
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
File: abaad708-212e-4627-8dbe-416a8512677d.cer (raw, json)
Hash identifier: TKTRT3LpYJT8LSGk2ow1Hr25P3h/GvRYqtE1Vfx2Asc=
Subject key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584B2759EE0C8AFF260714CABF80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 11 Sep 2025 00:45:25 +0000
Certificate not after: Wed 15 Dec 2027 01:45:25 +0000
Subordinate resources: AS: 399747
IP: 23.181.144.0/24
IP: 2602:fc6a::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:27:59:ee:0c:8a:ff:26:07:14:ca:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 11 00:45:25 2025 GMT
Not After : Dec 15 01:45:25 2027 GMT
Subject: CN=abaad708-212e-4627-8dbe-416a8512677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:91:94:95:49:1f:f4:49:6b:a8:7f:e1:bf:
3b:c5:a5:c5:b5:f7:50:19:b4:65:b7:33:be:06:31:
f3:3e:d0:cc:60:42:1d:16:8c:3b:d8:51:49:81:53:
c0:54:7a:c6:6c:75:d2:82:82:b8:d6:b7:d0:c7:ec:
3b:ae:11:f3:17:65:2f:ce:fb:66:53:ff:55:4b:07:
ed:6f:58:d2:64:9a:5a:3a:13:a9:74:66:10:56:3e:
74:ca:76:df:8d:58:7b:f7:16:91:6a:6d:da:e3:1b:
35:d8:cb:8d:f8:fd:9e:60:ad:ac:0a:3b:00:25:ab:
76:44:07:98:1a:37:53:4d:af:b4:fa:df:57:eb:09:
cc:ad:5d:d6:4f:66:6f:c1:e0:80:59:2a:d4:b2:27:
06:b6:3d:0c:d8:06:da:33:91:0a:cf:6e:5f:64:ac:
cf:6e:45:d3:23:0f:56:96:27:31:68:31:07:d4:83:
57:57:6f:db:34:f2:d0:99:d5:d5:8d:1f:7e:a0:5c:
df:22:35:36:c8:b3:18:c1:87:fb:5c:33:5a:d8:ac:
70:bf:1d:13:6a:c0:60:88:40:e6:72:ab:64:18:32:
d0:84:a1:62:a9:7e:b5:d6:8d:c2:37:98:7e:bc:32:
ef:07:2b:39:7a:c6:3b:b9:e7:85:c9:b0:68:4f:c0:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.144.0/24
IPv6:
2602:fc6a::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399747
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:28:c7:ea:e1:be:50:1a:2e:30:fc:1c:dd:66:57:d9:0e:02:
95:88:07:9d:af:5b:4a:da:4d:f9:17:e8:3f:38:aa:fe:c7:e9:
35:c8:61:2e:e6:5c:68:06:23:e2:31:74:48:a1:e9:a1:18:b7:
91:49:d3:e7:e0:50:66:34:fa:85:f7:d5:68:25:97:6f:71:ce:
78:58:e5:91:49:13:a8:3f:9a:9d:28:e3:0a:ba:84:d3:5c:78:
d5:e9:8d:82:dd:fc:a2:52:06:da:23:3d:e1:44:43:f5:1e:8d:
c4:57:26:36:92:78:22:c9:8e:98:ae:41:db:56:ac:6b:e8:19:
13:cb:75:34:3c:1e:dc:54:1d:d2:a0:63:50:87:c8:05:44:b4:
25:6a:01:a2:1b:27:6d:33:8f:fb:ec:51:23:e8:18:8b:60:25:
bc:3a:bc:5f:c1:d8:a7:8e:83:ba:cc:5d:3c:be:27:fa:e8:bb:
66:0e:38:9a:56:61:89:23:96:75:a0:59:17:e1:2a:1d:e7:e8:
27:f9:e8:f6:9d:13:4a:b3:70:77:a1:b7:e2:d8:31:ce:1c:1d:
c9:82:51:87:1f:8f:8f:c0:53:ba:92:34:1e:8c:c0:27:06:21:
11:ff:e2:ef:9a:8f:f3:b2:8c:09:8a:4e:45:15:93:de:d4:7d:
0d:26:0e:ca
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsnWe4Miv8mBxTKv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDkxMTAwNDUyNVoXDTI3MTIxNTAxNDUyNVowLzEtMCsGA1UEAxMk
YWJhYWQ3MDgtMjEyZS00NjI3LThkYmUtNDE2YTg1MTI2NzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUGRlJVJH/RJa6h/4b87xaXFtfdQGbRltzO+
BjHzPtDMYEIdFow72FFJgVPAVHrGbHXSgoK41rfQx+w7rhHzF2UvzvtmU/9VSwft
b1jSZJpaOhOpdGYQVj50ynbfjVh79xaRam3a4xs12MuN+P2eYK2sCjsAJat2RAeY
GjdTTa+0+t9X6wnMrV3WT2ZvweCAWSrUsicGtj0M2AbaM5EKz25fZKzPbkXTIw9W
licxaDEH1INXV2/bNPLQmdXVjR9+oFzfIjU2yLMYwYf7XDNa2Kxwvx0TasBgiEDm
cqtkGDLQhKFiqX611o3CN5h+vDLvBys5esY7ueeFybBoT8A8mwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFNUKCsx5fidPRmpNDsODXmjj2B85MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h
YmFhZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZhODUxMjY3N2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FiYWFkNzA4LTIxMmUtNDYyNy04
ZGJlLTQxNmE4NTEyNjc3ZC9hYmFhZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZhODUx
MjY3N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXtZAwDgQCAAIwCAMGBCYC/GoAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYZgzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+KMfq4b5QGi4w/BzdZlfZDgKV
iAedr1tK2k35F+g/OKr+x+k1yGEu5lxoBiPiMXRIoemhGLeRSdPn4FBmNPqF99Vo
JZdvcc54WOWRSROoP5qdKOMKuoTTXHjV6Y2C3fyiUgbaIz3hREP1Ho3EVyY2kngi
yY6YrkHbVqxr6BkTy3U0PB7cVB3SoGNQh8gFRLQlagGiGydtM4/77FEj6BiLYCW8
OrxfwdinjoO6zF08vif66LtmDjiaVmGJI5Z1oFkX4Sod5+gn+ej2nRNKs3B3obfi
2DHOHB3JglGHH4+PwFO6kjQejMAnBiER/+Lvmo/zsowJik5FFZPe1H0NJg7K
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:56 2025 by rpki-client