
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
File: 5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer (raw, json)
Hash identifier: vylyy4TQ2j6mTN4T1pMuPIxuUVQKLic54a3RzDCHgmg=
Subject key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584B00445AEC31D0260783F90500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 28 Aug 2025 00:45:25 +0000
Certificate not after: Wed 01 Dec 2027 01:45:25 +0000
Subordinate resources: AS: 399032
IP: 23.185.64.0/24
IP: 2602:fe76::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:00:44:5a:ec:31:d0:26:07:83:f9:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Aug 28 00:45:25 2025 GMT
Not After : Dec 1 01:45:25 2027 GMT
Subject: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:07:b5:43:c7:1e:e4:f4:99:69:88:23:2f:
bb:a2:aa:36:8f:13:2d:52:1c:6c:96:d6:41:86:45:
c1:eb:f2:45:be:c9:ac:63:cd:ae:99:49:d2:32:b1:
46:0b:e7:98:0e:ab:41:23:d8:a8:54:47:75:8e:02:
97:15:66:2c:f6:f0:f8:70:69:7b:2a:2d:84:8c:c7:
bf:77:ef:72:02:3d:b4:06:9a:49:cd:03:6e:3b:35:
4d:68:f7:7f:95:b6:73:7d:01:14:15:0d:20:ec:8c:
e1:1a:ca:85:2f:5f:81:46:95:40:41:84:e1:85:4a:
90:35:4e:86:3a:e5:72:46:bf:a0:d6:29:eb:ba:0c:
da:e1:c1:9f:32:5b:99:10:a5:b7:aa:f7:13:8a:0f:
79:a9:43:6a:61:57:79:db:51:90:f0:c2:73:9b:2f:
0c:b8:29:7e:9b:f0:e8:ca:7f:c7:ea:ca:a8:e4:b1:
6a:11:44:2b:77:e6:58:62:68:98:44:77:4b:7c:de:
fb:f0:e5:16:fb:86:61:ce:f9:c9:83:d1:f2:ff:60:
74:59:5e:13:93:c5:79:f9:0a:e1:53:7e:2d:9c:b3:
76:6f:3d:df:93:90:34:34:65:4a:e2:16:98:c1:a7:
5a:f9:22:c4:03:b9:70:8d:86:66:e9:f1:bc:a5:8c:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.64.0/24
IPv6:
2602:fe76::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399032
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c9:84:dc:fb:d1:ae:54:ad:89:3a:70:70:f6:f9:36:85:b8:
a2:35:e8:78:ab:c9:03:02:b1:12:fb:d0:03:92:a7:39:64:82:
46:74:0d:e2:57:c5:b7:6c:e0:e0:86:fd:ff:41:7e:32:2b:0d:
8a:5b:86:48:e6:0b:f6:dc:65:3d:e0:b7:12:45:d9:40:6a:1e:
d1:a0:ae:b0:d6:fa:08:a0:3c:99:8c:9d:ca:ef:6c:ce:36:9c:
56:79:df:58:58:a5:bc:cc:c3:d0:15:50:2d:c8:b3:31:e4:47:
95:82:47:57:ae:1d:41:79:15:e0:6e:27:42:d6:6a:2f:a7:d8:
19:33:25:d6:e0:e0:40:c4:12:0a:0f:2a:9b:6a:18:f5:c5:31:
e3:d2:2c:4a:a7:60:4d:81:fd:27:24:44:0b:1e:27:e2:95:bc:
74:52:5e:0c:9c:76:12:b8:9e:67:3d:b2:07:35:29:e4:39:dc:
c9:f7:36:89:fc:3e:4f:cd:3e:bc:da:52:d3:45:27:8f:57:e7:
81:40:f6:bf:8b:be:60:cd:57:c7:c5:d7:43:a1:7b:98:bc:16:
8e:6a:e7:6e:1b:26:be:b1:07:2b:5c:8e:af:8d:68:8c:cb:66:
3a:e9:c3:83:eb:27:90:15:14:f8:6d:b7:ba:df:f7:c2:30:dc:
85:61:f1:98
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsARFrsMdAmB4P5BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MDgyODAwNDUyNVoXDTI3MTIwMTAxNDUyNVowLzEtMCsGA1UEAxMk
NWI0MTFiOGUtM2M2Yi00NzQzLWFkMzktNTBhMzJhNzE2YWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkawHtUPHHuT0mWmIIy+7oqo2jxMtUhxsltZB
hkXB6/JFvsmsY82umUnSMrFGC+eYDqtBI9ioVEd1jgKXFWYs9vD4cGl7Ki2EjMe/
d+9yAj20BppJzQNuOzVNaPd/lbZzfQEUFQ0g7IzhGsqFL1+BRpVAQYThhUqQNU6G
OuVyRr+g1inrugza4cGfMluZEKW3qvcTig95qUNqYVd521GQ8MJzmy8MuCl+m/Do
yn/H6sqo5LFqEUQrd+ZYYmiYRHdLfN778OUW+4ZhzvnJg9Hy/2B0WV4Tk8V5+Qrh
U34tnLN2bz3fk5A0NGVK4haYwada+SLEA7lwjYZm6fG8pYzPOwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFNQwkD0Ni5evGD+YxFHbz499GoTPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81
YjQxMWI4ZS0zYzZiLTQ3NDMtYWQzOS01MGEzMmE3MTZhZDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzViNDExYjhlLTNjNmItNDc0My1h
ZDM5LTUwYTMyYTcxNmFkNC81YjQxMWI4ZS0zYzZiLTQ3NDMtYWQzOS01MGEzMmE3
MTZhZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXuUAwDgQCAAIwCAMGBCYC/nYAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYWuDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfyYTc+9GuVK2JOnBw9vk2hbii
Neh4q8kDArES+9ADkqc5ZIJGdA3iV8W3bODghv3/QX4yKw2KW4ZI5gv23GU94LcS
RdlAah7RoK6w1voIoDyZjJ3K72zONpxWed9YWKW8zMPQFVAtyLMx5EeVgkdXrh1B
eRXgbidC1movp9gZMyXW4OBAxBIKDyqbahj1xTHj0ixKp2BNgf0nJEQLHifilbx0
Ul4MnHYSuJ5nPbIHNSnkOdzJ9zaJ/D5PzT682lLTRSePV+eBQPa/i75gzVfHxddD
oXuYvBaOauduGya+sQcrXI6vjWiMy2Y66cOD6yeQFRT4bbe63/fCMNyFYfGY
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:31 2025 by rpki-client