
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
File: bcebc8fa-2923-43fa-ba14-964e68a49086.cer (raw, json)
Hash identifier: AE09LiWrLtuRYRYvAjuomGUJVeEP7xW6jprA7hxwP5Q=
Subject key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial: 010D0C9F4328584A55F8B9377B003647B832FCA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 28 Jun 2025 00:45:37 +0000
Certificate not after: Fri 01 Oct 2027 00:45:37 +0000
Subordinate resources: IP: 198.160.96.0/19
IP: 204.107.111.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:55:f8:b9:37:7b:00:36:47:b8:32:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
Validity
Not Before: Jun 28 00:45:37 2025 GMT
Not After : Oct 1 00:45:37 2027 GMT
Subject: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:95:d6:89:68:67:a1:39:ec:ed:9f:c8:db:
cb:c3:b7:5f:b1:b7:07:45:e3:00:c8:b6:19:03:5f:
7d:46:57:42:8e:46:49:30:d5:5f:0f:21:d6:28:6f:
b5:b1:9d:fe:fc:53:a2:68:df:c4:b9:d9:f1:e5:af:
15:a4:d0:78:b0:53:90:6f:3b:73:aa:ce:b5:8c:cb:
bd:32:be:20:14:21:e2:14:35:b0:71:2d:99:8d:b1:
7f:4d:30:e4:7c:2a:3a:1f:5f:e8:c4:9e:b8:6e:a3:
a5:6d:af:eb:ee:dd:a6:cb:18:0d:ff:fc:5d:8f:e3:
de:2d:f3:83:85:4f:93:8e:0f:44:89:2f:a1:d0:d6:
6a:87:23:56:83:e4:f3:75:fb:d8:9f:36:58:34:6d:
26:7a:7e:a4:cd:11:09:51:f0:02:04:f6:b1:41:48:
17:68:b4:50:6f:c2:fe:b3:b4:6b:b2:3b:88:0f:42:
6e:73:83:8b:1f:7a:cc:4f:df:94:1a:ec:ef:f6:00:
34:af:b0:f2:9f:6a:7a:29:63:12:9b:5b:6d:36:2a:
8e:86:d8:71:c7:b7:b7:5b:4d:a0:35:1b:eb:61:2a:
fe:7f:2d:51:50:4a:c9:b6:10:ac:76:19:7b:1b:4d:
b4:a7:91:f1:1f:be:05:39:f7:44:15:17:f7:52:70:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
X509v3 Authority Key Identifier:
keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.96.0/19
204.107.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:fa:14:cd:bb:91:59:f3:60:f4:4e:9d:1b:b9:d4:14:0c:c2:
b1:55:73:31:dd:c4:82:83:83:61:a3:08:b3:77:94:69:61:b4:
c3:52:96:e6:04:b1:51:b1:55:12:80:05:54:89:9c:62:a9:c5:
bb:11:09:13:c9:a2:9f:00:b2:52:0c:f2:8c:0a:d2:79:69:d3:
16:fb:3d:f7:91:81:14:b6:f0:99:23:d2:5d:25:b8:75:04:75:
ab:72:03:34:85:1e:d6:05:16:47:f1:7f:11:c3:b8:7f:4f:ae:
51:15:a6:27:18:71:18:b2:78:17:c9:22:1c:75:ec:eb:e0:68:
be:9d:35:84:47:33:a6:95:d3:01:57:fe:e5:56:b1:a8:1b:7b:
a6:2d:3f:bf:14:b2:7f:c6:60:04:7a:6f:84:94:18:3c:47:8d:
11:ec:b9:2a:f3:38:b1:a1:21:6f:3f:3e:cb:01:20:be:c2:5c:
d7:8f:fb:af:73:b0:6f:20:b8:48:01:34:c7:b6:6d:72:52:5e:
7b:23:41:82:a8:a7:e9:e0:03:d1:e4:e4:ad:0b:aa:ff:87:c3:
bd:fc:97:64:32:a8:c2:fc:46:c8:d0:11:c1:7c:12:4f:10:13:
2e:48:38:55:e5:72:b1:29:03:a5:bf:00:bb:8c:de:61:5b:ed:
63:22:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:01:56 2025 by rpki-client