
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423.cer
File: f318b26c-3136-432f-821e-3ca0e6532423.cer (raw, json)
Hash identifier: hUobHwTBWaKCku32MZfvzJZdTN5n8jEvW07AvyI6tW0=
Subject key identifier: C6:9D:D9:6D:2C:F5:46:F1:30:AC:81:80:5D:9A:BE:06:B8:58:E5:2D
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A373762CCC18F146736C853C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/f318b26c-3136-432f-821e-3ca0e6532423.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 17 Jun 2025 00:21:49 +0000
Certificate not after: Mon 20 Sep 2027 00:21:49 +0000
Subordinate resources: AS: 4557
IP: 198.32.224.0/20
IP: 2604:5e80::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:37:37:62:cc:c1:8f:14:67:36:c8:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 17 00:21:49 2025 GMT
Not After : Sep 20 00:21:49 2027 GMT
Subject: CN=f318b26c-3136-432f-821e-3ca0e6532423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:1b:9e:30:ee:25:04:c2:0c:52:43:cc:45:
68:39:e3:00:09:2b:b6:d1:fd:d8:43:b2:50:90:8b:
c0:bf:0a:c5:2c:5b:be:e2:da:a3:6d:5a:e5:00:6d:
16:68:e5:0c:b4:26:b1:4b:c2:ec:2d:16:8a:12:59:
37:af:7e:fd:56:b1:8a:bc:2f:1e:48:8e:58:87:48:
69:85:57:60:64:64:09:4f:5c:d8:d1:6d:9a:3f:7d:
13:07:46:ad:f6:f1:64:06:84:f4:e3:d8:92:ee:76:
63:ac:3a:80:e8:a9:52:80:a8:4f:6d:ae:fb:9b:59:
84:76:5f:c7:65:f9:91:fd:40:24:a9:d1:b6:2f:72:
ed:eb:dd:8a:76:8f:e1:d5:11:76:cf:ae:8f:af:f4:
e2:9b:1a:e5:36:29:72:e4:6b:24:c2:7c:c1:95:1f:
b3:2b:6c:7f:c9:27:d8:cd:53:f3:f0:01:3d:01:29:
6e:10:f4:04:14:00:e5:03:e2:00:89:f0:83:65:1f:
03:db:56:fe:d6:fe:0d:b9:2b:c2:ff:a7:2a:b8:8b:
ac:5f:3f:21:5f:f9:0e:dc:83:84:31:95:b6:12:27:
79:51:0a:a0:dd:8d:8a:ee:c1:b1:ed:ca:d3:6e:79:
76:3d:e0:8b:7f:fb:85:04:91:c4:16:4a:1e:d0:96:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:D9:6D:2C:F5:46:F1:30:AC:81:80:5D:9A:BE:06:B8:58:E5:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f318b26c-3136-432f-821e-3ca0e6532423/f318b26c-3136-432f-821e-3ca0e6532423.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.32.224.0/20
IPv6:
2604:5e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4557
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:35:37:e5:09:55:12:8d:f0:6a:70:8d:93:74:02:6a:50:f1:
cc:7f:03:ec:cb:d4:62:05:ba:01:40:53:66:b7:33:6f:7a:d6:
c8:4e:db:cc:9e:c0:3d:7e:8d:ed:16:ea:a7:27:09:61:ba:6a:
c7:c5:f5:3b:bc:aa:ef:86:88:a9:f4:d5:53:f7:8d:53:14:c8:
a6:5e:b0:fc:13:16:91:ae:79:cc:34:63:3f:fb:b0:2d:d9:fe:
aa:73:f3:eb:86:2f:48:99:79:96:70:4d:18:9c:58:bc:59:58:
79:19:95:bc:fa:3c:15:e2:ea:24:af:6f:c8:cf:17:ae:eb:2a:
52:c0:b2:6b:12:87:54:ab:f3:ba:4e:87:b2:31:df:3e:a9:dc:
d4:3e:d1:d5:fb:fd:88:b2:83:01:30:83:d2:f3:de:ab:8c:51:
85:b9:99:09:9c:5e:b5:c5:be:d9:1d:72:c9:39:9e:e7:29:a2:
bb:b8:1e:af:d7:12:3a:27:ee:67:7f:91:a8:83:43:e0:b8:e3:
da:36:e5:90:e9:0f:4c:ea:f6:34:2f:1c:89:53:d1:e4:51:99:
2e:40:24:8b:01:78:b1:3c:7e:a3:aa:20:8c:93:6a:5f:7d:a8:
af:b9:bd:4f:6e:50:e6:6d:76:e2:be:5a:b2:00:53:d1:e5:d5:
a7:16:50:3f
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEo3N2LMwY8UZzbIU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDYxNzAwMjE0OVoXDTI3MDkyMDAwMjE0OVowLzEtMCsGA1UEAxMk
ZjMxOGIyNmMtMzEzNi00MzJmLTgyMWUtM2NhMGU2NTMyNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZMbnjDuJQTCDFJDzEVoOeMACSu20f3YQ7JQ
kIvAvwrFLFu+4tqjbVrlAG0WaOUMtCaxS8LsLRaKElk3r379VrGKvC8eSI5Yh0hp
hVdgZGQJT1zY0W2aP30TB0at9vFkBoT049iS7nZjrDqA6KlSgKhPba77m1mEdl/H
ZfmR/UAkqdG2L3Lt692Kdo/h1RF2z66Pr/TimxrlNily5GskwnzBlR+zK2x/ySfY
zVPz8AE9ASluEPQEFADlA+IAifCDZR8D21b+1v4NuSvC/6cquIusXz8hX/kO3IOE
MZW2Eid5UQqg3Y2K7sGx7crTbnl2PeCLf/uFBJHEFkoe0JbC2QIDAQABo4IEKTCC
BCUwHQYDVR0OBBYEFMad2W0s9UbxMKyBgF2avga4WOUtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m
MzE4YjI2Yy0zMTM2LTQzMmYtODIxZS0zY2EwZTY1MzI0MjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2YzMThiMjZjLTMxMzYtNDMyZi04
MjFlLTNjYTBlNjUzMjQyMy9mMzE4YjI2Yy0zMTM2LTQzMmYtODIxZS0zY2EwZTY1
MzI0MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBATGIOAwDQQCAAIwBwMFACYEXoAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICEc0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYjU35QlVEo3wanCNk3QCalDxzH8D
7MvUYgW6AUBTZrczb3rWyE7bzJ7APX6N7RbqpycJYbpqx8X1O7yq74aIqfTVU/eN
UxTIpl6w/BMWka55zDRjP/uwLdn+qnPz64YvSJl5lnBNGJxYvFlYeRmVvPo8FeLq
JK9vyM8XrusqUsCyaxKHVKvzuk6HsjHfPqnc1D7R1fv9iLKDATCD0vPeq4xRhbmZ
CZxetcW+2R1yyTme5ymiu7ger9cSOifuZ3+RqIND4Ljj2jblkOkPTOr2NC8ciVPR
5FGZLkAkiwF4sTx+o6ogjJNqX32or7m9T25Q5m124r5asgBT0eXVpxZQPw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:39:53 2025 by rpki-client