
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c69f2660-855a-45bb-bd96-973ef12b06d4.cer
File: c69f2660-855a-45bb-bd96-973ef12b06d4.cer (raw, json)
Hash identifier: Lwacuh4ED9p79obVCDWqZq/EnWgHDsACeZ0qI0p7s0s=
Subject key identifier: 6D:E6:01:CD:0D:25:96:3A:98:93:83:B6:34:0F:5E:95:FE:76:40:E9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584B7A145B1A4C1D9860E28873A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c69f2660-855a-45bb-bd96-973ef12b06d4/c69f2660-855a-45bb-bd96-973ef12b06d4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c69f2660-855a-45bb-bd96-973ef12b06d4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Oct 2025 15:57:20 +0000
Certificate not after: Fri 01 Jan 2027 13:45:25 +0000
Subordinate resources: AS: 393678
IP: 142.248.176.0/22
IP: 2602:f781::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7a:14:5b:1a:4c:1d:98:60:e2:88:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Oct 10 15:57:20 2025 GMT
Not After : Jan 1 13:45:25 2027 GMT
Subject: CN=c69f2660-855a-45bb-bd96-973ef12b06d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:20:77:02:e1:7b:13:f2:61:19:8c:4e:5e:
b7:88:15:e3:6e:0e:93:25:4d:85:91:41:13:26:6b:
85:54:e1:19:c1:a1:49:ad:37:c8:28:06:db:dc:11:
ea:f2:e3:8a:ac:4a:f6:39:b7:8a:3c:4a:0a:d1:bc:
98:e1:e0:40:ee:f7:9f:19:ab:ea:3b:4d:21:c8:da:
6a:95:e6:79:ed:6f:9c:fe:bc:d2:c7:ca:e2:a6:99:
d4:23:96:75:c6:04:e1:17:d5:c4:ff:47:e4:f7:ac:
42:c6:f7:84:07:8f:6a:db:15:73:01:60:ac:f3:87:
03:d7:bd:42:d2:20:17:3c:1b:88:f1:52:d5:e7:d7:
95:15:5a:3e:3d:85:9b:c4:c4:5b:ef:26:95:b7:e9:
34:45:81:27:a5:3d:05:df:1e:bd:97:2b:50:43:de:
f6:31:9f:f5:d2:f9:57:fc:ee:0c:aa:aa:c6:b2:96:
b5:27:89:8f:d9:f2:d1:e6:28:5b:ef:e6:67:12:f7:
0b:96:24:d8:91:12:5f:4e:ab:ee:e3:46:bd:c5:8c:
df:e7:7d:d8:34:8b:1f:e2:78:32:20:67:5c:eb:d3:
10:4d:8c:aa:4d:cc:d0:55:82:22:37:0e:a7:10:8c:
92:ba:b8:6b:b5:fb:83:f8:77:e3:b3:5d:83:81:33:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:01:CD:0D:25:96:3A:98:93:83:B6:34:0F:5E:95:FE:76:40:E9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c69f2660-855a-45bb-bd96-973ef12b06d4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c69f2660-855a-45bb-bd96-973ef12b06d4/c69f2660-855a-45bb-bd96-973ef12b06d4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
142.248.176.0/22
IPv6:
2602:f781::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393678
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:6d:9b:94:e6:5c:25:36:92:f9:df:93:20:6d:47:67:9d:78:
5e:da:62:a0:59:88:40:98:99:38:8d:8e:24:61:93:a9:7b:d3:
b0:e8:43:e7:c8:0b:95:d0:0c:71:ec:75:55:5c:32:dc:8c:d4:
af:62:a7:00:58:ef:56:86:1c:32:8d:f9:d8:18:8b:fa:0c:00:
85:b7:20:c4:ed:7b:6a:b0:c6:3e:e3:09:80:a2:e4:ad:2f:70:
d7:4d:78:f5:2d:bb:26:9a:a4:59:b4:d1:33:0f:79:5f:ae:0c:
20:e5:76:0b:a4:69:da:91:bf:c2:7b:a9:08:00:75:bb:2f:62:
18:06:00:e6:6f:04:47:ac:e2:5a:14:00:86:24:3b:a6:bc:5a:
a4:74:6b:ce:99:73:4e:54:1c:c4:3e:c4:5a:10:65:26:da:81:
94:79:9c:68:f1:66:21:23:2d:e2:b5:c7:29:00:f8:9c:1f:f2:
1d:b0:b8:a3:6f:eb:98:4d:66:e8:66:ae:17:9e:fc:e0:c7:8f:
4c:48:1a:54:d0:3e:5c:86:81:11:a4:da:0a:66:c5:91:fb:58:
be:9a:06:8f:af:1d:c3:9d:65:cd:17:fd:27:46:4c:28:ed:ff:
27:56:77:fd:a8:9f:48:9a:38:c7:82:33:1d:3e:c6:3a:93:a1:
9f:c3:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:42 2025 by rpki-client