
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
File: 6f927dec-349c-478b-a1ac-2b628f2bc585.cer (raw, json)
Hash identifier: 68svUDlrawqvpdZ91UWhugJsVidcUKY6PdxMsddmwvc=
Subject key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F432858493936ECA340AD5BEBA3540180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 18 Mar 2025 00:45:33 +0000
Certificate not after: Mon 21 Jun 2027 00:45:33 +0000
Subordinate resources: IP: 136.22.12.0 -- 136.22.31.255
IP: 136.23.0.0/18
IP: 162.120.128.0/17
IP: 2606:40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:36:ec:a3:40:ad:5b:eb:a3:54:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Mar 18 00:45:33 2025 GMT
Not After : Jun 21 00:45:33 2027 GMT
Subject: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:59:82:63:99:22:f2:d0:a8:db:1a:ef:1c:
d5:81:e3:21:ce:56:28:a6:a3:b9:af:54:88:b8:30:
b9:d1:b3:f6:07:83:0c:68:31:95:dc:2e:c4:5f:1f:
a5:0f:1f:c0:ef:22:47:3d:f2:1a:19:36:d4:27:7d:
df:50:d9:e3:c8:ee:a9:73:6b:8d:6a:8f:66:8b:08:
bc:48:c9:aa:0a:4b:96:2e:55:19:ca:7e:8f:c7:db:
30:f8:60:b9:de:e1:21:1e:40:da:af:f3:49:ff:af:
49:09:70:ad:42:63:8b:40:dc:e5:4b:04:29:9c:4c:
fd:a8:1e:7b:2f:20:da:c8:65:4e:ee:35:5c:13:9b:
e1:f6:e8:09:b7:65:b4:67:99:9b:4c:66:eb:62:32:
79:25:0c:f2:e2:53:16:cf:c1:29:e4:d3:25:ff:94:
c0:21:42:6a:9c:47:7c:99:ca:ae:58:cb:bf:99:da:
47:e3:e1:36:fb:90:7e:4f:12:f2:77:fa:ef:55:9c:
8c:24:bc:10:4b:6b:1f:94:4c:a9:9d:9c:3c:bf:7d:
84:b1:c9:0c:cf:58:21:c4:9b:6c:bd:39:fb:66:b6:
fb:d0:c5:54:b5:fd:1e:68:93:d9:c8:3f:25:e2:05:
0a:f9:a1:2b:4c:4a:db:17:46:5e:58:d8:5c:31:70:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.12.0-136.22.31.255
136.23.0.0/18
162.120.128.0/17
IPv6:
2606:40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:37:63:6a:0a:10:88:ea:ba:ab:71:e0:30:e5:38:0b:01:6c:
68:b4:32:f3:88:e2:b0:65:7d:e6:df:d9:41:49:64:5c:0e:34:
f5:d1:ad:17:78:6c:ac:08:50:a9:4f:f0:3a:60:5b:be:35:6c:
01:18:10:9c:eb:97:8f:d6:27:ea:12:a0:27:d5:47:7a:f6:6c:
8e:89:ea:77:c7:e2:08:f5:c4:2a:5c:3c:bc:58:58:96:80:17:
40:17:f9:e6:82:74:0d:1e:7e:f3:65:7d:94:f9:16:87:fe:28:
88:42:6a:5a:f2:d9:d6:7a:40:57:65:32:a4:9b:6d:84:34:c4:
a3:fc:fd:06:ef:8c:70:8f:fb:04:5a:95:2b:ff:8b:b4:09:23:
74:aa:f4:4a:36:20:fb:ab:ef:79:f2:d6:d6:33:f0:73:80:3f:
bc:78:d9:4b:95:57:9d:42:c3:29:28:0e:1f:90:71:ad:11:bc:
d5:4e:c5:86:3f:07:19:5a:e5:2d:39:b4:59:55:8e:cb:6c:0d:
16:ee:7d:1c:67:9d:a7:c1:4f:ee:dc:32:5a:b8:47:94:db:a9:
fd:48:3a:fd:5f:81:e7:ed:a6:7a:c6:f5:0a:1f:23:91:fc:d7:
d4:cf:70:17:3f:72:ab:49:7c:d8:34:e7:1a:70:3e:6f:da:59:
83:93:da:ab
-----BEGIN CERTIFICATE-----
MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEk5NuyjQK1b66NUAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI1MDMxODAwNDUzM1oXDTI3MDYyMTAwNDUzM1owLzEtMCsGA1UEAxMk
NmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJjNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hZZgmOZIvLQqNsa7xzVgeMhzlYopqO5r1SI
uDC50bP2B4MMaDGV3C7EXx+lDx/A7yJHPfIaGTbUJ33fUNnjyO6pc2uNao9miwi8
SMmqCkuWLlUZyn6Px9sw+GC53uEhHkDar/NJ/69JCXCtQmOLQNzlSwQpnEz9qB57
LyDayGVO7jVcE5vh9ugJt2W0Z5mbTGbrYjJ5JQzy4lMWz8Ep5NMl/5TAIUJqnEd8
mcquWMu/mdpH4+E2+5B+TxLyd/rvVZyMJLwQS2sflEypnZw8v32EsckMz1ghxJts
vTn7Zrb70MVUtf0eaJPZyD8l4gUK+aErTErbF0ZeWNhcMXAKjQIDAQABo4IEIjCC
BB4wHQYDVR0OBBYEFP2BYlJHvKzxuQlQURndbz8WR9l3MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82
ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1h
MWFjLTJiNjI4ZjJiYzU4NS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYy
YmM1ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQgYIKwYBBQUH
AQcBAf8EMzAxMCAEAgABMBowDAMEAogWDAMEBYgWAAMEBogXAAMEB6J4gDANBAIA
AjAHAwUAJgYAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCEN2NqChCI6rqrceAw5TgLAWxotDLziOKwZX3m
39lBSWRcDjT10a0XeGysCFCpT/A6YFu+NWwBGBCc65eP1ifqEqAn1Ud69myOiep3
x+II9cQqXDy8WFiWgBdAF/nmgnQNHn7zZX2U+RaH/iiIQmpa8tnWekBXZTKkm22E
NMSj/P0G74xwj/sEWpUr/4u0CSN0qvRKNiD7q+958tbWM/BzgD+8eNlLlVedQsMp
KA4fkHGtEbzVTsWGPwcZWuUtObRZVY7LbA0W7n0cZ52nwU/u3DJauEeU26n9SDr9
X4Hn7aZ6xvUKHyOR/NfUz3AXP3KrSXzYNOcacD5v2lmDk9qr
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:32 2025 by rpki-client