
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14.cer
File: 7dda8dca-7b6b-4daf-b2f4-528a74748b14.cer (raw, json)
Hash identifier: 0JFO9NMnJYG1uiXugDMO/BClysF53U65U9rfF1yXpFA=
Subject key identifier: 86:F2:48:AA:33:31:A3:0A:CB:12:1C:83:F3:D9:8B:5F:E6:A0:6F:EE
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584AFAAEFD5DEC2BAD937F053100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/7dda8dca-7b6b-4daf-b2f4-528a74748b14.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 26 Aug 2025 00:45:26 +0000
Certificate not after: Mon 29 Nov 2027 01:45:26 +0000
Subordinate resources: AS: 994
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fa:ae:fd:5d:ec:2b:ad:93:7f:05:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 26 00:45:26 2025 GMT
Not After : Nov 29 01:45:26 2027 GMT
Subject: CN=7dda8dca-7b6b-4daf-b2f4-528a74748b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:02:ed:e2:c0:ce:f1:1f:0f:39:a6:21:03:
79:08:91:d0:b6:1a:96:eb:ec:d8:58:8c:29:15:de:
c9:07:d4:ee:4c:bb:eb:c2:73:81:c0:7a:a8:27:70:
53:2f:16:79:ff:6e:93:ef:d6:0b:7e:72:2b:f1:77:
b4:6b:17:c4:bb:90:b7:ed:8b:74:63:82:3d:d4:ea:
42:58:04:7b:29:15:85:31:de:83:52:35:d7:b7:ea:
2f:d7:a3:89:d4:d4:51:d1:df:0f:49:6f:41:1f:4a:
c8:fd:01:4b:81:79:f9:be:7b:0d:da:e6:a3:ed:77:
ef:e4:a3:17:82:43:65:3e:02:71:78:ba:16:69:ba:
e2:ad:bc:4d:26:c9:69:4c:7f:66:81:50:df:ee:a9:
5d:d5:04:0b:83:4e:6c:3c:0c:35:32:67:db:1c:50:
25:99:cc:1a:2c:34:dc:2a:6c:32:0e:bf:46:28:5d:
b6:03:e0:b5:64:c1:2b:3d:6b:5a:85:9a:d5:42:9f:
ac:de:0f:a5:ce:17:66:1f:7c:31:00:79:b3:6b:f1:
df:eb:ee:b2:eb:68:f0:47:ac:3b:5f:b2:5c:00:f4:
3a:2f:e2:d7:42:6b:1e:21:4e:ac:9a:06:92:be:a7:
a6:92:63:fc:d7:50:c0:19:63:4e:0c:e8:78:c9:0b:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:48:AA:33:31:A3:0A:CB:12:1C:83:F3:D9:8B:5F:E6:A0:6F:EE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7dda8dca-7b6b-4daf-b2f4-528a74748b14/7dda8dca-7b6b-4daf-b2f4-528a74748b14.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
994
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:03:eb:05:b2:39:89:8b:cc:f1:66:d8:81:7b:80:54:07:91:
d5:0d:df:9d:d6:47:b0:d2:66:4e:b4:41:de:03:04:22:48:ea:
46:05:36:d7:ee:fe:e2:e6:23:eb:8e:bf:cb:ce:8a:90:3a:79:
c8:69:c9:79:7c:69:09:54:45:b4:e8:e9:4b:3a:fe:6b:65:e0:
89:e4:a7:70:4a:13:f4:21:0e:80:dd:1d:19:e3:49:ef:4b:5d:
10:07:16:56:44:d6:b5:9c:90:b3:0d:5a:b5:34:51:fe:fe:c2:
ec:9a:12:0f:f2:12:ec:00:f7:4c:2f:1d:00:71:00:d2:a7:59:
d5:e3:99:e7:9c:40:ef:00:5d:fd:f3:ec:5b:38:0b:84:66:be:
d1:26:a8:01:0f:28:83:71:45:e9:2b:89:f3:a9:96:aa:ae:5b:
1b:f4:c7:14:82:a7:c4:ce:92:34:41:1c:d4:36:be:c7:7c:29:
d8:b2:9e:3e:b7:db:48:c5:04:73:5a:26:3f:5a:8f:8a:c0:47:
47:21:c2:ba:2a:b3:46:cf:30:95:3f:62:5a:c3:27:3b:d6:a8:
49:bd:b3:85:6c:95:56:b0:27:ef:19:8b:dc:08:f6:24:84:3a:
fb:05:72:77:fd:2e:2e:07:9f:5a:88:62:c3:71:70:29:5e:bd:
10:bb:e8:16
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEr6rv1d7Cutk38FMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MDgyNjAwNDUyNloXDTI3MTEyOTAxNDUyNlowLzEtMCsGA1UEAxMk
N2RkYThkY2EtN2I2Yi00ZGFmLWIyZjQtNTI4YTc0NzQ4YjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8cC7eLAzvEfDzmmIQN5CJHQthqW6+zYWIwp
Fd7JB9TuTLvrwnOBwHqoJ3BTLxZ5/26T79YLfnIr8Xe0axfEu5C37Yt0Y4I91OpC
WAR7KRWFMd6DUjXXt+ov16OJ1NRR0d8PSW9BH0rI/QFLgXn5vnsN2uaj7Xfv5KMX
gkNlPgJxeLoWabrirbxNJslpTH9mgVDf7qld1QQLg05sPAw1MmfbHFAlmcwaLDTc
KmwyDr9GKF22A+C1ZMErPWtahZrVQp+s3g+lzhdmH3wxAHmza/Hf6+6y62jwR6w7
X7JcAPQ6L+LXQmseIU6smgaSvqemkmP811DAGWNODOh4yQs0qQIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFIbySKozMaMKyxIcg/PZi1/moG/uMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83
ZGRhOGRjYS03YjZiLTRkYWYtYjJmNC01MjhhNzQ3NDhiMTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdkZGE4ZGNhLTdiNmItNGRhZi1i
MmY0LTUyOGE3NDc0OGIxNC83ZGRhOGRjYS03YjZiLTRkYWYtYjJmNC01MjhhNzQ3
NDhiMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICA+IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfwPrBbI5iYvM8WbYgXuAVAeR1Q3f
ndZHsNJmTrRB3gMEIkjqRgU21+7+4uYj646/y86KkDp5yGnJeXxpCVRFtOjpSzr+
a2XgieSncEoT9CEOgN0dGeNJ70tdEAcWVkTWtZyQsw1atTRR/v7C7JoSD/IS7AD3
TC8dAHEA0qdZ1eOZ55xA7wBd/fPsWzgLhGa+0SaoAQ8og3FF6SuJ86mWqq5bG/TH
FIKnxM6SNEEc1Da+x3wp2LKePrfbSMUEc1omP1qPisBHRyHCuiqzRs8wlT9iWsMn
O9aoSb2zhWyVVrAn7xmL3Aj2JIQ6+wVyd/0uLgefWohiw3FwKV69ELvoFg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 00:23:58 2025 by rpki-client