
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer
File: cc43c894-0822-4819-9b8f-df16b53cf6de.cer (raw, json)
Hash identifier: OiFdxXu77LmzaQAuOCqU/Wif0g6pkBgbbF09jT/6kRE=
Subject key identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F6985F060C7270B670E3D8980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 06 Oct 2026 12:45:11 +0000
Certificate not after: Mon 08 Jan 2029 13:45:11 +0000
Subordinate resources: AS: 401536
IP: 23.130.20.0/24
IP: 2602:f786::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:69:85:f0:60:c7:27:0b:67:0e:3d:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 6 12:45:11 2026 GMT
Not After : Jan 8 13:45:11 2029 GMT
Subject: CN=cc43c894-0822-4819-9b8f-df16b53cf6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:4d:df:8a:0c:0d:ce:3a:ac:4d:af:d5:1e:
30:1e:72:5f:2b:da:0f:76:7e:59:41:06:6c:02:30:
ba:9b:fd:92:f6:bb:10:14:d9:14:8a:ad:99:9b:d8:
db:f7:4a:cf:b7:58:38:fe:57:56:d3:25:24:6e:01:
58:fa:e1:39:65:ca:02:ff:33:54:49:30:a9:dc:98:
36:75:37:fa:cb:7c:d6:1d:4a:ad:55:95:be:b7:f3:
f1:2b:80:61:06:49:b3:6a:49:0b:ca:ea:17:c6:ba:
9c:b1:a6:8c:8a:d2:3b:98:48:c8:9d:ba:39:e7:7f:
8d:b0:9a:10:5b:00:8f:ce:d0:33:fd:9c:80:11:4c:
42:ff:c4:2a:80:de:1a:6d:b8:12:1f:c2:5a:70:4a:
cb:a5:0b:96:93:c6:3c:ef:bc:b5:91:73:37:e5:36:
c2:e6:15:be:59:b2:3a:5d:c7:6a:7f:9a:77:62:91:
15:d9:e0:24:8f:60:e9:13:d7:b2:f4:4e:ad:84:cd:
b6:82:69:49:ab:ff:0d:9e:3a:1b:27:1d:a4:87:f4:
b7:29:41:c0:b6:be:5b:72:71:17:a9:e5:bb:7e:23:
15:1f:7a:53:ac:04:4b:ab:b9:f8:99:92:91:6d:62:
e7:1f:17:0c:28:2a:0a:92:40:d2:2e:1b:85:c5:fc:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.20.0/24
IPv6:
2602:f786::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401536
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ae:68:4e:26:f4:5e:86:94:b0:9a:5e:39:3d:15:84:3a:0b:
44:a7:73:56:b0:12:8f:29:d3:3c:72:26:f3:ca:2a:97:90:51:
4e:20:c7:76:60:69:e6:80:df:62:05:9f:6c:85:ce:47:6a:f6:
12:66:ed:75:d7:fe:d0:39:0c:0b:e7:7a:64:ca:c1:3e:66:b1:
81:20:2b:32:45:62:eb:2e:b2:db:52:3e:50:ed:3d:41:b8:81:
53:32:27:5d:3b:eb:60:99:23:20:9a:f2:de:8e:1e:31:8e:4a:
69:84:39:f6:d7:b7:b4:c7:d7:b0:62:24:d0:76:7a:a8:a3:c0:
5b:83:e3:a2:00:02:f8:c3:99:f5:9f:bc:1e:9d:30:a8:8d:8e:
1d:b3:65:0f:be:75:16:6a:56:4f:aa:5d:3e:ab:dd:cb:65:b1:
55:9f:b1:42:8a:49:b3:ba:88:81:fb:82:03:fe:c7:cf:fe:ba:
66:ec:f6:0d:ea:80:71:0b:6d:24:c3:81:a2:26:6e:e9:22:1c:
f9:a4:82:00:86:f7:e7:53:98:04:30:f4:d1:20:c6:1e:86:dd:
e6:06:9c:59:20:64:97:f0:dd:d5:98:24:64:db:d9:de:50:30:
d8:6b:4d:5a:55:69:8c:d5:c3:c4:00:65:0d:50:e9:38:4a:14:
34:76:95:24
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE9phfBgxycLZw49iYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI2MTAwNjEyNDUxMVoXDTI5MDEwODEzNDUxMVowLzEtMCsGA1UEAxMk
Y2M0M2M4OTQtMDgyMi00ODE5LTliOGYtZGYxNmI1M2NmNmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPRN34oMDc46rE2v1R4wHnJfK9oPdn5ZQQZs
AjC6m/2S9rsQFNkUiq2Zm9jb90rPt1g4/ldW0yUkbgFY+uE5ZcoC/zNUSTCp3Jg2
dTf6y3zWHUqtVZW+t/PxK4BhBkmzakkLyuoXxrqcsaaMitI7mEjInbo553+NsJoQ
WwCPztAz/ZyAEUxC/8QqgN4abbgSH8JacErLpQuWk8Y877y1kXM35TbC5hW+WbI6
Xcdqf5p3YpEV2eAkj2DpE9ey9E6thM22gmlJq/8NnjobJx2kh/S3KUHAtr5bcnEX
qeW7fiMVH3pTrARLq7n4mZKRbWLnHxcMKCoKkkDSLhuFxfx7EQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFJt0I9C9UIg/RXLfzmy+3HQPivQ6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j
YzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUzY2Y2ZGUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NjNDNjODk0LTA4MjItNDgxOS05
YjhmLWRmMTZiNTNjZjZkZS9jYzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUz
Y2Y2ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXghQwDgQCAAIwCAMGBCYC94YAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYggDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZrmhOJvRehpSwml45PRWEOgtE
p3NWsBKPKdM8cibzyiqXkFFOIMd2YGnmgN9iBZ9shc5HavYSZu111/7QOQwL53pk
ysE+ZrGBICsyRWLrLrLbUj5Q7T1BuIFTMiddO+tgmSMgmvLejh4xjkpphDn217e0
x9ewYiTQdnqoo8Bbg+OiAAL4w5n1n7wenTCojY4ds2UPvnUWalZPql0+q93LZbFV
n7FCikmzuoiB+4ID/sfP/rpm7PYN6oBxC20kw4GiJm7pIhz5pIIAhvfnU5gEMPTR
IMYeht3mBpxZIGSX8N3VmCRk29neUDDYa01aVWmM1cPEAGUNUOk4ShQ0dpUk
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:57:57 2026 by rpki-client