
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
File: f42ba754-2a4d-4b4e-b364-698af500fc82.cer (raw, json)
Hash identifier: 1YG1zWdHn5TP7rWlKE9j5gNiS8xtsf/XeXmhRKcfe7w=
Subject key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584B640ADB83011E02FE63141B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Oct 2025 18:30:25 +0000
Certificate not after: Thu 12 Nov 2026 01:45:23 +0000
Subordinate resources: AS: 1613
AS: 398710
IP: 168.100.224.0/19
IP: 185.176.52.0/22
IP: 2605:57c0::/32
IP: 2605:e740::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:64:0a:db:83:01:1e:02:fe:63:14:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Oct 2 18:30:25 2025 GMT
Not After : Nov 12 01:45:23 2026 GMT
Subject: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:89:99:66:7b:e9:58:b7:a4:d5:b8:55:73:
3a:25:e0:53:47:c9:9f:04:6e:ac:06:a7:ab:d1:54:
b3:91:47:a0:a2:e3:3d:fa:50:98:e9:e8:db:3f:96:
e4:de:92:98:d9:e6:01:88:4a:6f:e8:e6:51:d9:0e:
41:ea:be:65:56:0f:54:03:06:91:9b:da:7d:f3:d4:
3d:c3:26:12:9c:ed:8b:d5:43:98:0e:05:ac:35:50:
ea:ef:13:6f:72:f7:d0:3f:37:3a:e5:3c:8c:76:0a:
8f:bd:53:eb:a9:ad:f0:44:b9:37:c8:b0:cd:ff:04:
14:da:2f:ef:b6:4d:8a:09:f1:dd:17:03:93:8d:be:
73:6b:d7:a3:ee:f2:70:10:21:57:05:e2:48:20:24:
c5:7b:3e:ea:63:30:2d:5f:2d:75:c9:1d:70:34:3e:
36:ed:9f:3b:5d:93:3b:c1:ee:d2:8f:7d:4e:a0:69:
d9:5c:40:be:f2:b8:08:77:7f:d4:59:25:f4:62:2c:
73:d4:42:d0:24:75:b0:55:df:64:fb:4a:e8:43:6e:
75:f2:f9:6f:15:58:d3:24:73:00:31:9e:b2:8a:61:
5b:9c:d0:35:ee:ee:fa:51:ce:55:43:52:f7:3e:d2:
7a:26:ed:02:ec:ab:36:7d:16:77:68:20:b4:71:3b:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.224.0/19
185.176.52.0/22
IPv6:
2605:57c0::/32
2605:e740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1613
398710
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:36:fa:e8:52:fa:be:74:63:cc:b6:69:5f:bf:c3:6b:aa:93:
8d:74:e8:59:e8:c5:73:90:e5:75:98:09:89:b8:0c:af:cd:44:
23:1b:4a:58:cf:7f:97:89:a2:ed:29:f2:55:3f:6a:f9:e0:ee:
f5:10:9d:c8:fb:4e:ac:26:bd:f4:48:d4:d7:1a:a4:41:c4:cd:
d2:f3:ae:c4:7f:fe:21:ab:60:8d:4a:f3:5b:65:10:37:3c:0f:
73:ce:31:68:80:82:81:95:d6:e0:6f:b0:0a:e0:3e:49:5a:fe:
7e:b4:fd:29:ef:16:c9:0d:0a:20:a6:9a:90:88:e5:bd:f9:27:
b1:c9:7d:73:72:d3:6f:1d:dc:b5:4d:9a:6f:fd:f2:f5:37:ed:
49:7f:23:ab:85:21:79:42:c6:65:7c:2c:9e:20:63:f1:4e:aa:
67:3c:d3:99:2a:53:8a:ed:79:2c:55:6d:2c:2d:29:f1:70:d6:
90:66:c3:30:44:1b:9c:55:db:4c:09:74:bc:f9:8d:9e:03:ad:
20:0f:37:34:39:2f:98:ef:bd:d6:e9:c6:bb:c7:2f:ba:23:c8:
6a:02:8a:90:12:98:d3:76:59:23:e0:d3:3e:01:e0:bc:33:db:
2f:5d:ef:26:8f:4a:99:cd:5d:9f:07:4d:88:c7:1b:2d:b3:36:
d3:a4:57:57
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEtkCtuDAR4C/mMUG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MTAwMjE4MzAyNVoXDTI2MTExMjAxNDUyM1owLzEtMCsGA1UEAxMk
ZjQyYmE3NTQtMmE0ZC00YjRlLWIzNjQtNjk4YWY1MDBmYzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeiJmWZ76Vi3pNW4VXM6JeBTR8mfBG6sBqer
0VSzkUegouM9+lCY6ejbP5bk3pKY2eYBiEpv6OZR2Q5B6r5lVg9UAwaRm9p989Q9
wyYSnO2L1UOYDgWsNVDq7xNvcvfQPzc65TyMdgqPvVPrqa3wRLk3yLDN/wQU2i/v
tk2KCfHdFwOTjb5za9ej7vJwECFXBeJIICTFez7qYzAtXy11yR1wND427Z87XZM7
we7Sj31OoGnZXEC+8rgId3/UWSX0Yixz1ELQJHWwVd9k+0roQ2518vlvFVjTJHMA
MZ6yimFbnNA17u76Uc5VQ1L3PtJ6Ju0C7Ks2fRZ3aCC0cTuvdQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFH7C3ya5iMURlPO8LEQRNA3CWgwFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m
NDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUwMGZjODIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y0MmJhNzU0LTJhNGQtNGI0ZS1i
MzY0LTY5OGFmNTAwZmM4Mi9mNDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUw
MGZjODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBIEAgABMAwDBAWoZOADBAK5sDQwFAQCAAIwDgMFACYFV8ADBQAm
BedAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAgZNAgMGFXYwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjzb6
6FL6vnRjzLZpX7/Da6qTjXToWejFc5DldZgJibgMr81EIxtKWM9/l4mi7SnyVT9q
+eDu9RCdyPtOrCa99EjU1xqkQcTN0vOuxH/+IatgjUrzW2UQNzwPc84xaICCgZXW
4G+wCuA+SVr+frT9Ke8WyQ0KIKaakIjlvfknscl9c3LTbx3ctU2ab/3y9TftSX8j
q4UheULGZXwsniBj8U6qZzzTmSpTiu15LFVtLC0p8XDWkGbDMEQbnFXbTAl0vPmN
ngOtIA83NDkvmO+91unGu8cvuiPIagKKkBKY03ZZI+DTPgHgvDPbL13vJo9Kmc1d
nwdNiMcbLbM206RXVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:12:20 2025 by rpki-client