
208.88.152.0/21
IPv6:
2620:85:4000::/48
2620:125:9000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10780
397415
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:8d:41:d0:48:93:36:9b:1c:be:37:d0:43:2b:af:3c:be:40:
a6:2b:a5:3e:23:9f:f3:f8:fc:69:ff:0c:d4:09:f7:3f:a8:94:
81:e6:fe:9f:07:18:a5:e4:68:43:b2:e1:70:a0:20:72:a1:6b:
c5:00:ea:1b:39:cb:51:95:7e:ba:ca:92:22:73:58:6a:37:cc:
be:42:a6:6d:12:c7:e2:b7:b4:4f:66:0d:03:44:2d:ef:0a:3c:
1a:3d:4e:f5:a9:54:00:0f:1d:b7:63:96:68:7c:a8:f7:b7:f7:
a0:33:e9:64:5e:aa:69:70:b0:0a:15:cf:bf:77:f6:bd:b7:aa:
57:30:68:80:5d:1d:51:62:1c:b0:64:da:67:80:6b:78:68:ef:
c9:ef:b7:18:a7:c6:14:0d:79:00:b0:08:d4:06:1f:a6:f1:65:
18:cf:ad:10:97:42:3f:94:df:2a:00:06:e3:88:4c:20:e7:a0:
3e:77:43:e1:62:a9:31:3c:4a:56:62:06:6c:c1:e2:b4:75:54:
2e:e3:86:b8:05:0b:18:e1:4c:b7:12:22:37:d4:3d:61:28:ad:
ba:6e:f4:c0:da:ae:d8:fe:b9:76:d3:28:29:ed:c6:ca:51:96:
a8:9e:63:67:5e:12:e5:57:03:94:13:e5:ff:bc:66:0a:79:e1:
6c:7d:77:26
-----BEGIN CERTIFICATE-----
MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEn/bYTL91HFqpHp/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk
MmRhZGFiZmYtNzA4ZS00ZDI1LTgxNTctZjBiNzE4NDc2MTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTFM+7MfR5HBj1vLj/YYa9U/t0UofUCLOtgo
y9zM7F/X021Xgy+p8bRnYm9rR3qX+rXA6UJHY+arETqjJEjpcKoj3eW7q90p+ZVW
g/206Oi68xIKOPwz+/rFdJGFSn+YBC9Kck5TmxAKb8gL+fduSED8oJqaCs2/6Otq
apzux0TszRmJYNeDiKFzLYK2j8Uubq2bGvkgHW+vwwb+5ilEci7yhW6Fs9w90lpP
FF/n270azadEhj5bizJHz3ZY48+U1VVhrQPA8qJH+ROPcCrPPxDhe63zfQ988h7b
deznNCSikXQ1pDi+o+tZWz8o8gytAIGIKSf2hIhSuaqxQDCbMQIDAQABo4IERDCC
BEAwHQYDVR0OBBYEFGQnq5ipOKUA2JtBQk8DrxA6aVNiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y
ZGFkYWJmZi03MDhlLTRkMjUtODE1Ny1mMGI3MTg0NzYxNDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJkYWRhYmZmLTcwOGUtNGQyNS04
MTU3LWYwYjcxODQ3NjE0OS8yZGFkYWJmZi03MDhlLTRkMjUtODE1Ny1mMGI3MTg0
NzYxNDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwRAYIKwYBBQUH
AQcBAf8ENTAzMBgEAgABMBIDBANFQBADBAHAHrwDBAPQWJgwFwQCAAIwEQMHACYg
AIVAAAMGACYgASWQMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiocAgMGEGcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV41B0EiTNpscvjfQQyuvPL5ApiulPiOf8/j8af8M1An3P6iUgeb+nwcY
peRoQ7LhcKAgcqFrxQDqGznLUZV+usqSInNYajfMvkKmbRLH4re0T2YNA0Qt7wo8
Gj1O9alUAA8dt2OWaHyo97f3oDPpZF6qaXCwChXPv3f2vbeqVzBogF0dUWIcsGTa
Z4BreGjvye+3GKfGFA15ALAI1AYfpvFlGM+tEJdCP5TfKgAG44hMIOegPndD4WKp
MTxKVmIGbMHitHVULuOGuAULGOFMtxIiN9Q9YSitum70wNqu2P65dtMoKe3GylGW
qJ5jZ14S5VcDlBPl/7xmCnnhbH13Jg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:26:02 2025 by rpki-client