
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef.cer
File: c3f4e155-f08b-44de-9ea6-bd39027398ef.cer (raw, json)
Hash identifier: Gc8PhmKXPKApDaetZ+i3n4GvSRUz/xRj3SKSe6asDzs=
Subject key identifier: DE:E2:66:78:0C:37:EF:F3:F7:CA:E9:D3:68:11:C4:E6:A3:86:F6:3E
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584B998EA0D08FC18535221F0F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/c3f4e155-f08b-44de-9ea6-bd39027398ef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 21 Oct 2025 22:33:45 +0000
Certificate not after: Mon 24 Jan 2028 23:33:45 +0000
Subordinate resources: AS: 400899
IP: 23.148.12.0/24
IP: 2602:f50a::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:8e:a0:d0:8f:c1:85:35:22:1f:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Oct 21 22:33:45 2025 GMT
Not After : Jan 24 23:33:45 2028 GMT
Subject: CN=c3f4e155-f08b-44de-9ea6-bd39027398ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:5b:54:ff:f7:af:81:0c:2f:3a:94:f3:8c:
cd:47:74:fb:7e:e3:18:59:3e:72:fe:87:a3:55:66:
99:9d:c0:59:f0:77:83:46:be:8a:90:ce:ea:ce:0d:
f8:84:14:66:73:0a:69:fa:21:2a:a2:4a:75:b1:51:
8e:d2:68:25:2b:df:3a:5a:c6:fc:2b:74:76:39:9d:
ba:34:9e:da:5c:46:ef:66:a2:63:b2:c3:02:13:ba:
f0:c4:01:23:ff:81:7c:d7:df:0d:67:2f:21:5a:31:
83:d8:05:44:54:2e:bc:b5:15:d4:39:55:31:f4:5e:
a4:33:4f:63:f9:b4:95:a8:1e:b6:7f:2c:f8:7e:e8:
2e:fa:d2:cd:58:3d:14:b0:08:d3:5f:8e:58:9d:ad:
04:0f:87:e3:44:39:cc:ed:a5:6e:52:9e:84:cc:82:
27:95:13:5a:36:b5:ad:9e:d9:dc:82:b2:f9:f4:81:
ca:05:05:90:08:3c:17:a2:f4:b4:77:4c:5f:54:7b:
4c:01:a3:67:68:45:88:7c:e5:3c:55:dd:78:60:8f:
7b:3a:85:2f:c1:e0:82:0b:4e:94:fc:11:a8:ab:fc:
69:62:4b:82:a4:f2:d4:4b:04:84:c0:2b:f3:fe:88:
01:4e:96:1e:08:8e:70:e9:c8:7a:19:ab:dd:aa:4c:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:66:78:0C:37:EF:F3:F7:CA:E9:D3:68:11:C4:E6:A3:86:F6:3E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3f4e155-f08b-44de-9ea6-bd39027398ef/c3f4e155-f08b-44de-9ea6-bd39027398ef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.12.0/24
IPv6:
2602:f50a::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400899
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:1a:62:b5:70:6d:b5:53:03:73:91:1e:88:ad:2f:62:28:d2:
b7:53:d0:2f:67:f1:19:b7:33:f4:b2:d8:d7:11:15:19:8a:25:
26:36:c2:02:db:79:ca:59:fc:4b:85:bb:d2:bd:98:94:6e:e5:
c6:9c:8f:fd:b7:ec:a5:dc:47:d8:81:b7:b0:70:8e:83:ee:c4:
6c:b9:a6:99:bc:5b:f6:30:73:69:4f:34:4a:b4:02:b4:e7:08:
ae:e8:22:f4:4b:d1:86:7d:e9:6b:cf:b0:4f:50:f7:8e:d0:ab:
2f:7e:4a:7b:33:e1:cb:f6:b4:c1:1e:79:33:f9:ae:8f:d3:1c:
7b:e3:4e:73:e3:d4:e6:cb:a0:b8:fb:2c:4a:40:6e:c3:06:13:
ec:c8:7f:34:59:43:c5:7b:f1:46:a0:38:b5:4d:4d:fa:91:ef:
ee:bf:a9:b3:4b:10:72:53:e9:3f:b8:e3:8c:ec:7e:61:d7:4f:
22:5e:62:51:fa:f6:a5:a4:c9:40:fc:6f:99:a1:39:0d:e6:ac:
e1:f2:86:06:a1:fb:19:2f:92:0f:33:b2:95:e4:0d:71:22:7d:
81:23:e7:e6:7d:6c:9f:55:fd:54:e8:1b:6e:2e:5c:e7:0e:3f:
13:fc:20:3d:89:79:4b:aa:23:8d:6d:2b:0f:31:4b:68:8a:23:
45:1a:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:46:51 2025 by rpki-client