
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
File: deaf388e-6941-424e-9f96-abe06598e29c.cer (raw, json)
Hash identifier: A1ZAO0J5Hj+k09jAtJrqA+0r7+yNw1Rfr4EeqiHdHxU=
Subject key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F43285849D3617ECF04FFE647A8535640
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 12 May 2025 06:05:50 +0000
Certificate not after: Sun 15 Aug 2027 06:05:50 +0000
Subordinate resources: AS: 401371
IP: 23.138.188.0/24
IP: 2602:f652::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:d3:61:7e:cf:04:ff:e6:47:a8:53:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: May 12 06:05:50 2025 GMT
Not After : Aug 15 06:05:50 2027 GMT
Subject: CN=deaf388e-6941-424e-9f96-abe06598e29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:af:d0:51:47:60:51:2b:29:24:84:85:2c:
ff:6f:23:6f:fe:23:83:f1:ff:10:21:a2:14:b1:0a:
4c:81:9b:76:97:19:b6:e9:05:c4:be:f4:bc:5f:f7:
b2:81:3d:09:44:14:27:a7:27:13:74:74:32:27:78:
63:52:b2:4f:2d:c9:d0:97:d5:17:02:45:ef:a9:3c:
12:bb:86:a3:21:63:b5:bd:b0:2c:85:2e:11:cd:66:
d4:f7:d6:a2:e1:d0:db:fa:42:16:67:9b:e5:ef:16:
c0:5e:d6:33:47:12:4b:31:7b:33:24:9e:d8:11:45:
cb:e2:78:5f:7f:2d:b9:f1:56:0b:70:8b:a9:bf:28:
38:69:93:93:73:b8:0e:a7:d7:72:fc:ae:10:05:9f:
78:0b:bd:a2:4f:eb:45:4c:96:dc:bb:f0:4a:b2:46:
c8:03:2c:ed:81:18:c0:b7:99:de:86:72:4f:03:9d:
dc:a5:cc:05:5a:1d:f4:0d:d0:3f:d0:d9:89:7d:e7:
b4:5e:f8:76:3e:d7:e8:73:6a:88:4a:51:9d:c0:90:
10:f1:5f:1f:4b:53:01:3f:99:fb:21:91:be:34:ea:
4e:9e:d0:e1:c8:8c:83:6c:ef:09:84:eb:3e:7a:b6:
aa:73:e3:6f:42:f2:96:3a:41:29:c0:8d:a5:c7:e9:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.188.0/24
IPv6:
2602:f652::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401371
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a8:8f:f1:32:4a:db:01:5f:5e:4a:c9:dd:69:a8:bd:56:9d:
f3:ee:c4:4d:68:d3:41:d5:98:45:a4:c2:a9:ea:25:02:90:a7:
19:37:be:cd:f2:86:02:26:cc:81:bc:93:14:a7:aa:68:06:66:
47:5a:6e:62:6d:df:87:33:d8:53:71:08:13:08:9e:85:f7:26:
5e:31:48:38:fc:f4:07:aa:13:d8:1b:51:e9:61:c8:c9:87:fe:
5d:ed:f5:5d:e9:58:58:3a:6b:9e:01:00:2f:5e:d2:de:89:2d:
1b:d6:20:35:03:34:74:8c:c2:ad:7d:d2:1b:65:02:42:76:f9:
e0:f1:27:0e:f9:39:73:ff:60:b9:dd:ef:14:74:eb:82:a7:48:
40:f7:80:e4:b1:7a:33:82:10:c7:2e:e6:fd:e7:0f:c2:bf:40:
db:0f:a4:c4:6d:54:78:34:d1:25:f0:72:0f:70:d2:2a:2f:a9:
23:d5:54:6c:4d:2b:86:9a:01:ed:75:c7:66:16:e0:de:70:dd:
b2:db:b8:c3:2e:31:db:7b:7c:8a:11:41:6f:9a:d8:be:ba:a5:
83:f4:98:bc:14:ab:49:2d:72:52:32:ad:21:76:72:8d:7e:b1:
6b:7b:a6:81:d7:3f:90:cb:85:55:8b:9e:5f:a6:3a:9c:d6:69:
ee:da:7e:2f
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnTYX7PBP/mR6hTVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDUxMjA2MDU1MFoXDTI3MDgxNTA2MDU1MFowLzEtMCsGA1UEAxMk
ZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThlMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWv0FFHYFErKSSEhSz/byNv/iOD8f8QIaIU
sQpMgZt2lxm26QXEvvS8X/eygT0JRBQnpycTdHQyJ3hjUrJPLcnQl9UXAkXvqTwS
u4ajIWO1vbAshS4RzWbU99ai4dDb+kIWZ5vl7xbAXtYzRxJLMXszJJ7YEUXL4nhf
fy258VYLcIupvyg4aZOTc7gOp9dy/K4QBZ94C72iT+tFTJbcu/BKskbIAyztgRjA
t5nehnJPA53cpcwFWh30DdA/0NmJfee0Xvh2Ptfoc2qISlGdwJAQ8V8fS1MBP5n7
IZG+NOpOntDhyIyDbO8JhOs+eraqc+NvQvKWOkEpwI2lx+nXdQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFNPMijKn3dLwBSIFYIGKmbn2EsVnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k
ZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RlYWYzODhlLTY5NDEtNDI0ZS05
Zjk2LWFiZTA2NTk4ZTI5Yy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5
OGUyOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXirwwDgQCAAIwCAMGACYC9lIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYf2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSqI/xMkrbAV9eSsndaai9Vp3z
7sRNaNNB1ZhFpMKp6iUCkKcZN77N8oYCJsyBvJMUp6poBmZHWm5ibd+HM9hTcQgT
CJ6F9yZeMUg4/PQHqhPYG1HpYcjJh/5d7fVd6VhYOmueAQAvXtLeiS0b1iA1AzR0
jMKtfdIbZQJCdvng8ScO+Tlz/2C53e8UdOuCp0hA94DksXozghDHLub95w/Cv0Db
D6TEbVR4NNEl8HIPcNIqL6kj1VRsTSuGmgHtdcdmFuDecN2y27jDLjHbe3yKEUFv
mti+uqWD9Ji8FKtJLXJSMq0hdnKNfrFre6aB1z+Qy4VVi55fpjqc1mnu2n4v
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:41:46 2025 by rpki-client