
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.cer
File: 72f18f4e-8c35-4c51-b181-8ea94f8ca59a.cer (raw, json)
Hash identifier: VQ0BuRIFK3KMqwk8JrXYup+89LJQfesO7zQnq6dRAh4=
Subject key identifier: B2:CC:C0:93:71:AC:8B:8B:01:4E:CC:7F:37:6B:D9:C4:F1:A4:43:5C
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A4C8A6936488CF8F6AB6C8A40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 24 Jun 2025 15:41:05 +0000
Certificate not after: Mon 27 Sep 2027 15:41:05 +0000
Subordinate resources: AS: 35843
IP: 24.53.224.0/20
IP: 67.215.128.0/19
IP: 207.210.0.0/18
IP: 2604:1500::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:4c:8a:69:36:48:8c:f8:f6:ab:6c:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 24 15:41:05 2025 GMT
Not After : Sep 27 15:41:05 2027 GMT
Subject: CN=72f18f4e-8c35-4c51-b181-8ea94f8ca59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:54:23:cf:3a:37:a3:87:06:dc:a8:51:7d:
f3:45:9a:d5:da:e2:b3:de:09:41:7d:dd:ba:3b:e7:
f9:fe:7a:a9:4f:7f:7c:72:48:51:82:73:3d:e9:52:
2a:92:49:2b:30:b1:db:7b:52:6b:41:d8:98:e5:83:
f4:12:d3:a9:51:f8:65:a0:05:d2:f4:e8:08:b7:1f:
b3:ef:fb:3f:ba:49:e5:ef:6c:76:64:87:1b:be:a6:
bd:6a:90:21:0e:61:3a:3b:20:97:96:1a:9f:87:ef:
a2:0b:2a:2c:72:4c:3d:b2:44:85:46:66:38:96:0d:
4f:6d:9c:2f:2d:be:4b:ef:f9:1c:65:9c:ee:d8:7d:
9e:4d:56:e3:4d:36:29:23:77:41:c2:a9:0b:95:f1:
6c:50:cd:89:f4:0b:65:26:cb:dd:e3:48:07:0f:02:
ce:75:08:f7:d8:2e:10:16:c9:d5:cc:d8:a2:3c:36:
47:13:77:ea:63:b3:12:e4:69:d6:be:e0:d2:50:3e:
2e:ae:6a:7a:18:be:dd:38:d8:37:59:02:94:24:d7:
83:8f:5a:fb:f2:9b:fe:db:ce:97:32:56:83:e1:03:
c3:16:5a:12:fd:10:0d:d8:b7:0d:70:73:a2:55:04:
02:4b:87:40:77:4e:88:79:54:db:dc:53:33:29:c7:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CC:C0:93:71:AC:8B:8B:01:4E:CC:7F:37:6B:D9:C4:F1:A4:43:5C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/72f18f4e-8c35-4c51-b181-8ea94f8ca59a/72f18f4e-8c35-4c51-b181-8ea94f8ca59a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.224.0/20
67.215.128.0/19
207.210.0.0/18
IPv6:
2604:1500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35843
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:42:9d:6b:24:f0:86:8a:0e:a9:d7:9e:be:7e:1f:21:e1:b8:
ac:e1:01:c0:c2:25:a2:c0:98:b9:05:46:b1:89:76:20:27:dd:
b1:0b:da:22:d2:5f:f4:e6:02:4e:35:e7:80:60:9e:8b:3d:88:
1c:5d:79:64:ab:dc:8d:41:f4:32:42:e8:f0:63:e7:18:62:13:
25:46:e7:67:b5:bc:84:3a:c4:a0:61:67:d2:de:30:5a:96:42:
bb:df:1e:e3:b8:92:f8:9e:f6:c8:6b:42:6f:25:1e:61:b4:bc:
51:7a:7a:de:ca:29:bd:ad:91:3a:c3:bf:21:8e:9f:c1:69:10:
7b:a2:03:c9:6d:69:a6:ed:86:74:19:4b:70:cb:ca:ff:5e:56:
75:82:8b:4f:88:78:3c:d9:bb:45:c9:82:07:22:64:a1:59:b3:
9c:62:9e:2a:77:6b:ff:fb:f8:a5:3b:52:24:7a:08:ec:90:70:
af:df:c0:68:97:4f:0b:73:a4:8f:bf:94:d3:da:d8:bb:f3:2a:
27:d6:2a:15:07:e1:c9:ac:55:4e:41:33:8b:0a:cf:c1:4b:6c:
2f:e0:ec:5a:82:04:3e:10:65:86:5c:67:75:93:b1:b3:7b:8d:
7a:68:c9:d2:16:eb:8f:e9:ed:27:c2:e8:dd:5c:2f:b4:ea:f6:
ff:ed:4a:cf
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEpMimk2SIz49qtsikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDYyNDE1NDEwNVoXDTI3MDkyNzE1NDEwNVowLzEtMCsGA1UEAxMk
NzJmMThmNGUtOGMzNS00YzUxLWIxODEtOGVhOTRmOGNhNTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QBUI886N6OHBtyoUX3zRZrV2uKz3glBfd26
O+f5/nqpT398ckhRgnM96VIqkkkrMLHbe1JrQdiY5YP0EtOpUfhloAXS9OgItx+z
7/s/uknl72x2ZIcbvqa9apAhDmE6OyCXlhqfh++iCyosckw9skSFRmY4lg1PbZwv
Lb5L7/kcZZzu2H2eTVbjTTYpI3dBwqkLlfFsUM2J9AtlJsvd40gHDwLOdQj32C4Q
FsnVzNiiPDZHE3fqY7MS5GnWvuDSUD4urmp6GL7dONg3WQKUJNeDj1r78pv+286X
MlaD4QPDFloS/RAN2LcNcHOiVQQCS4dAd06IeVTb3FMzKcd+/QIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFLLMwJNxrIuLAU7Mfzdr2cTxpENcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83
MmYxOGY0ZS04YzM1LTRjNTEtYjE4MS04ZWE5NGY4Y2E1OWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcyZjE4ZjRlLThjMzUtNGM1MS1i
MTgxLThlYTk0ZjhjYTU5YS83MmYxOGY0ZS04YzM1LTRjNTEtYjE4MS04ZWE5NGY4
Y2E1OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAQYNeADBAVD14ADBAbP0gAwDQQCAAIwBwMFACYE
FQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIwDMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGdCnWsk8IaK
DqnXnr5+HyHhuKzhAcDCJaLAmLkFRrGJdiAn3bEL2iLSX/TmAk4154Bgnos9iBxd
eWSr3I1B9DJC6PBj5xhiEyVG52e1vIQ6xKBhZ9LeMFqWQrvfHuO4kvie9shrQm8l
HmG0vFF6et7KKb2tkTrDvyGOn8FpEHuiA8ltaabthnQZS3DLyv9eVnWCi0+IeDzZ
u0XJggciZKFZs5xinip3a//7+KU7UiR6COyQcK/fwGiXTwtzpI+/lNPa2LvzKifW
KhUH4cmsVU5BM4sKz8FLbC/g7FqCBD4QZYZcZ3WTsbN7jXpoydIW64/p7SfC6N1c
L7Tq9v/tSs8=
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:44:32 2025 by rpki-client