
$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/C2A29F890B4BA854C140D7922D924183BE3DEB07.cer
File: C2A29F890B4BA854C140D7922D924183BE3DEB07.cer (raw, json)
Hash identifier: S42pg2qJJNQymgYHHjZsY8kh+UNgDkW3XCbFvlz+4n8=
Subject key identifier: C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Certificate issuer: /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial: 487AB1C63F81EBD1EF5C3EE3D941A011FF7A7037
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Manifest: rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
caRepository: rsync://rsync.rpki.as205941.org/repo/AS205941/4/
Notify URL: https://rsync.rpki.as205941.org/rrdp/notification.xml
Certificate not before: Tue 03 Nov 2026 10:11:07 +0000
Certificate not after: Tue 02 Nov 2027 10:16:07 +0000
Subordinate resources: IP: 142.249.174.0/24
IP: 2602:fa86:ffe::/48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 23:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7a:b1:c6:3f:81:eb:d1:ef:5c:3e:e3:d9:41:a0:11:ff:7a:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Validity
Not Before: Nov 3 10:11:07 2026 GMT
Not After : Nov 2 10:16:07 2027 GMT
Subject: CN=C2A29F890B4BA854C140D7922D924183BE3DEB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:25:57:4a:73:5a:ea:51:20:69:90:22:a5:b2:
25:7c:e7:b2:53:db:9d:a7:09:0c:36:14:9a:98:5c:
2a:13:ff:67:02:9c:4e:21:11:09:e9:8f:7e:47:26:
bd:8e:fa:06:f4:e0:bb:41:b0:b5:9f:37:b9:30:a7:
c1:45:fc:17:ec:7f:5c:82:3b:48:a1:5c:db:45:27:
51:7c:0c:e3:47:6b:87:08:69:07:c4:7c:93:6d:f5:
1f:3f:13:a2:1c:3d:00:da:fb:7d:fe:ac:7e:d7:29:
b3:f2:21:ab:30:a6:da:16:e2:01:66:56:68:dd:c0:
c7:6f:0a:e2:ba:1b:49:92:33:5e:46:61:1b:dc:15:
cc:1c:a3:c7:85:bd:49:41:a6:92:c6:a6:86:63:42:
ce:a9:26:70:a0:ac:69:c3:87:4a:8a:79:01:a8:8e:
f0:77:75:2b:fa:27:b5:8c:57:d3:06:1b:63:87:25:
14:6a:ea:ee:93:46:b8:15:a0:00:3a:3a:e6:2d:c4:
f9:71:f5:67:8f:f4:ef:79:4a:80:a8:a0:5c:4f:fa:
d0:2f:93:bc:57:a8:c7:8b:97:98:d8:31:c5:9d:68:
c0:9a:24:e5:ad:3a:0c:57:fc:d6:1a:72:97:9e:9b:
3f:83:22:71:e3:73:d3:e7:63:30:46:7b:05:96:f0:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
X509v3 Authority Key Identifier:
keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/
RPKI Manifest - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
RPKI Notify - URI:https://rsync.rpki.as205941.org/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.249.174.0/24
IPv6:
2602:fa86:ffe::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c5:0b:1b:91:06:7b:27:3a:fc:86:9d:e7:24:c4:6e:29:73:
b5:fa:65:89:df:d1:42:5e:3b:a8:29:14:b7:1f:40:e6:d7:df:
8b:52:e9:06:ae:05:bd:c0:01:8c:3a:0d:33:e2:13:2c:b6:39:
25:6b:4b:92:2d:b4:7d:1f:bc:1a:fc:5d:a8:13:4d:cb:c2:9a:
84:a8:0c:a7:74:e9:8e:b0:ac:a9:ec:26:8c:93:77:01:c1:c1:
4f:c2:f8:e3:b9:9e:79:68:b7:9c:f4:53:94:77:53:1a:4a:9d:
2b:93:92:46:21:2b:c1:9f:f8:97:9e:90:19:fd:60:76:d0:15:
d7:d9:3c:be:7c:15:2a:a4:79:b3:86:d1:25:50:aa:be:3d:97:
4b:7e:ab:06:5e:56:cc:ac:1f:04:c6:4b:1b:f8:b5:a5:d6:9c:
8b:f0:fb:6f:95:2e:cc:74:3a:0c:09:ef:fe:15:34:c1:87:74:
59:e3:b2:3f:63:9d:f9:8a:b7:52:60:d5:d9:70:4a:ea:eb:ae:
7f:4b:73:93:6d:16:79:bc:1e:51:a6:22:b8:d1:f5:b8:8e:c2:
0e:b7:c1:35:95:41:5e:0a:70:02:7b:62:77:54:55:4d:81:cb:
17:12:d9:32:fd:85:20:94:e4:33:f1:fa:96:7c:c7:6b:ac:b4:
a3:75:db:e8
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUSHqxxj+B69HvXD7j2UGgEf96cDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQzNmFkOWIzZDhkNDYwODAwYjNkZDUwYzYyMGIxZDQz
ZWNmOGM3ZGQwMWFlYjBjYzIwHhcNMjYxMTAzMTAxMTA3WhcNMjcxMTAyMTAxNjA3
WjAzMTEwLwYDVQQDEyhDMkEyOUY4OTBCNEJBODU0QzE0MEQ3OTIyRDkyNDE4M0JF
M0RFQjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyVXSnNa6lEg
aZAipbIlfOeyU9udpwkMNhSamFwqE/9nApxOIREJ6Y9+Rya9jvoG9OC7QbC1nze5
MKfBRfwX7H9cgjtIoVzbRSdRfAzjR2uHCGkHxHyTbfUfPxOiHD0A2vt9/qx+1ymz
8iGrMKbaFuIBZlZo3cDHbwriuhtJkjNeRmEb3BXMHKPHhb1JQaaSxqaGY0LOqSZw
oKxpw4dKinkBqI7wd3Ur+ie1jFfTBhtjhyUUauruk0a4FaAAOjrmLcT5cfVnj/Tv
eUqAqKBcT/rQL5O8V6jHi5eY2DHFnWjAmiTlrToMV/zWGnKXnps/gyJx43PT52Mw
RnsFlvB3ZwIDAQABo4IDLTCCAykwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
wqKfiQtLqFTBQNeSLZJBg7496wcwHwYDVR0jBBgwFoAUorTp0GFsthcpYmkqd0o5
UF4SeVQwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvYmY0YzljOGI1ZDAwNDBiOTgw
OGQwYTk5MWQyYzNkYzcvMS9BMkI0RTlEMDYxNkNCNjE3Mjk2MjY5MkE3NzRBMzk1
MDVFMTI3OTU0LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1lZGZl
LTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvM2NlODQ4MTEtODE3Zi00NTFmLTgxNmYt
NDI2NDlhNjk0MGNjLzhkMzZhZDliM2Q4ZDQ2MDgwMGIzZGQ1MGM2MjBiMWQ0M2Vj
ZjhjN2RkMDFhZWIwY2MyLmNlcjCB+wYIKwYBBQUHAQsEge4wgeswPAYIKwYBBQUH
MAWGMHJzeW5jOi8vcnN5bmMucnBraS5hczIwNTk0MS5vcmcvcmVwby9BUzIwNTk0
MS80LzBoBggrBgEFBQcwCoZccnN5bmM6Ly9yc3luYy5ycGtpLmFzMjA1OTQxLm9y
Zy9yZXBvL0FTMjA1OTQxLzQvQzJBMjlGODkwQjRCQTg1NEMxNDBENzkyMkQ5MjQx
ODNCRTNERUIwNy5tZnQwQQYIKwYBBQUHMA2GNWh0dHBzOi8vcnN5bmMucnBraS5h
czIwNTk0MS5vcmcvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBACO+a4wDwQC
AAIwCQMHACYC+oYP/jANBgkqhkiG9w0BAQsFAAOCAQEAHsULG5EGeyc6/Iad5yTE
bilztfplid/RQl47qCkUtx9A5tffi1LpBq4FvcABjDoNM+ITLLY5JWtLki20fR+8
GvxdqBNNy8KahKgMp3TpjrCsqewmjJN3AcHBT8L447meeWi3nPRTlHdTGkqdK5OS
RiErwZ/4l56QGf1gdtAV19k8vnwVKqR5s4bRJVCqvj2XS36rBl5WzKwfBMZLG/i1
pdaci/D7b5UuzHQ6DAnv/hU0wYd0WeOyP2Od+Yq3UmDV2XBK6uuuf0tzk20Webwe
UaYiuNH1uI7CDrfBNZVBXgpwAntid1RVTYHLFxLZMv2FIJTkM/H6lnzHa6y0o3Xb
6A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:59:23 2026 by rpki-client