
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer
File: f80afed8-630c-4446-a972-f7554ab8ece0.cer (raw, json)
Hash identifier: FhFkhMkCth1flIgHeWGDbWrERYI5RIdNU8Oi3424Js4=
Subject key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F43285849C926D7E06979CFD1D19F9200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 08 May 2025 14:09:34 +0000
Certificate not after: Wed 11 Aug 2027 14:09:34 +0000
Subordinate resources: AS: 22339
IP: 23.135.164.0/24
IP: 2602:f6ca::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c9:26:d7:e0:69:79:cf:d1:d1:9f:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: May 8 14:09:34 2025 GMT
Not After : Aug 11 14:09:34 2027 GMT
Subject: CN=f80afed8-630c-4446-a972-f7554ab8ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:74:b6:05:21:c1:5c:dd:1c:eb:cf:d9:90:db:
3d:e0:56:8b:6a:86:91:28:5a:05:e8:a4:e8:2b:74:
35:cd:dd:2a:d9:7f:7c:65:70:46:2e:65:a5:89:f8:
ab:f3:8d:e4:08:a9:38:5f:aa:8d:b9:a2:0b:bb:a8:
52:14:14:a4:3b:d3:a0:23:3a:a6:61:ed:48:d7:cf:
dd:a1:b2:7e:a3:24:d2:af:2e:d7:74:c5:17:4e:a1:
25:08:c9:85:0f:0c:c0:7b:17:13:22:23:50:9e:84:
33:b0:6a:de:73:92:26:29:84:66:09:75:c9:9e:20:
fa:ad:49:54:07:9e:7d:57:2d:de:79:88:44:77:49:
27:16:ae:6c:05:4d:13:23:ad:62:bb:84:7d:4c:60:
ef:65:c9:17:09:de:50:16:d7:ed:49:40:85:17:8d:
a0:8f:83:62:f2:a8:94:73:81:ab:8e:8d:45:77:09:
3e:33:0f:ee:00:ad:e5:a7:55:29:a6:69:3c:17:11:
7f:f7:61:4c:73:f2:42:58:56:1a:2a:3d:48:22:60:
7f:eb:01:e3:de:6a:c3:69:7c:a1:63:2f:e5:61:37:
9d:f7:78:37:59:4b:51:e3:b9:1a:65:9d:8f:12:40:
39:81:47:ad:25:f8:f1:02:89:16:92:37:78:b1:30:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.164.0/24
IPv6:
2602:f6ca::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22339
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cf:6f:fd:f6:78:bc:57:88:b2:16:82:93:14:a9:94:c2:b3:
4f:84:20:61:0a:ea:42:5a:ca:87:f9:9c:1d:ef:e2:b0:d8:26:
5c:86:47:9a:65:8e:7b:4f:b4:3e:66:43:33:ad:15:ab:2f:ce:
43:a1:8c:ec:ab:6d:40:ba:35:40:92:10:b7:32:43:59:4e:5d:
78:b0:9b:58:3b:4a:0b:69:05:7f:96:fe:51:2c:39:d7:2d:87:
01:06:3d:d4:5a:c7:51:da:d2:e2:43:61:21:1c:8e:2e:66:d0:
ee:84:21:5a:21:c2:f4:ba:10:cc:36:f0:c5:5b:90:66:6d:5a:
79:e9:1d:50:8d:84:b8:25:90:2c:08:5c:5a:fd:a2:5b:d9:6f:
40:b9:5f:97:79:98:40:ac:bf:59:65:23:b3:2a:ef:1b:9d:66:
03:83:94:b0:a6:14:07:a6:87:31:6c:a7:93:35:91:b2:88:22:
14:e0:cf:3f:bf:24:4f:1c:e6:85:44:7d:b6:ef:9d:15:bf:a8:
d2:99:64:1b:20:24:d8:19:fb:fc:50:eb:00:1d:c1:0a:7e:2a:
7b:14:f7:f2:af:db:41:0b:f9:f1:1e:9e:48:a2:c7:f2:d9:bf:
13:50:cb:12:c0:48:89:c6:a6:e9:c7:a1:2c:4d:bf:b4:a3:b4:
62:6d:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:43:02 2025 by rpki-client