
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
File: a1f49b6f-a170-485e-8c07-d518b906c6ae.cer (raw, json)
Hash identifier: y+NJTB8vXW11fbkEWM+l4tRbl18rOdapb4IrX5rLoIs=
Subject key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584A532E0A06A8DFD8768E202340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Jun 2025 00:45:37 +0000
Certificate not after: Thu 30 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 25637
IP: 64.118.0.0/20
IP: 66.228.224.0/19
IP: 69.165.16.0/20
IP: 2607:4800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:53:2e:0a:06:a8:df:d8:76:8e:20:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jun 27 00:45:37 2025 GMT
Not After : Sep 30 00:45:37 2027 GMT
Subject: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:62:90:51:ee:e0:7c:70:2b:80:7f:86:60:25:
e5:ed:d1:11:1b:8a:1a:22:a3:7a:68:4d:79:1d:6b:
37:ed:c9:1e:a3:96:80:e2:b3:78:c9:51:a1:ec:f0:
18:82:26:c2:9f:e4:04:61:db:90:08:9f:e7:e2:d4:
2d:ac:ff:3b:8f:c3:66:d0:9e:df:df:98:0b:fa:2d:
b6:22:21:79:f1:01:49:42:73:c1:f5:25:9e:31:5d:
38:34:50:8f:f1:35:b1:71:cf:bd:44:6c:e2:f7:cb:
49:df:f8:fa:9e:8a:dc:31:c3:36:92:fa:bc:5d:f7:
a1:c2:b4:75:8e:d6:ec:52:5f:4d:09:43:56:4b:80:
87:e7:41:63:c8:38:1a:e4:03:d9:dd:e7:ef:2b:95:
d9:b6:67:d5:02:f3:3a:ad:6f:e7:e6:08:92:50:bb:
0a:e9:71:03:51:48:eb:f7:0f:28:3e:a2:2c:54:1c:
d4:78:de:c2:dc:27:d8:cb:03:ab:d8:2e:e7:d8:06:
05:d7:00:bf:42:48:b9:27:7e:c9:78:0c:14:7f:f0:
f9:5b:cd:ee:63:62:2a:76:60:57:f7:92:fe:e1:44:
a3:50:09:1a:01:23:b9:57:1e:e8:47:b1:9e:95:c6:
44:df:98:17:63:b4:4e:37:b2:96:d3:2c:16:7b:4b:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.118.0.0/20
66.228.224.0/19
69.165.16.0/20
IPv6:
2607:4800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25637
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:1d:eb:3b:be:1e:2b:f4:72:e0:a5:e7:c2:8d:de:d1:9f:a3:
84:85:81:9a:7c:11:86:39:3f:45:3e:27:56:3c:07:27:75:61:
4d:81:d6:0f:f1:33:6a:a8:47:c4:b3:53:84:de:a9:93:9c:fb:
81:a2:0e:b5:32:72:60:65:8b:9a:65:0e:0a:db:a6:7d:ce:89:
a9:9d:1e:a8:6f:f6:9b:c5:d6:d3:72:02:c1:ca:80:19:63:11:
6e:06:6a:e9:13:b9:2e:45:b7:d1:b6:17:a7:79:f9:f7:2d:4c:
7b:e5:ae:fd:31:b8:2d:71:c1:6e:cb:8f:d0:18:8b:30:20:ba:
37:fc:77:0d:67:91:2c:a9:d3:03:49:f9:2e:95:77:e1:a4:89:
12:86:d8:fe:14:07:df:b0:69:8d:3d:1d:7c:d1:32:d0:df:e5:
12:43:95:f7:d8:28:ba:d9:ba:5d:7d:83:d2:8f:85:ef:8c:e2:
d9:30:41:06:cd:f2:16:1a:0a:0b:7e:02:48:58:54:47:dd:ba:
e9:00:e5:63:a1:38:16:ba:8a:e8:dd:e1:18:8d:15:84:2a:91:
50:de:25:41:93:82:3a:81:fc:7b:11:8c:81:8c:46:83:b4:e4:
0d:9f:4d:3f:fa:07:8b:10:81:64:49:2f:04:be:2e:b2:f0:19:
49:9b:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:19:22 2025 by rpki-client