
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee.cer
File: 8924c74c-a53f-4076-b41d-b99a1028e4ee.cer (raw, json)
Hash identifier: uAdcx852Ryh7Hhj+90qgVdsOxDVOY3acmNA1EQp9Si0=
Subject key identifier: 1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584AA9B93F73ABC9E0975B3569E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 28 Jul 2025 00:45:37 +0000
Certificate not after: Sun 31 Oct 2027 00:45:37 +0000
Subordinate resources: AS: 394822
IP: 23.176.136.0/24
IP: 2602:f928::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:a9:b9:3f:73:ab:c9:e0:97:5b:35:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Jul 28 00:45:37 2025 GMT
Not After : Oct 31 00:45:37 2027 GMT
Subject: CN=8924c74c-a53f-4076-b41d-b99a1028e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:63:24:3d:6b:d0:27:02:26:bc:22:b4:44:
e2:8d:0d:d8:6a:85:ce:88:e5:fc:75:53:b5:87:42:
c6:e4:08:cb:59:ec:e4:f1:05:11:54:51:26:67:38:
a5:84:01:31:f6:3e:b4:dc:6d:c7:8b:12:76:9f:7b:
d1:6a:65:19:04:bb:f5:e6:82:f8:5b:81:fb:82:a3:
c2:30:be:cc:72:ee:8f:85:5d:9f:be:d9:ea:38:a0:
02:be:5e:23:50:b8:d1:e8:f1:6c:95:b0:04:d0:96:
d8:b6:f6:9d:77:dd:13:13:68:81:2d:c0:ee:a3:88:
10:dd:43:2d:c5:1a:6a:49:89:ee:41:59:d1:9a:26:
2e:02:b4:2c:ec:60:98:6a:c3:78:7c:26:80:22:3c:
01:8c:7e:af:96:05:65:ca:79:2b:03:3c:c3:bf:7c:
5d:e6:05:db:e0:60:4f:81:4e:29:5d:5f:a7:fb:b3:
91:7f:96:bc:22:1e:38:fc:9e:4d:3c:fb:09:d2:ca:
31:da:a9:10:b9:fe:41:66:16:93:84:5e:06:31:83:
de:72:bb:1f:dc:8a:5e:8e:e4:14:13:f8:45:34:60:
3e:cb:58:63:68:ae:e9:d7:7f:a8:7a:b0:a1:d5:17:
6a:a7:52:5e:5f:47:df:94:6c:7c:0b:ae:de:20:f8:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:7C:81:56:4E:E6:BA:2E:65:43:6C:E3:D4:62:3E:37:75:5A:11
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8924c74c-a53f-4076-b41d-b99a1028e4ee/8924c74c-a53f-4076-b41d-b99a1028e4ee.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.136.0/24
IPv6:
2602:f928::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
394822
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b5:a2:9b:4a:29:9c:2e:77:d7:50:cf:c7:15:f3:3e:ab:ac:
35:3f:98:0f:5e:51:64:d9:f3:6f:ba:fa:70:32:66:8f:c9:66:
97:6f:c9:be:17:ee:c5:b6:e3:85:4f:d4:03:d7:2c:1a:dc:21:
42:b3:78:c8:c7:ee:68:fd:a3:e9:cc:47:cd:bf:ec:90:7e:63:
0c:3d:67:d1:02:fa:fe:51:49:44:f7:7b:43:75:4e:c7:92:5b:
40:1f:c7:ea:58:bb:4a:d9:f5:12:9d:35:f7:45:6e:b4:e3:c1:
8e:19:2e:fa:0e:4b:3f:b8:29:bd:25:65:20:87:ea:ee:a0:ad:
9b:58:53:c1:28:50:e9:63:c4:b4:c5:09:9d:ae:69:06:06:de:
10:d1:06:98:4d:0b:f1:fd:d2:32:54:51:f2:32:4d:04:16:95:
3b:02:b1:7a:ef:3c:7d:29:48:18:25:ff:34:12:34:dd:9a:d6:
4e:79:5f:1b:66:69:f8:14:e5:b4:46:75:e8:c3:86:e4:89:72:
ca:1f:26:91:2f:f6:40:e8:e5:63:16:57:8a:16:5b:95:3b:26:
86:4b:57:22:dd:d1:76:ee:2a:3b:7a:01:ec:06:b8:7c:5a:b7:
ac:8a:d2:ce:1e:14:a0:1b:56:7b:0c:2f:74:97:47:0f:24:52:
85:cf:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:34 2025 by rpki-client