
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891.cer
File: d53c327d-4db5-439b-a376-ef8e86042891.cer (raw, json)
Hash identifier: v4k3X3gGbvkWPFieyNC8h2yrFmj/48T51Z959X1TLII=
Subject key identifier: 2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584B99CFF590A72D734D399A7B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 22 Oct 2025 00:45:23 +0000
Certificate not after: Tue 25 Jan 2028 01:45:23 +0000
Subordinate resources: IP: 143.229.0.0/16
IP: 192.76.182.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:99:cf:f5:90:a7:2d:73:4d:39:9a:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Oct 22 00:45:23 2025 GMT
Not After : Jan 25 01:45:23 2028 GMT
Subject: CN=d53c327d-4db5-439b-a376-ef8e86042891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:f3:05:5e:7e:24:50:de:46:0a:cd:fd:ae:
8b:cf:cd:45:87:eb:a5:49:2b:38:cc:16:c4:0d:18:
58:88:63:26:f2:53:de:12:d2:0a:e0:bc:d1:d2:1d:
ca:36:7e:06:d6:85:d9:b8:14:70:6e:29:a6:97:09:
3a:87:8d:93:c8:5e:50:05:93:fe:e9:6b:b2:98:a6:
7d:d5:a4:1d:93:c5:55:1c:fe:02:17:96:11:b6:0a:
02:6e:75:3f:5b:1e:ab:bf:7b:79:63:9b:c0:e3:fc:
e2:50:b0:8c:a4:10:57:5a:a1:7f:1f:87:08:64:a3:
7a:c0:68:4b:52:d7:8c:47:a2:14:3b:bf:c0:30:5b:
af:e7:91:42:0f:3f:13:21:dc:90:64:9a:21:e6:74:
48:53:80:d4:88:b0:3e:59:b4:83:9b:1b:5c:e6:a0:
0d:1b:77:b3:91:3c:1e:cb:f4:73:db:8d:37:79:28:
66:6a:8d:c8:49:4b:6f:c0:88:65:d3:53:05:c6:aa:
be:c2:e8:ef:5a:e6:c5:b7:77:5a:a1:97:04:f9:ee:
b0:0e:11:5e:ef:06:8b:68:70:fc:4a:60:d1:34:4f:
85:39:4c:24:fd:34:5a:35:ba:20:7a:c1:0a:76:2a:
73:38:f2:4c:54:c4:67:f0:d8:8a:d3:a9:74:f2:09:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:B1:C4:53:85:E2:E3:19:EB:71:97:EC:C2:D3:99:E3:80:05:01
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d53c327d-4db5-439b-a376-ef8e86042891/d53c327d-4db5-439b-a376-ef8e86042891.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
143.229.0.0/16
192.76.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:cc:b3:2c:b7:de:c9:c8:1b:f3:bb:83:1f:28:00:b9:0c:3c:
a7:ca:70:89:b3:92:2b:93:1d:51:ea:bc:ec:ca:2d:fa:cb:16:
8b:6a:31:93:4c:00:90:37:1e:82:c5:2e:1e:c0:92:e8:5e:a5:
f7:75:7f:fe:8a:2f:33:38:ac:03:df:bf:fb:c7:a4:e9:a0:ec:
70:79:8b:6d:dd:d4:22:89:0e:a2:10:b9:d8:4d:70:4c:29:95:
15:a1:33:61:58:e0:b1:33:8b:0c:d2:9b:f7:dc:a4:49:b4:dd:
09:08:1f:7c:cc:8d:af:7a:fe:cc:2d:3c:2c:79:f3:c2:34:5f:
da:16:11:f7:6f:df:b3:46:86:ad:51:0e:51:53:45:e9:81:fa:
08:08:a7:3b:1c:9c:d4:81:15:32:4f:27:e1:ec:d3:60:23:98:
bc:2d:75:c7:81:24:06:c3:54:24:03:b7:7a:4f:7c:4c:e7:5a:
ac:c8:f5:4e:27:b2:23:0e:02:71:9f:e4:50:2f:07:96:c9:34:
5e:a8:85:3c:89:e3:2d:f9:22:a7:19:74:5e:a6:37:69:31:f9:
db:f2:f5:39:91:9c:0c:a3:dd:53:4f:6d:65:ae:ce:9a:1f:ce:
b4:d4:2a:dc:16:9e:61:15:32:0d:a9:9f:d9:6b:54:9b:f4:f7:
98:bc:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:51 2025 by rpki-client