
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
File: f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer (raw, json)
Hash identifier: Iyeyj0gl2XAvS/TxeEM4eSEoFExaYykYNAGYuHvMy14=
Subject key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial: 010D0C9F4328584A733D79759192963717A95580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 08 Jul 2025 12:22:35 +0000
Certificate not after: Mon 11 Oct 2027 12:22:35 +0000
Subordinate resources: AS: 5119
IP: 192.104.81.0/24
IP: 192.160.189.0/24
IP: 204.106.17.0 -- 204.106.31.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:73:3d:79:75:91:92:96:37:17:a9:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Validity
Not Before: Jul 8 12:22:35 2025 GMT
Not After : Oct 11 12:22:35 2027 GMT
Subject: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:fc:04:3e:12:61:27:d4:d3:23:dc:ef:6e:
6b:0f:49:36:03:54:bc:00:47:45:23:89:44:de:d3:
38:53:3a:e0:3b:bd:4a:96:1b:7b:5a:fb:f5:c1:c2:
2e:6c:9b:48:f7:39:b3:60:f7:7f:9b:1f:05:5c:4e:
0a:3e:36:14:f7:41:5d:8a:2a:36:ea:ec:ad:3e:1f:
47:17:d3:d7:c5:a7:c8:84:e5:8b:97:b4:43:59:57:
9a:7b:ae:5b:e1:d2:dd:a2:0d:18:1b:c7:34:92:c6:
ba:19:a1:4a:05:9d:9e:38:6c:fc:9e:eb:5b:9e:b3:
d8:b2:fd:a5:ec:53:1a:0d:16:de:10:a9:48:ee:0c:
37:74:21:0d:82:4f:71:aa:74:b4:88:55:95:09:6d:
43:a5:a8:5e:35:f6:ac:e8:09:12:f9:52:03:86:7c:
d3:2c:bb:2a:da:62:3b:e3:79:08:e1:3d:63:c6:71:
4b:8d:a7:7b:3c:cd:64:c4:8f:58:9e:a0:fc:f7:ab:
8e:ab:2a:01:ca:07:ba:3b:88:f7:b3:d3:28:5e:db:
35:45:1d:70:90:d2:0a:2f:67:11:ae:5c:e4:27:b6:
b6:f2:94:54:7a:da:da:37:c2:3c:a0:31:b9:25:57:
1b:39:2b:e8:7c:52:48:82:5c:5f:76:d5:05:a7:73:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
X509v3 Authority Key Identifier:
keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.104.81.0/24
192.160.189.0/24
204.106.17.0-204.106.31.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5119
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d7:ba:25:40:a7:21:1d:21:99:1f:51:12:22:45:9e:fd:ff:
cc:b2:3f:dc:6a:2b:b5:05:89:a8:e2:1f:a3:fe:09:72:7b:fc:
83:30:3b:05:9c:5c:f8:ef:00:7a:02:91:03:f2:72:9a:af:a2:
73:e6:43:ae:49:d3:07:9b:df:64:09:0b:48:8e:ce:2e:38:c2:
55:bd:0e:b9:36:f8:f1:33:df:27:dc:2d:78:91:8e:b4:25:84:
7c:55:00:e7:06:10:6a:57:58:ce:9b:af:da:96:fe:88:54:55:
1d:89:5c:fc:49:6c:73:d5:fe:f3:d7:fa:d6:56:0b:4e:ed:79:
0f:7c:75:61:48:ff:a4:9a:33:a2:d0:fb:98:84:7c:f7:47:43:
73:5c:ec:25:f9:85:41:42:6c:ba:96:e1:34:67:04:36:3e:51:
54:b0:dd:87:2b:d6:b3:66:61:c7:3b:9e:13:31:f9:36:19:66:
27:12:1c:85:66:66:10:cd:ed:e7:e3:00:fa:b8:f1:55:22:4c:
9b:d5:20:60:dd:f8:4f:8e:a0:5c:4f:fc:22:c9:03:58:10:3a:
01:f9:b5:5f:d6:8f:50:99:a7:3d:1b:34:72:f6:6e:ab:8d:2d:
d8:e2:c4:75:e2:c8:54:95:8b:27:cf:b4:24:37:19:cb:48:0b:
3a:99:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:13 2025 by rpki-client