
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.cer
File: 30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.cer (raw, json)
Hash identifier: YLp6IR0JUI5Iyq8Boxp2VnEHtnwfI1e5xqC5UuVnwrA=
Subject key identifier: CD:FF:C0:A8:93:31:A5:A9:F4:61:68:EE:19:F2:43:00:2C:47:03:BD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584B2CEF4D7FF3B924D767C81F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 13 Sep 2025 00:45:26 +0000
Certificate not after: Fri 17 Dec 2027 01:45:26 +0000
Subordinate resources: AS: 398830
IP: 148.59.24.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:2c:ef:4d:7f:f3:b9:24:d7:67:c8:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Sep 13 00:45:26 2025 GMT
Not After : Dec 17 01:45:26 2027 GMT
Subject: CN=30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:d9:43:f7:55:9c:b5:67:7f:e0:4c:ee:74:
99:39:27:54:3e:12:2e:8d:ba:81:67:b0:e0:b9:0e:
20:5f:92:97:52:0f:21:49:66:ee:d6:71:06:5f:08:
19:e5:6a:e4:e7:e2:ef:26:18:87:58:61:50:24:7f:
34:84:a9:4e:4c:a7:66:5f:87:4b:35:c1:b9:39:d5:
34:57:73:bc:d7:b2:1e:6c:77:19:46:1e:fd:5b:c3:
a0:dd:68:6b:39:b6:61:da:62:8e:2d:3b:41:b7:90:
d3:5a:6f:27:48:01:22:83:d9:31:f4:62:12:70:90:
65:b4:44:73:83:54:d7:8b:9d:a4:ba:9b:a2:44:5d:
d5:35:75:c0:05:40:20:fc:69:60:67:51:ae:5f:b4:
1a:e2:bb:94:a8:a7:5b:d6:86:fb:ea:39:e8:77:25:
e7:e6:06:d4:eb:3c:18:4c:03:25:b9:5a:b6:32:56:
90:cc:8c:63:b9:9f:02:2e:4f:14:a9:6a:a6:c2:d9:
f2:38:5a:f7:bc:bb:02:6f:58:3c:a6:9c:1a:25:a1:
c2:fc:11:7e:2a:5e:72:a1:99:2f:48:26:bc:3f:67:
fa:e6:dd:e3:48:2e:cf:ba:d9:67:ad:bc:33:0a:d0:
1f:12:89:86:d6:4c:ae:b1:dc:63:1f:8c:36:2e:75:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:C0:A8:93:31:A5:A9:F4:61:68:EE:19:F2:43:00:2C:47:03:BD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00/30f6e7a8-5ea6-4cc8-811b-f1bde3f9aa00.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.24.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398830
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:16:e2:d2:cf:a7:bb:9c:4d:3d:2b:51:9a:17:52:f8:75:3f:
de:25:85:92:1f:d5:41:84:22:02:d3:8d:68:37:f5:66:54:c9:
b0:f9:be:56:01:41:c8:cf:c6:e2:63:52:cf:4a:69:06:84:29:
44:4d:18:73:43:ae:fc:63:82:e4:ed:4b:2d:c1:b3:30:f7:39:
4f:89:e6:18:a6:46:1f:c5:e9:5b:37:05:48:e6:50:4a:7f:4d:
c0:f9:19:f8:90:35:0e:27:19:ef:94:90:e9:f6:84:c3:77:16:
6f:65:18:59:63:3e:88:b9:8f:fe:15:1f:16:aa:a7:9d:98:26:
d5:25:8e:f9:57:00:39:69:e4:fb:6d:c9:b9:f2:12:3e:05:f1:
3b:a6:4f:05:45:17:26:82:67:88:eb:a0:9c:7c:ed:6a:f2:43:
b1:a5:28:a7:d4:25:8f:09:63:48:13:bc:c8:2f:d2:41:c4:60:
c6:f9:5b:ef:44:b0:7b:76:f9:a3:fb:00:17:69:68:d1:09:f8:
dd:c3:d8:67:01:d9:bf:33:22:4d:3d:0b:36:93:b4:4d:be:86:
f1:87:48:e1:17:84:42:59:de:e4:31:9f:0d:b6:aa:da:9b:c7:
1b:c7:ff:8e:1a:a9:9c:27:71:06:09:38:ce:61:9e:01:5d:f3:
cb:01:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:54:20 2025 by rpki-client