
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/885ba713-10b0-4404-8cbb-66ef16017fa9.cer
File: 885ba713-10b0-4404-8cbb-66ef16017fa9.cer (raw, json)
Hash identifier: QeZ+ogpCgQ6d2Dg5URcV6C8m/93STzrZxA/krv5gFfc=
Subject key identifier: 7D:8A:A6:50:AE:BF:F8:81:68:EB:4C:08:EB:D4:12:74:53:52:9C:88
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584AFA0E280FA1A028CC469FD100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/885ba713-10b0-4404-8cbb-66ef16017fa9/885ba713-10b0-4404-8cbb-66ef16017fa9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/885ba713-10b0-4404-8cbb-66ef16017fa9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 25 Aug 2025 19:21:22 +0000
Certificate not after: Sun 08 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 11658
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fa:0e:28:0f:a1:a0:28:cc:46:9f:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Aug 25 19:21:22 2025 GMT
Not After : Aug 8 00:45:34 2027 GMT
Subject: CN=885ba713-10b0-4404-8cbb-66ef16017fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:e1:22:d5:d5:ca:57:c2:7b:a5:39:ee:2e:
b4:3d:e8:e6:39:07:c2:c5:4d:fa:6d:bd:dd:d4:b1:
a7:cd:4b:0b:4e:aa:04:0e:6c:fb:d8:6d:55:78:c7:
9e:58:75:c8:ad:0c:ac:2f:06:c9:74:8e:1f:b5:d5:
b3:a5:2a:d0:9b:cf:4f:2d:ce:c6:1b:6d:62:f6:3a:
a9:7e:56:1b:19:52:a3:b5:ff:3f:af:d7:7a:36:b6:
da:28:c8:57:42:1c:b7:db:c8:00:63:0a:a2:89:bd:
c4:2d:45:53:9d:d7:06:a3:36:1c:e4:f0:6c:3b:a0:
d0:5e:bb:6d:79:7c:c1:19:d6:cc:27:34:fd:fe:10:
bd:14:31:d2:f4:fb:72:dc:50:a8:58:eb:f1:41:6a:
b0:ce:d9:81:45:85:f0:82:4c:c3:51:ae:ad:8b:2f:
62:e9:5b:43:38:22:60:8e:28:55:9e:1b:a3:cd:cd:
b0:58:bb:bd:fa:10:73:a7:0f:6f:45:cc:55:00:19:
48:b1:cb:8c:29:b3:f1:cb:4b:43:75:43:0c:bd:30:
21:d9:79:3b:9c:be:f3:89:09:d4:a9:11:5c:9f:e0:
2e:08:cc:a2:29:d4:2a:e9:15:e0:23:ec:3e:c2:28:
06:16:2c:17:67:12:d3:84:3d:6f:5f:93:f8:60:01:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:A6:50:AE:BF:F8:81:68:EB:4C:08:EB:D4:12:74:53:52:9C:88
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/885ba713-10b0-4404-8cbb-66ef16017fa9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/885ba713-10b0-4404-8cbb-66ef16017fa9/885ba713-10b0-4404-8cbb-66ef16017fa9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11658
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:77:9c:18:e7:f9:ab:ec:a3:22:2b:82:02:08:b2:48:af:79:
e5:ec:2a:45:2d:0b:d6:6e:5c:07:37:34:51:c9:2d:3f:94:95:
40:b3:c3:af:61:c2:dd:c5:1f:86:93:d4:c2:c5:82:7e:e6:db:
75:d3:88:63:a0:6d:86:95:1e:19:74:cf:14:3a:c3:90:cb:66:
5b:cf:b2:11:1b:cf:3b:15:4a:86:43:6c:d0:1c:e3:66:03:40:
ae:5f:cb:07:a3:32:e1:91:72:c3:87:fb:07:e9:ef:aa:03:93:
1d:a5:5f:b4:81:c4:e6:6e:65:0f:2f:ee:80:a3:c3:25:f5:2a:
3c:2a:7d:52:8c:e4:bf:e3:50:95:29:4b:b2:6a:1e:57:92:44:
05:90:8b:51:ee:9f:66:e0:13:63:6a:1e:19:87:1d:c0:df:35:
d5:04:4d:09:18:a7:dc:71:41:78:13:09:31:61:76:be:69:8a:
34:4c:fe:ad:e0:bf:a5:7d:c1:c1:94:47:6e:3a:f0:c8:e9:03:
ff:c5:9a:4d:db:c6:aa:1f:fb:c9:bb:98:4d:e0:fc:20:54:1b:
bb:83:30:4f:80:c6:4b:c2:b5:fb:dd:f3:c9:b2:6d:b7:3d:a8:
33:7e:59:44:56:e2:a5:8b:9b:58:64:9a:93:51:35:3d:fe:19:
0a:66:e8:79
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEr6DigPoaAozEaf0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MDgyNTE5MjEyMloXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk
ODg1YmE3MTMtMTBiMC00NDA0LThjYmItNjZlZjE2MDE3ZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMDhItXVylfCe6U57i60PejmOQfCxU36bb3d
1LGnzUsLTqoEDmz72G1VeMeeWHXIrQysLwbJdI4ftdWzpSrQm89PLc7GG21i9jqp
flYbGVKjtf8/r9d6NrbaKMhXQhy328gAYwqiib3ELUVTndcGozYc5PBsO6DQXrtt
eXzBGdbMJzT9/hC9FDHS9Pty3FCoWOvxQWqwztmBRYXwgkzDUa6tiy9i6VtDOCJg
jihVnhujzc2wWLu9+hBzpw9vRcxVABlIscuMKbPxy0tDdUMMvTAh2Xk7nL7ziQnU
qRFcn+AuCMyiKdQq6RXgI+w+wigGFiwXZxLThD1vX5P4YAEaWwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFH2KplCuv/iBaOtMCOvUEnRTUpyIMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84
ODViYTcxMy0xMGIwLTQ0MDQtOGNiYi02NmVmMTYwMTdmYTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzg4NWJhNzEzLTEwYjAtNDQwNC04
Y2JiLTY2ZWYxNjAxN2ZhOS84ODViYTcxMy0xMGIwLTQ0MDQtOGNiYi02NmVmMTYw
MTdmYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICLYowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD3ecGOf5q+yjIiuCAgiySK955ewq
RS0L1m5cBzc0UcktP5SVQLPDr2HC3cUfhpPUwsWCfubbddOIY6BthpUeGXTPFDrD
kMtmW8+yERvPOxVKhkNs0BzjZgNArl/LB6My4ZFyw4f7B+nvqgOTHaVftIHE5m5l
Dy/ugKPDJfUqPCp9Uozkv+NQlSlLsmoeV5JEBZCLUe6fZuATY2oeGYcdwN811QRN
CRin3HFBeBMJMWF2vmmKNEz+reC/pX3BwZRHbjrwyOkD/8WaTdvGqh/7ybuYTeD8
IFQbu4MwT4DGS8K1+93zybJttz2oM35ZRFbipYubWGSak1E1Pf4ZCmboeQ==
-----END CERTIFICATE-----
Generated at Sat Nov 1 22:43:29 2025 by rpki-client