
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer
File: f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer (raw, json)
Hash identifier: WGcBdh+t0pGZVxHQYprbIY7rhhsmz080weasxoqkl8w=
Subject key identifier: 48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A3C3DA556F8E7A92E0CAD9F90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 18 Jun 2025 19:33:28 +0000
Certificate not after: Tue 21 Sep 2027 18:17:41 +0000
Subordinate resources: AS: 26018
IP: 199.4.212.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:3c:3d:a5:56:f8:e7:a9:2e:0c:ad:9f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 18 19:33:28 2025 GMT
Not After : Sep 21 18:17:41 2027 GMT
Subject: CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7a:75:d2:9b:db:05:7f:b5:41:96:5d:e3:48:
de:1f:a6:b3:5f:89:7d:75:94:59:2c:15:56:95:dc:
93:29:20:81:c0:4a:85:f1:90:61:62:a4:68:a0:f9:
d7:48:7c:48:bb:bd:68:39:08:55:e1:82:95:04:68:
23:43:bc:dc:a8:a3:7a:ff:a4:b6:78:c9:79:f2:51:
53:49:a2:5b:a0:ea:a4:be:19:6b:9b:ef:12:f7:86:
e5:a7:d7:54:61:c3:e5:ae:29:2a:46:02:da:4e:0f:
a2:0e:87:35:8f:07:63:e0:36:77:87:16:e7:94:11:
bc:5c:5a:e5:ff:bd:3a:39:2b:d9:0b:3b:be:e2:8d:
3d:15:16:95:88:8e:6f:a6:75:81:f4:1f:9c:af:d7:
2b:71:3b:19:0d:c6:49:85:a9:c8:8a:64:44:67:43:
ce:66:fd:d4:dd:5c:35:e4:2b:48:46:c1:92:fc:1d:
0d:54:9d:da:ff:1b:1a:39:52:87:74:f3:a9:31:b8:
50:bf:b1:8b:34:25:5c:21:aa:c5:04:af:41:0d:79:
ff:0b:96:b7:bc:aa:9e:9d:21:22:f9:89:eb:a5:61:
b5:18:d1:48:33:db:2b:3c:1b:f3:b8:72:c2:5e:e7:
34:8d:e0:52:46:fb:7e:5d:1d:c4:97:50:e9:c5:e0:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.4.212.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26018
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:1a:a7:de:4b:e7:cc:69:73:f0:80:9c:60:4a:bb:fe:2c:ed:
9d:ac:00:f7:65:8f:2f:79:b4:30:ad:18:d2:49:7e:0b:8d:66:
bd:cf:85:84:32:fd:be:86:3a:f9:13:46:33:d0:8c:79:07:62:
d3:82:aa:51:cd:a0:e0:5c:47:00:49:74:8c:b9:18:04:cc:a7:
d6:05:5c:57:07:2c:eb:75:b5:8c:3e:d0:20:12:1b:74:74:e0:
06:b8:f1:2b:d2:00:80:03:22:2a:c2:ea:78:e3:94:46:e6:db:
18:95:f9:a0:4b:66:5d:a2:b7:be:7d:5a:32:40:b3:56:4e:c6:
f3:0c:48:36:dc:65:8e:94:e5:80:d3:71:c8:cf:ba:12:f6:d3:
87:6a:91:76:3b:69:11:b5:c2:d7:cf:dc:85:bb:87:a5:df:19:
e7:55:71:3b:7a:be:22:8f:2e:7c:03:f4:13:a8:34:e0:16:75:
8b:00:b0:08:4e:53:00:35:67:70:30:2e:91:1c:98:83:b8:2b:
33:ef:1b:8b:9d:66:46:0d:8d:b7:df:0c:69:ee:70:95:77:fd:
36:5e:97:5b:c3:e1:ef:49:19:a2:db:cc:bf:e7:7e:d9:1b:20:
93:2b:3b:2c:d4:38:bc:af:35:b9:61:6a:3d:78:de:5e:e1:83:
65:2d:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:44:32 2025 by rpki-client