
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c90c6eb7-da81-4446-9f00-839f82a6d705.cer
File: c90c6eb7-da81-4446-9f00-839f82a6d705.cer (raw, json)
Hash identifier: Gqa4MGWITL0LZ+XjmcrCYzou0SwpQbLz0qhWMhh46vw=
Subject key identifier: 6F:FA:02:63:9F:32:71:18:79:47:7B:FC:3C:E8:92:8C:1F:DD:71:A7
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial: 010D0C9F4328584BA2300433462659ABCEF05D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c90c6eb7-da81-4446-9f00-839f82a6d705/c90c6eb7-da81-4446-9f00-839f82a6d705.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c90c6eb7-da81-4446-9f00-839f82a6d705/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 25 Oct 2025 00:45:24 +0000
Certificate not after: Fri 28 Jan 2028 01:45:24 +0000
Subordinate resources: AS: 22422
AS: 399547
IP: 45.42.199.0/24
IP: 192.111.56.0/21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a2:30:04:33:46:26:59:ab:ce:f0:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Validity
Not Before: Oct 25 00:45:24 2025 GMT
Not After : Jan 28 01:45:24 2028 GMT
Subject: CN=c90c6eb7-da81-4446-9f00-839f82a6d705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:77:5b:41:19:46:33:cc:d9:69:c0:e1:74:
d5:ad:f6:f2:90:42:85:04:a2:d1:b7:b2:f6:cc:c1:
51:13:d0:5a:55:79:3a:04:dd:f6:6a:e9:32:cb:ef:
ba:27:0b:17:d8:6a:3c:71:51:ca:c2:b0:18:72:2f:
ac:d8:6a:aa:1b:c7:f3:6b:01:a9:72:ef:11:39:62:
10:eb:f4:3d:72:8b:c9:da:c3:c4:5c:f0:30:7b:17:
e9:ac:09:10:ea:e0:55:8a:c3:db:29:07:6d:90:d4:
20:88:83:49:12:85:6d:3e:f0:e9:a7:86:60:98:07:
67:1a:45:2e:6b:cf:37:92:10:25:81:b9:96:9d:0d:
12:fd:04:0b:c6:c9:63:f6:8c:b8:38:95:a1:1f:4b:
f5:59:ca:d7:2c:0e:a4:58:53:5c:af:d9:4a:da:d8:
07:fc:31:23:28:dd:e6:14:1c:1d:c4:50:6d:e1:8c:
4b:c3:ae:3c:d9:49:55:91:19:ae:da:42:6f:78:24:
d4:bf:57:60:47:c5:76:eb:38:47:6d:bc:8b:a7:c4:
fa:60:82:f9:67:10:e3:73:8a:50:e1:b1:5f:f3:b9:
3e:5c:3c:64:18:a0:06:ca:55:5e:7e:50:4c:b7:c4:
2f:84:4a:01:72:10:f8:5c:7e:1c:64:bb:02:c5:b9:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:02:63:9F:32:71:18:79:47:7B:FC:3C:E8:92:8C:1F:DD:71:A7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c90c6eb7-da81-4446-9f00-839f82a6d705/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c90c6eb7-da81-4446-9f00-839f82a6d705/c90c6eb7-da81-4446-9f00-839f82a6d705.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
X509v3 Authority Key Identifier:
keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.199.0/24
192.111.56.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22422
399547
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:26:86:43:be:9d:ac:cf:35:2d:95:dc:58:33:d9:d9:18:a9:
e9:e4:b5:9d:e8:7e:b5:59:d8:53:9f:06:2e:4e:ed:5d:f0:a0:
99:cb:cd:cb:08:30:80:36:75:e1:69:d0:92:69:a0:fe:49:30:
1f:14:b2:78:55:04:69:0a:13:3f:ba:82:7d:1a:7c:b3:c7:84:
26:fb:05:f9:59:d9:60:69:c4:07:f1:a8:b7:c5:91:d5:32:23:
a9:54:24:2e:b3:15:c4:e3:0a:ad:cd:b5:0f:a8:82:ac:4b:0b:
05:c3:9a:c2:73:94:94:d5:5f:ef:c7:f8:c5:ad:26:46:1c:65:
93:b0:5d:57:1a:f5:e3:c2:b1:60:b0:06:90:73:64:20:16:70:
33:2d:63:22:93:58:fb:c7:51:69:1a:e0:63:c1:f6:06:7a:2e:
29:04:d0:03:55:10:a8:fb:cd:14:91:54:1f:f6:de:5b:f3:00:
d3:92:9d:40:bb:df:3a:37:4e:ea:bd:b0:85:88:70:78:e4:c4:
8c:38:03:a0:b5:f3:58:33:dd:42:ca:6c:19:a7:f0:75:84:88:
ca:66:2a:bc:f5:aa:03:76:67:12:02:ac:0c:8a:89:53:da:58:
14:a2:3b:1c:44:6a:be:e7:98:bd:61:48:71:ff:7e:7a:42:ec:
bf:29:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:55 2025 by rpki-client