
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
File: f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer (raw, json)
Hash identifier: oU42NA7dItwgrLWGTwprwLxJKyWKqpgzdlPzSA/+hPg=
Subject key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584A15C2FDF0755BC4FBD34C5300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 05 Jun 2025 00:45:37 +0000
Certificate not after: Wed 08 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 40501
AS: 58722
IP: 66.85.88.0/23
IP: 103.21.81.0/24
IP: 103.226.246.0/24
IP: 216.235.80.0/20
IP: 2602:ff40::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:15:c2:fd:f0:75:5b:c4:fb:d3:4c:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Jun 5 00:45:37 2025 GMT
Not After : Sep 8 00:45:37 2027 GMT
Subject: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:63:d6:5e:40:5d:9d:1b:4b:19:5d:b3:35:
5b:ff:ab:33:e1:bf:54:db:64:63:7f:e2:1d:b0:53:
23:74:de:0a:dc:9b:bf:e2:aa:6a:64:47:c0:3b:ef:
e9:3f:f5:70:e2:4d:fa:fa:f7:e2:06:1b:5d:c4:02:
8f:12:94:31:eb:12:37:56:5c:bd:f3:13:7f:a1:e4:
4c:4c:e1:fb:79:42:e3:2b:62:1b:e0:a6:f6:bf:d6:
14:7e:49:a6:5f:74:e9:12:92:d0:50:44:17:9f:4c:
e9:d3:f6:66:d7:01:95:35:55:85:f1:74:85:02:ae:
6d:78:d5:24:92:0d:48:38:c7:55:51:58:87:1e:81:
72:59:ae:f6:03:83:ac:a9:24:9d:e5:2e:5a:91:86:
3f:19:ad:b5:ec:99:b9:dc:4d:e0:00:ef:55:5c:6c:
34:d7:10:11:11:d9:e4:c0:7f:21:d2:fb:67:64:5b:
0f:67:64:4c:7e:af:0c:12:b5:61:c8:9b:5c:7c:35:
2f:c8:3b:f2:f1:05:fb:6f:91:6f:37:10:bb:21:bd:
9f:cd:36:28:d3:a2:e8:5d:d2:ca:aa:a0:8f:6d:c4:
b0:28:f0:e7:59:cf:fd:97:41:f7:36:78:d3:8e:db:
d0:e4:31:b0:82:41:7a:71:89:5e:e8:57:cc:9b:23:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
66.85.88.0/23
103.21.81.0/24
103.226.246.0/24
216.235.80.0/20
IPv6:
2602:ff40::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40501
58722
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:56:9c:ab:6f:f0:23:1b:a9:38:f5:40:2e:57:78:a9:e7:b3:
2e:f3:6d:5e:11:f4:e8:c3:1b:87:ff:e0:03:0a:55:96:96:9d:
18:b2:db:ba:45:37:05:fc:ac:0e:f4:05:05:af:5f:09:13:c5:
95:e0:69:7b:02:9a:eb:9d:23:5a:01:1f:ce:35:f7:88:4b:dd:
4f:a8:90:6d:a1:1e:32:c2:18:f4:8b:04:32:b8:1c:70:33:84:
41:23:7a:94:14:9b:f4:79:1b:1d:b3:30:97:da:a2:78:be:e7:
9f:b5:c0:5c:13:36:59:aa:f2:43:88:12:fc:ba:fc:05:50:c6:
a3:de:1b:9a:cf:48:89:f2:45:cf:f7:be:d5:2c:67:12:e6:1e:
1d:b8:16:32:84:ac:45:12:cc:c3:17:e4:21:2b:dc:56:a4:e2:
ef:30:07:72:27:47:8e:dc:92:d0:1e:b4:5c:f1:e2:38:b4:c9:
aa:e5:d8:26:09:a9:12:79:11:00:08:ef:e8:ae:c2:d6:26:78:
85:a6:8b:ea:c3:9b:5f:c2:07:a8:9b:c0:4c:82:e0:39:fc:1b:
ba:df:1e:89:7a:b1:c8:76:d1:45:fc:26:9a:85:6a:92:d8:ee:
85:d1:cd:46:ab:72:ca:cf:62:15:2f:e9:11:51:19:7b:4a:4b:
6a:89:59:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:29:18 2025 by rpki-client