
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef.cer
File: 30a6fed9-a752-4874-889d-31c878bbf1ef.cer (raw, json)
Hash identifier: CCiYlOxbJSK+axUmjGkfxkGcxsHRzH+aThtM1463n8s=
Subject key identifier: FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584A7A439DC2A1423E28DE003F80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 11 Jul 2025 00:45:37 +0000
Certificate not after: Thu 14 Oct 2027 00:45:37 +0000
Subordinate resources: AS: 3701
IP: 140.211.0.0/16
IP: 184.171.0.0/17
IP: 199.165.177.0/24
IP: 2605:bc80::/32
IP: 2607:8400::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:7a:43:9d:c2:a1:42:3e:28:de:00:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jul 11 00:45:37 2025 GMT
Not After : Oct 14 00:45:37 2027 GMT
Subject: CN=30a6fed9-a752-4874-889d-31c878bbf1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:06:c9:12:66:6c:83:68:c2:7a:a5:2e:d2:
96:3e:02:84:f2:a3:ad:20:29:02:6b:a2:b3:14:c4:
15:5f:7c:25:a8:4b:a2:f1:d7:7e:a9:cd:54:32:6c:
85:52:34:63:76:e2:eb:e9:f0:bf:43:b4:42:65:2d:
19:95:a9:1e:e2:8d:33:93:29:0d:81:48:bb:ba:e2:
de:af:67:ad:18:0a:fd:42:ff:e7:a9:bf:c0:20:40:
de:e9:40:2a:a8:09:35:ff:f3:81:64:ba:94:78:30:
b5:2e:77:16:0e:0c:c6:a9:c6:ab:80:c4:13:e5:3d:
98:41:cb:a2:74:e3:1c:79:bf:87:cf:77:07:15:14:
7d:5f:70:4f:19:e5:35:1e:ba:55:b6:ab:1b:69:14:
1e:ab:65:21:04:6d:86:55:2f:24:96:d2:3d:2e:34:
f4:19:e7:31:dc:23:2f:32:5e:b8:f6:76:67:01:d4:
e0:85:61:50:ca:bb:3b:23:73:d1:8d:2b:2b:50:e8:
56:d3:5b:85:fd:64:71:cf:36:f1:f0:28:16:93:25:
ee:20:6c:ad:ac:98:05:bf:63:3f:c6:b4:4f:81:5d:
cd:82:fc:a9:4f:6d:58:50:81:97:78:04:5b:ad:24:
ba:b5:81:48:93:78:43:ed:e3:e4:5c:4c:19:c7:6f:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
140.211.0.0/16
184.171.0.0/17
199.165.177.0/24
IPv6:
2605:bc80::/32
2607:8400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3701
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:a7:69:5f:f6:81:8a:75:f2:24:00:1f:70:58:cd:69:74:a7:
ff:9c:7d:3a:34:6a:73:3a:9a:cf:65:f6:7f:4d:4a:0b:59:a5:
a0:f6:20:f5:5d:43:84:99:62:0f:79:84:5b:27:2e:97:5d:02:
bf:e7:5e:7b:e0:37:e4:38:e0:ab:49:18:3a:cb:db:06:d0:29:
36:63:c0:f3:45:c9:69:15:e0:6f:5b:23:66:62:2a:87:87:e2:
ef:cb:a5:2a:3a:8e:34:37:30:95:73:7d:1c:4b:f0:67:9e:32:
29:0a:79:7a:67:85:19:02:39:12:c4:04:16:1b:53:11:9d:f6:
90:e7:38:ec:0e:18:e6:2a:13:ca:4f:8b:cd:ae:bf:6b:f7:d3:
c3:f5:94:31:44:02:e3:d8:d5:8e:c4:8f:0f:b1:31:65:8d:e1:
37:31:ee:e7:6e:64:5b:7f:4e:8f:f7:80:52:42:90:35:19:c2:
2b:da:bd:ee:99:66:47:fa:f5:59:6e:22:bc:8f:0b:3d:0d:08:
2e:e9:8c:4d:98:d9:77:5c:3b:d2:8c:37:05:79:6e:c7:07:3d:
62:c7:76:cd:d3:b0:c3:87:3a:7a:76:93:3e:92:af:c6:dc:af:
30:98:22:2b:f2:f2:57:05:55:6b:4b:95:46:7b:a3:2a:42:86:
0d:9f:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:58:27 2025 by rpki-client