
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
File: a939ee7e-81b2-46cf-9a43-3647ff132a06.cer (raw, json)
Hash identifier: SOTZGPh4SFF7ZcV2WJGUf9NCVJb0gVXXV7IHP6EMCIc=
Subject key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F43285849CFF7DE2DF4B1061FDF3D3EC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 11 May 2025 00:45:34 +0000
Certificate not after: Sat 14 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 976
IP: 45.59.128.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:cf:f7:de:2d:f4:b1:06:1f:df:3d:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: May 11 00:45:34 2025 GMT
Not After : Aug 14 00:45:34 2027 GMT
Subject: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:4e:a3:9f:eb:34:e0:66:70:55:23:9a:61:
a4:d4:0f:fe:8c:b2:d6:34:7f:4a:ad:3c:df:86:ca:
0c:ba:ce:88:a4:5c:2e:08:38:71:44:41:3d:a7:6a:
f1:c0:72:ff:66:a8:c9:9c:73:29:32:d4:9d:ef:e9:
f5:ec:05:b1:c3:23:48:e4:eb:be:f2:56:d3:88:fc:
9d:8b:d7:81:43:f9:b2:d2:ae:97:0f:bc:d9:dd:a1:
94:ce:b2:2b:06:b8:da:2c:0b:06:33:37:2f:eb:8c:
f8:6e:63:ed:c4:fa:9b:a5:eb:b5:f8:ed:40:f3:be:
cc:45:a5:cc:d4:6c:22:24:14:f6:14:01:bc:21:3d:
ed:3a:26:30:55:4a:8e:d7:48:fd:7b:46:82:84:40:
e2:c1:b8:44:3c:45:67:1d:8d:54:04:04:8b:3d:e3:
78:1d:e7:19:ab:fd:03:f4:6d:31:8f:dc:37:22:ee:
50:53:27:e4:fe:5a:d0:bb:8a:80:0e:4a:34:0d:df:
34:22:c1:82:f5:6c:01:fe:3e:2f:ac:b4:27:01:77:
ab:dd:8b:50:b1:9b:e8:af:08:d9:f1:c6:64:1a:42:
e7:bb:6c:10:c2:91:7b:ee:52:94:63:a2:1e:0e:ac:
4c:be:ae:87:66:fc:1d:68:a9:6e:bc:fb:ae:b3:c3:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.128.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
976
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:1d:d4:ce:12:e1:e5:0b:5b:55:29:86:13:27:ab:9f:c4:7d:
7f:65:bd:9d:8a:55:f8:46:ed:41:d4:b6:18:b1:42:5d:57:44:
70:5d:fd:3b:25:a2:b3:f3:04:5f:02:f0:c3:29:b8:aa:41:c3:
ca:5a:0a:3e:0d:51:5d:f8:1f:91:fa:01:85:4e:f3:e2:18:56:
98:ba:1f:c0:df:f0:d2:bf:13:d0:27:ec:7e:16:e0:1b:74:91:
8b:ce:e5:2b:91:09:42:c9:d3:9d:2e:ec:00:81:48:46:a6:fc:
b8:e5:cd:e4:eb:16:78:ec:2a:e4:73:28:d5:fb:02:a1:83:ce:
b9:12:5e:ef:4e:bf:d0:bc:e7:91:b6:49:fb:b1:a8:49:2c:61:
06:fa:8a:e9:40:4a:13:be:47:bb:c4:fe:76:af:30:e4:e3:96:
c9:77:e4:59:68:c7:72:b1:9f:3f:c7:02:6b:9d:ec:2b:cd:89:
3a:9d:44:ea:27:b1:e2:6b:bb:76:4c:1b:c3:22:6f:6c:f5:fa:
0c:d1:c8:ef:42:ad:50:f5:1e:f6:92:c1:f8:11:25:55:e8:21:
b8:ff:fc:47:77:d9:2e:10:f5:35:ce:0e:2a:a4:eb:65:fb:ad:
3f:ad:34:2c:d1:09:53:b4:e8:e9:b1:a9:2c:fb:f8:bc:ae:4d:
6c:8a:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:02:29 2025 by rpki-client