
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce057dc0-eacf-4e3d-97be-e9b0b320d196.cer
File: ce057dc0-eacf-4e3d-97be-e9b0b320d196.cer (raw, json)
Hash identifier: WlC/q5VPG5ci/4eUERu3u4X2q9w6nzZ8F7IqVdyGgHE=
Subject key identifier: BD:8D:EE:69:BB:48:9C:8C:ED:6E:28:43:59:5A:CD:85:32:C1:0F:6D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584B7B1A6D0A32DB67FAF51A3180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce057dc0-eacf-4e3d-97be-e9b0b320d196/ce057dc0-eacf-4e3d-97be-e9b0b320d196.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce057dc0-eacf-4e3d-97be-e9b0b320d196/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 11 Oct 2025 00:45:22 +0000
Certificate not after: Fri 14 Jan 2028 01:45:22 +0000
Subordinate resources: AS: 20194
IP: 204.11.40.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7b:1a:6d:0a:32:db:67:fa:f5:1a:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Oct 11 00:45:22 2025 GMT
Not After : Jan 14 01:45:22 2028 GMT
Subject: CN=ce057dc0-eacf-4e3d-97be-e9b0b320d196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:9b:78:fe:e2:40:d0:65:a1:36:fa:c3:f7:
1c:13:c2:1e:78:0b:46:51:20:b3:6e:bb:bc:1e:91:
a4:08:ba:d4:16:23:ec:f7:f5:06:77:bc:74:5b:bc:
76:3e:4e:54:2c:72:09:64:73:7e:5b:70:e4:e4:8b:
7c:95:c3:22:17:7d:6c:3e:27:be:d1:33:7e:13:ad:
df:ce:f6:d4:22:c7:42:dd:02:56:53:2f:b0:1d:17:
37:fd:8d:e4:55:1e:70:b5:ea:f2:94:b4:3c:ca:a1:
e5:4d:d4:3d:04:f2:7b:31:12:73:3e:d6:2e:24:7a:
62:c7:49:ba:ba:33:ea:ef:7d:12:e4:61:76:79:37:
0f:66:36:0e:4a:da:be:28:5d:b6:be:7a:3b:99:e4:
f0:35:49:1f:9c:23:b4:3c:44:08:79:e6:08:2d:df:
e4:ca:21:a2:e2:d3:81:84:fe:df:16:86:a2:a2:4e:
41:69:0f:5e:87:2b:63:2e:d6:ce:3c:54:9a:07:84:
22:59:48:62:08:86:ce:94:2c:49:a8:7a:9c:62:9a:
06:9f:10:d6:26:a1:d2:60:8c:f2:1c:ce:e8:00:79:
7e:e9:97:db:b7:5a:54:f6:03:74:da:ac:47:ef:8a:
ee:10:7a:33:9f:b6:c4:85:5c:f5:bc:3e:a5:f9:d4:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:EE:69:BB:48:9C:8C:ED:6E:28:43:59:5A:CD:85:32:C1:0F:6D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce057dc0-eacf-4e3d-97be-e9b0b320d196/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce057dc0-eacf-4e3d-97be-e9b0b320d196/ce057dc0-eacf-4e3d-97be-e9b0b320d196.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.40.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20194
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:04:d2:da:96:43:ea:d3:bc:82:22:e3:c2:68:0b:21:34:01:
c2:42:01:c5:41:9a:22:3b:5c:b4:bc:90:3f:24:f2:0b:a1:88:
2f:09:21:bf:19:5b:ef:ff:34:1a:bf:13:fa:cb:b9:d0:65:55:
c2:a8:12:c8:3b:9e:1a:7a:f0:e2:bb:ba:09:3e:74:b4:02:bd:
0f:dc:2f:9a:de:f2:0a:a1:48:16:ec:72:90:8b:7f:f3:7e:57:
6d:71:bb:73:a5:91:63:e2:b5:0f:6b:df:01:e9:6a:43:c9:31:
b7:a3:76:60:17:d3:70:20:e8:2e:aa:51:e1:43:07:68:42:80:
18:b6:eb:0c:44:1f:47:d6:80:7a:37:21:93:8c:2b:5c:4b:fd:
83:0a:43:0d:61:01:0d:f4:9f:9b:af:6f:85:1d:8c:0d:93:6b:
91:72:93:0e:ed:86:b7:4b:62:80:7d:df:09:fe:dc:ad:d3:83:
99:c1:9c:48:32:86:af:a6:78:94:e5:52:5e:a7:a2:77:a3:e9:
41:1f:db:02:ee:48:3b:e5:ad:9e:40:da:7f:0d:5a:07:27:f6:
6a:f1:4e:d7:38:79:7f:6e:76:5e:77:d9:77:2e:4d:81:de:9c:
47:7a:1d:4f:f8:3a:70:37:78:90:e7:f0:ff:35:19:6d:97:17:
bc:74:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:24 2025 by rpki-client