
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
File: 37d983de-280d-4374-a056-b21eb13451dd.cer (raw, json)
Hash identifier: SZ2CwrZ3D8w20zVAgKTRByYexIqKKy0xQ7GelJt80Z0=
Subject key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584B6D25074A69164831E5753BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 06 Oct 2025 00:45:25 +0000
Certificate not after: Sun 09 Jan 2028 01:45:25 +0000
Subordinate resources: AS: 33604
IP: 65.183.128.0/19
IP: 69.5.112.0/20
IP: 162.247.88.0/22
IP: 204.13.40.0/21
IP: 2606:8600::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6d:25:07:4a:69:16:48:31:e5:75:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Oct 6 00:45:25 2025 GMT
Not After : Jan 9 01:45:25 2028 GMT
Subject: CN=37d983de-280d-4374-a056-b21eb13451dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:46:25:a4:a7:f2:fa:7f:ff:bd:98:1f:82:
07:58:c4:d0:2d:16:ac:70:42:30:a5:c3:ac:c4:d7:
07:20:d0:c1:3f:60:42:87:c8:37:53:7e:76:3c:3f:
cc:a0:50:5f:89:43:be:7f:d1:4a:aa:47:38:fe:0a:
2a:db:ee:44:ab:6b:49:ed:b2:cb:46:72:fc:1c:47:
35:1f:c0:d4:1f:cf:dc:53:63:0e:10:00:22:ec:94:
8b:6c:97:f6:81:85:b1:58:9a:6a:64:3c:88:1a:09:
02:d7:54:ad:34:c0:d0:85:7b:1e:7c:85:14:98:5e:
94:52:89:15:fc:52:34:f4:9e:78:c5:46:a8:d5:6a:
e0:ed:ab:df:03:8c:29:1a:65:a7:c8:6f:c0:3e:7b:
e3:4b:da:c6:6d:2d:9e:9a:f0:1b:f2:23:ee:58:9f:
16:36:75:38:cf:e5:08:e6:2b:5d:c9:ef:9a:1b:29:
02:28:91:bf:e1:da:07:40:9b:c9:bf:5f:85:a8:f7:
76:ca:3d:87:e9:6e:46:ae:19:a3:ef:9b:cc:f0:4c:
3d:7a:58:bb:90:57:2d:10:f4:97:e3:7f:3c:0e:5a:
ea:77:49:c2:c9:47:e2:58:ca:23:28:d1:1d:79:ad:
89:e4:ba:46:00:46:1d:cc:47:16:a1:77:0e:21:67:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.183.128.0/19
69.5.112.0/20
162.247.88.0/22
204.13.40.0/21
IPv6:
2606:8600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33604
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:f1:fc:2b:11:32:86:b5:e3:bb:bd:91:22:76:61:a9:c4:00:
be:08:e6:a2:6a:70:d1:43:36:08:73:47:5d:c3:78:a3:01:4a:
66:10:87:49:09:23:99:02:af:31:1d:cb:48:0e:2a:4b:36:10:
eb:0b:44:f0:a7:f8:42:d3:7f:14:69:09:59:21:e6:7d:eb:cd:
81:80:83:22:a4:cb:7c:b2:be:02:db:63:f2:dc:4f:19:d8:fe:
dc:a8:e0:2f:62:3a:7b:0b:eb:eb:c5:d4:fc:45:62:8c:a1:0a:
07:cc:35:90:b3:cd:f3:d6:e0:05:03:59:a7:2c:a5:b3:b8:6c:
77:fa:eb:01:52:7a:18:f0:c8:ed:3c:77:99:83:29:a8:90:52:
1a:80:3f:86:05:0f:72:07:eb:0f:b5:9b:fb:57:64:21:1c:f5:
c2:83:fb:7f:23:e5:c1:57:1a:c2:b5:7c:73:8a:a5:c4:ea:22:
69:ff:c0:2a:fb:c4:25:f7:e7:68:29:d5:eb:87:fa:d2:8a:a8:
34:cc:3b:41:ba:23:47:44:5f:9c:cb:26:0e:c7:a1:bf:41:d2:
cc:d2:4d:d6:bd:91:90:9f:68:a2:f3:b0:ab:99:23:bd:6f:2a:
37:6e:63:73:af:c1:22:ef:b0:46:c5:4a:f7:d5:37:b3:69:ca:
43:f4:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:09 2025 by rpki-client