
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
File: 1be7bcf5-0538-4a92-9aef-c460f15023b4.cer (raw, json)
Hash identifier: R+9zBuhaOdFvRZnaVDcOYyQ8lGD5vq0kDquYrdegQjY=
Subject key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F43285849A6179A1EA5D211EB51819700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 26 Apr 2025 00:45:34 +0000
Certificate not after: Fri 30 Jul 2027 00:45:34 +0000
Subordinate resources: AS: 46365
IP: 23.152.56.0/24
IP: 198.135.179.0/24
IP: 2602:2cd::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:a6:17:9a:1e:a5:d2:11:eb:51:81:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Apr 26 00:45:34 2025 GMT
Not After : Jul 30 00:45:34 2027 GMT
Subject: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:6f:13:71:23:70:7d:f0:a6:3d:a7:fe:c7:
c9:94:7f:10:51:2f:f8:61:f3:94:ea:5e:8d:50:e5:
63:6d:fe:4c:05:a7:f4:bb:d8:21:fa:8f:0e:7d:ff:
4c:b5:71:e8:c1:43:b1:4a:61:42:c7:0d:d9:17:ef:
78:19:76:e2:32:93:95:f4:b4:25:62:f6:d4:a6:3e:
8e:1d:37:52:7a:b7:cf:5e:d9:35:a3:cc:cf:47:7c:
60:c2:eb:a7:85:9e:df:7a:59:57:3a:d8:01:e1:01:
1b:2b:a6:2c:41:87:83:70:32:c9:36:19:f8:35:41:
6c:1c:26:0b:af:18:e3:12:3a:1d:19:a2:96:d9:04:
25:81:65:96:99:f1:ac:5d:c3:4e:ab:bd:99:7b:56:
10:ac:bc:66:5e:45:04:e7:9d:38:ec:c4:bd:7d:33:
88:78:14:57:e2:3f:3f:08:05:44:78:12:5d:e7:df:
47:7a:36:32:16:de:69:c4:96:fe:73:cb:ae:36:b0:
12:1d:9b:48:65:7f:f0:42:e4:ab:8d:27:24:51:f0:
f7:9b:b9:45:23:6a:53:97:ff:89:77:33:ad:44:3a:
51:2f:98:f9:eb:d8:a4:ff:8b:3b:43:d8:48:b7:9e:
0a:2e:86:c2:85:48:16:77:35:90:ed:4d:57:8f:44:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.56.0/24
198.135.179.0/24
IPv6:
2602:2cd::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
46365
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4f:bd:0b:1b:07:53:d8:f7:81:d4:89:9d:8b:60:aa:fc:73:
60:35:49:d5:8a:53:a8:4f:c8:6f:56:d4:cd:3c:2f:b4:dd:6e:
1c:11:4b:be:dd:46:20:c0:17:ef:c1:ac:1a:63:6f:08:04:2c:
a5:b8:39:cb:27:66:51:8e:68:e3:7b:94:21:cb:9c:b8:24:2a:
03:52:fb:7e:6c:5c:57:71:af:c6:83:b0:d7:18:a2:4b:5c:bc:
b1:33:cf:18:ed:05:c1:f1:81:38:06:f4:8e:6f:a4:12:d7:93:
d5:96:65:02:b8:0b:15:8e:e0:0a:c5:be:72:b6:b2:e4:a3:aa:
5a:e0:3a:b4:a3:63:b9:90:f4:f3:fd:23:4f:5a:93:c2:0a:b6:
b9:f0:6d:22:8f:e1:18:be:8d:b7:93:13:1c:f4:06:9a:34:67:
64:a2:64:1f:26:f9:c0:75:9e:2c:68:c0:7b:2f:3e:77:00:b6:
e1:a6:a4:80:8b:d4:7a:24:1d:0b:25:00:7f:5c:49:f9:23:c0:
bf:07:49:6c:57:61:ad:5b:33:63:88:1d:87:be:7a:8c:bc:f5:
9c:1b:7e:b1:af:26:35:87:36:48:de:32:a3:fa:00:d6:b9:30:
43:8e:cb:b5:19:d7:a7:f3:46:e9:d3:8e:93:a9:c2:18:d5:d1:
2e:86:e3:c4
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEmmF5oepdIR61GBlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MDQyNjAwNDUzNFoXDTI3MDczMDAwNDUzNFowLzEtMCsGA1UEAxMk
MWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAyM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLVvE3EjcH3wpj2n/sfJlH8QUS/4YfOU6l6N
UOVjbf5MBaf0u9gh+o8Off9MtXHowUOxSmFCxw3ZF+94GXbiMpOV9LQlYvbUpj6O
HTdSerfPXtk1o8zPR3xgwuunhZ7fellXOtgB4QEbK6YsQYeDcDLJNhn4NUFsHCYL
rxjjEjodGaKW2QQlgWWWmfGsXcNOq72Ze1YQrLxmXkUE55047MS9fTOIeBRX4j8/
CAVEeBJd599HejYyFt5pxJb+c8uuNrASHZtIZX/wQuSrjSckUfD3m7lFI2pTl/+J
dzOtRDpRL5j569ik/4s7Q9hIt54KLobChUgWdzWQ7U1Xj0SP7wIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFEWUKrVqnX42j0kJrKWAe3TeDbdnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x
YmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFiZTdiY2Y1LTA1MzgtNGE5Mi05
YWVmLWM0NjBmMTUwMjNiNC8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1
MDIzYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXmDgDBADGh7MwDgQCAAIwCAMGBCYCAs0AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC1HTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgT70LGwdT2PeB1Imd
i2Cq/HNgNUnVilOoT8hvVtTNPC+03W4cEUu+3UYgwBfvwawaY28IBCyluDnLJ2ZR
jmjje5Qhy5y4JCoDUvt+bFxXca/Gg7DXGKJLXLyxM88Y7QXB8YE4BvSOb6QS15PV
lmUCuAsVjuAKxb5ytrLko6pa4Dq0o2O5kPTz/SNPWpPCCra58G0ij+EYvo23kxMc
9AaaNGdkomQfJvnAdZ4saMB7Lz53ALbhpqSAi9R6JB0LJQB/XEn5I8C/B0lsV2Gt
WzNjiB2HvnqMvPWcG36xryY1hzZI3jKj+gDWuTBDjsu1Gden80bp046TqcIY1dEu
huPE
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:42:00 2025 by rpki-client