
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer
File: 4d283c56-7cd2-4298-b4c5-c7d261e7bff4.cer (raw, json)
Hash identifier: 4h51s95GmxQzqPZgvhknccNRujzOqVWnaMCxgrc94NU=
Subject key identifier: 10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A35BB8BCFB46EB865B06AFA60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 16 Jun 2025 11:36:29 +0000
Certificate not after: Wed 08 Sep 2027 21:57:51 +0000
Subordinate resources: AS: 401753
IP: 23.140.68.0/24
IP: 2602:f61e::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:35:bb:8b:cf:b4:6e:b8:65:b0:6a:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 16 11:36:29 2025 GMT
Not After : Sep 8 21:57:51 2027 GMT
Subject: CN=4d283c56-7cd2-4298-b4c5-c7d261e7bff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:4c:0d:e1:75:98:53:e9:9f:ca:4b:9a:34:
6b:9c:7f:65:ff:76:cf:19:94:a6:fc:7e:f2:e8:b1:
b9:35:39:29:f9:e2:fd:73:e9:50:a9:96:3c:2d:94:
60:7d:73:73:24:3d:2e:b5:91:36:42:c2:b1:dd:79:
c8:cf:f3:bf:d2:91:07:26:60:1a:f0:4c:80:be:5e:
d3:0b:7e:d0:1b:3c:ae:33:15:26:9d:e2:de:de:53:
9d:e6:f7:1c:21:55:1f:e6:18:1f:61:13:14:88:50:
71:1d:38:8b:e0:2d:3f:e1:eb:a3:12:f9:1b:c7:26:
93:b6:3e:36:eb:36:3f:bc:35:6e:78:4c:98:15:e4:
3d:09:a3:b7:72:e7:80:56:92:a6:93:c8:a2:de:cc:
d9:af:1a:29:d8:60:b4:70:a8:cf:1c:4b:77:91:c9:
e6:82:a6:61:b8:f5:62:63:a5:ff:fb:b5:b9:b4:9b:
9e:32:6c:d6:50:c5:bd:e3:29:f9:1a:5c:65:12:56:
84:26:70:47:2a:5b:29:9b:9b:82:25:b1:b2:cd:57:
17:91:43:98:49:e1:13:ff:14:f2:eb:a3:6f:91:6d:
ee:9e:a7:af:95:31:58:12:11:cf:e3:b7:cb:48:08:
4a:8a:c9:15:e0:0c:2e:13:5e:82:3f:72:b9:26:d8:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:AA:35:67:D9:A3:9A:22:53:61:DB:E7:BF:D5:AD:11:50:30:21
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d283c56-7cd2-4298-b4c5-c7d261e7bff4/4d283c56-7cd2-4298-b4c5-c7d261e7bff4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.68.0/24
IPv6:
2602:f61e::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401753
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:c4:20:17:1e:6d:e8:a1:81:32:b1:66:77:d2:40:7a:c3:f4:
d5:2f:9b:f7:96:75:cc:01:d0:fe:ea:9c:cd:11:66:d0:eb:da:
60:1d:44:09:22:06:69:1d:eb:fe:fe:32:ae:91:12:cf:58:24:
5c:c5:a7:33:58:2d:f6:8b:4c:95:da:9e:8e:bc:7c:24:18:c9:
45:42:11:d0:cb:7d:3b:97:70:28:77:f4:af:8b:c6:78:e6:c6:
89:5c:c0:27:50:52:34:97:20:b2:75:5c:31:ee:d8:3b:e5:6b:
20:df:02:dd:8a:5e:02:cc:02:f5:d6:8d:36:4a:10:47:6e:fa:
23:f0:60:5b:d3:43:2b:27:ff:8d:68:ff:07:b1:e3:15:ef:38:
44:76:c6:7e:11:ec:81:53:38:b7:48:da:6b:60:4b:7f:de:5e:
b7:a2:a4:4b:c5:dd:a2:9b:0f:93:33:86:5e:ea:36:b8:c9:e0:
ca:3d:ac:cc:39:1a:15:c5:d0:23:df:7d:3b:aa:e6:8f:c0:64:
1a:e3:19:73:02:66:a9:dc:7a:da:33:87:36:b1:dd:f9:a3:11:
50:da:35:f0:ca:1d:a7:3f:6e:20:ee:fe:e7:1f:1e:c2:2d:5f:
8b:93:3c:ce:7f:8b:66:15:be:82:c6:0d:11:51:4b:8d:2f:fd:
e8:3c:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:40:56 2025 by rpki-client