
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
File: 969446db-6a2e-47bc-a33b-2dd883bfb899.cer (raw, json)
Hash identifier: rsu6hmrr6FVZCjwpjJfoTjR584vfIqjWpgukni9aC6c=
Subject key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F43285849A34CEB93B2A7199B98A0B380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 25 Apr 2025 00:45:34 +0000
Certificate not after: Thu 29 Jul 2027 00:45:34 +0000
Subordinate resources: AS: 26679
AS: 33309
IP: 192.64.152.0/22
IP: 199.189.204.0/22
IP: 2620:106:8000::/44
IP: 2620:112:e000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a3:4c:eb:93:b2:a7:19:9b:98:a0:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Apr 25 00:45:34 2025 GMT
Not After : Jul 29 00:45:34 2027 GMT
Subject: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:fe:69:95:0e:85:7a:da:71:f7:c4:95:8c:
14:e2:3d:66:5d:41:a0:a9:61:e1:cb:4c:66:1a:f8:
a5:55:f0:a5:18:c3:5c:90:03:10:96:f7:6b:3c:d2:
51:93:4f:58:6f:72:60:fa:5a:b9:d6:9d:00:6a:ec:
37:48:7a:66:74:24:6c:2f:d0:ee:cb:82:2e:b3:e5:
4c:8b:52:6b:cd:a8:a7:ce:10:7b:c8:f2:51:e1:80:
a0:b8:8d:1f:23:47:62:a9:52:d6:cd:04:53:0d:75:
53:51:c5:32:1f:6d:eb:86:34:2c:0a:3d:24:55:90:
fa:d8:f6:18:d9:e5:58:f1:2a:ea:f8:4a:52:df:cc:
5b:7f:db:26:62:4c:0e:64:6e:a9:7c:31:4e:e1:f4:
2d:89:47:3e:a3:20:1b:6b:b2:c8:a2:1a:2c:76:80:
30:e7:d5:61:69:39:d7:82:06:90:11:5a:97:75:75:
3e:3d:37:71:51:14:fd:58:b9:82:77:9b:9d:6f:96:
be:4f:93:73:6d:4e:3d:53:f1:f0:6b:8c:c8:04:c3:
b8:95:4c:5f:bd:be:0b:9e:a8:91:bd:82:88:49:5d:
69:50:6d:4c:8f:e5:a9:b2:8e:76:e0:70:ca:69:3e:
86:e5:78:19:5b:1a:84:ce:22:41:de:c5:1b:f3:e0:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.152.0/22
199.189.204.0/22
IPv6:
2620:106:8000::/44
2620:112:e000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26679
33309
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d3:d1:30:5e:2f:fb:fb:aa:d2:b8:6d:af:e8:4d:bb:32:44:
75:12:ee:9e:78:d4:71:ce:a8:91:4e:71:1c:1b:c6:04:92:0e:
cc:76:76:a4:b4:a2:ba:81:4c:3a:45:f2:70:9a:7c:86:4a:c2:
3c:a4:d9:b8:b5:f5:8d:6d:d4:c9:90:a3:32:94:fe:75:96:ff:
f2:25:8c:6c:03:de:b1:7d:ca:e2:05:20:71:70:d6:0a:38:a3:
65:c5:7c:c6:fa:53:0a:25:ee:80:f6:44:35:ae:e6:c6:eb:66:
70:ab:0c:7b:5d:de:3a:bb:7f:36:19:70:eb:4b:3c:25:f0:62:
3d:e9:47:3d:a4:a3:62:03:6d:9d:54:99:3a:37:83:ba:4b:e7:
9a:ea:db:4f:05:8c:41:dc:c0:c6:cd:14:2d:65:ee:b6:1d:ca:
4c:11:3e:c1:18:56:1a:c7:4b:5f:21:24:71:17:e7:33:2e:81:
8b:68:10:e7:25:c0:59:84:0f:b6:25:c2:6c:67:d4:95:a5:91:
75:4f:74:25:b8:82:3f:10:0a:6f:9b:a4:dd:06:75:dd:80:4a:
6e:fe:c4:57:32:10:90:f4:92:b4:47:e1:53:23:06:80:77:6f:
c6:b0:8d:d4:4c:fd:4a:d5:92:a1:85:27:9f:70:d1:77:92:38:
bf:ec:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 21:21:49 2025 by rpki-client