
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer
File: 1019a62c-c6e6-45a6-a0e7-472a84b5ba68.cer (raw, json)
Hash identifier: ABGARU5/4944lyi+Y8q9AqOUoGiCRMvAJ7yddEWZFvM=
Subject key identifier: CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial: 010D0C9F4328584AD251D1C2211792C40C93EC40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 11 Aug 2025 13:45:22 +0000
Certificate not after: Sun 13 Jun 2027 00:45:33 +0000
Subordinate resources: AS: 399979
IP: 45.139.104.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:d2:51:d1:c2:21:17:92:c4:0c:93:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
Validity
Not Before: Aug 11 13:45:22 2025 GMT
Not After : Jun 13 00:45:33 2027 GMT
Subject: CN=1019a62c-c6e6-45a6-a0e7-472a84b5ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:ed:3a:f1:e0:5e:2a:4d:68:54:65:f9:7e:
05:e3:aa:d5:29:ae:a6:0a:e4:16:b3:e3:b1:e9:f7:
05:ad:94:99:e2:1e:5b:bc:d2:7a:d0:86:56:01:76:
42:8d:c7:4a:40:8b:a4:65:97:b8:82:c2:57:3c:b7:
b6:2a:71:fa:b6:a6:6e:5c:f1:7a:fc:cd:69:4e:5c:
c3:ab:60:21:27:ec:e8:8c:32:24:1f:50:00:3b:da:
5a:fe:00:99:b2:78:10:88:51:7d:44:ee:38:88:9f:
00:98:d8:0a:4f:fa:f3:87:18:1e:6b:2d:de:37:6f:
72:c8:9a:1c:69:12:93:20:32:de:4f:35:fe:a8:d4:
2a:ab:23:81:21:d0:c5:f1:5d:e1:1e:1b:31:de:69:
05:c9:44:54:06:2a:88:d1:01:21:45:71:2b:b6:61:
7f:b0:06:a3:1a:e0:82:c6:61:3c:9f:96:26:e0:cd:
56:f9:88:39:26:c0:7e:df:2a:49:31:c5:97:d4:b0:
8c:25:0d:68:20:4a:1c:bc:30:20:3f:76:f5:5b:59:
15:3a:23:94:a0:31:0f:83:a9:11:9d:c6:59:4c:76:
a8:22:4d:2c:eb:6d:0b:03:28:42:8c:f5:50:eb:16:
6b:d9:8a:af:e2:60:60:ec:7e:ea:a0:f2:4a:20:22:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:0E:11:62:45:2E:57:D6:13:BA:B6:EE:85:52:C2:30:31:BE:81
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1019a62c-c6e6-45a6-a0e7-472a84b5ba68/1019a62c-c6e6-45a6-a0e7-472a84b5ba68.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
X509v3 Authority Key Identifier:
keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
399979
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:26:64:1c:2e:53:07:2f:14:a0:c1:ec:7d:a7:d2:d0:36:24:
fd:87:49:7e:de:3e:52:92:9b:09:3a:e0:58:68:11:91:0f:19:
74:6a:43:14:c7:dc:81:a5:0b:39:e4:45:82:26:56:ca:1c:2b:
79:98:f4:99:78:10:be:0a:1a:ca:d6:58:90:39:7b:a9:71:7f:
af:b5:8c:c4:52:78:d3:2b:0d:0d:8d:23:df:5d:14:d9:0c:56:
0b:24:61:06:37:cf:e9:7d:9d:b0:36:59:84:ee:36:e9:14:b2:
20:86:bd:54:2d:2e:10:cf:0a:74:19:2c:60:af:1e:4b:06:7f:
60:34:7c:8f:a5:be:8d:40:26:27:a9:a8:84:71:be:a4:7e:38:
a5:0b:b9:32:ac:12:52:5d:2a:5a:a5:4a:b0:82:1a:c0:32:37:
f7:ce:a4:ce:d7:b8:5d:ea:37:23:8c:16:52:0b:c1:f6:72:d2:
64:82:3d:2f:26:8b:ea:83:73:ce:9e:56:48:5e:5c:37:56:b3:
48:bb:a4:e7:ab:81:a8:c3:8c:0f:b6:c1:1e:88:65:63:df:e5:
d1:e5:70:8b:6e:a3:b5:12:82:03:7d:56:97:1c:9e:69:05:b6:
51:1d:77:af:c1:f1:fa:01:b5:74:0d:3f:ab:7b:f1:30:c2:55:
05:4b:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:29 2025 by rpki-client