
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer
File: 554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer (raw, json)
Hash identifier: PamEr4gx8x/7IS156jCoygwMzhyn4e+ARTjHqD/sypY=
Subject key identifier: 53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584BBF9DF79EE14B2DBF2083AF30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Nov 2025 13:45:22 +0000
Certificate not after: Mon 07 Feb 2028 13:45:22 +0000
Subordinate resources: AS: 12132
IP: 199.231.220.0/22
IP: 2604:fc0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:9d:f7:9e:e1:4b:2d:bf:20:83:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Nov 4 13:45:22 2025 GMT
Not After : Feb 7 13:45:22 2028 GMT
Subject: CN=554d5371-2bc4-4645-9f6e-22976d2fc4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:76:04:00:3c:ca:c7:42:ca:02:ae:cb:8a:e3:
53:bf:b9:d7:9f:84:47:87:65:98:a2:75:99:6d:5c:
b3:06:5d:a7:5f:e7:60:fa:1c:b5:0b:b0:5d:ed:e3:
41:01:e8:8e:46:da:df:57:64:9c:14:e2:bc:e8:13:
2d:99:ff:52:e3:97:20:fd:07:08:a1:4f:f0:be:5e:
3c:16:89:eb:cd:00:5a:2c:65:e5:f9:3e:bf:9f:83:
3c:c8:ac:2e:02:82:8a:49:5b:1f:09:38:7d:b5:fc:
f3:40:d7:72:93:56:f0:43:cd:0b:70:fc:9a:d8:25:
65:cd:11:24:aa:cb:e0:f6:64:55:14:c8:90:6e:71:
55:ab:48:5d:09:88:d9:54:07:1e:c4:d0:55:f2:c1:
4d:d7:06:4c:be:42:89:9d:84:c9:87:51:65:1f:da:
8e:b8:06:8b:d6:b7:c6:cf:6e:74:a6:e8:9c:c3:57:
ec:cb:61:14:ad:83:4c:b7:db:28:62:7e:73:00:4c:
13:e1:11:d1:d1:75:88:9c:93:0f:7a:d4:38:08:54:
1c:05:a2:b4:4e:38:b2:13:4c:cd:80:77:bc:08:fa:
fc:35:cf:9b:8d:33:10:55:29:ed:cd:9e:a1:04:72:
18:30:d3:b2:a5:56:31:59:1b:e4:82:1c:50:21:77:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
199.231.220.0/22
IPv6:
2604:fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12132
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c5:40:59:c4:ab:7c:b0:7a:61:d9:92:b1:ac:60:40:40:41:
0d:b2:c0:64:12:2c:29:67:d5:97:25:59:e2:6e:d8:97:a3:38:
55:14:af:ea:e5:42:d3:9c:a2:74:3b:f2:41:ae:0a:37:ef:e0:
34:0a:de:4d:80:9d:c5:3a:0b:b1:39:68:2e:4e:85:c9:95:46:
34:c0:f3:99:f5:92:fc:5d:3a:f7:68:85:3d:67:ee:78:8f:53:
39:52:58:85:1f:ef:08:03:65:6d:62:26:8c:d8:4f:ac:6a:a8:
73:0a:b2:d9:e5:7e:96:aa:bd:50:c0:a9:41:bd:80:90:d3:5f:
39:70:cb:dc:e4:45:1f:4b:ba:2f:d1:06:a7:ff:25:40:b0:46:
ac:ba:fc:50:3d:94:29:0b:00:cf:05:44:a8:f1:1b:31:6f:8b:
b4:f9:05:ac:f0:67:d4:33:8d:e8:81:ea:e0:8b:19:36:b8:54:
17:fa:76:de:08:86:aa:74:b6:56:f2:75:3d:25:f0:2a:23:db:
4d:77:aa:ad:4b:6b:54:fd:82:f4:de:c5:fc:f6:fc:7b:ef:c7:
39:a9:f2:32:8c:8f:71:97:41:f1:7b:d3:a4:ae:e9:15:74:07:
86:2f:0a:96:fb:94:46:e7:29:60:ce:9e:7a:da:54:b5:49:b7:
1b:60:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:39 2025 by rpki-client