
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer
File: 7d4d1f55-ab35-4c35-9037-e56ddd833168.cer (raw, json)
Hash identifier: hnFnIUfG5hk5helaLb1hKIi+GGjyMv0LYA1n9g6LU1I=
Subject key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584AA2E0B5534532F5C75534AEDC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 25 Jul 2025 13:54:28 +0000
Certificate not after: Tue 24 Aug 2027 17:07:38 +0000
Subordinate resources: AS: 401736
IP: 23.142.212.0/24
IP: 2620:d7:6000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:a2:e0:b5:53:45:32:f5:c7:55:34:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 25 13:54:28 2025 GMT
Not After : Aug 24 17:07:38 2027 GMT
Subject: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:33:f0:8e:e6:e2:72:e5:3c:93:ad:c5:9f:
b5:6e:ca:33:94:df:44:cd:c7:d6:94:78:f1:b5:b2:
21:3b:18:ed:ad:8e:bf:9f:bd:81:e9:8a:d0:14:ee:
c2:55:4b:19:0a:b9:6d:66:88:d9:be:7e:42:af:72:
9d:12:ec:26:5c:cd:86:2a:42:28:94:2b:db:ec:e9:
49:60:ee:ba:34:11:c2:a6:79:cf:23:12:dd:9c:91:
6d:53:63:28:6d:fa:36:dd:09:d3:cf:76:7a:cc:dd:
43:e9:b2:91:21:df:fc:71:e4:5a:4a:c4:94:25:6a:
12:dc:2d:90:fc:cd:75:db:ed:03:4d:79:fa:fe:5c:
86:fc:59:d3:e4:94:43:cd:d2:9e:6e:d8:1d:81:71:
35:f2:c8:40:15:23:36:ff:f3:8c:07:a9:b2:45:44:
57:41:27:5c:f4:14:ad:0b:66:c5:f2:d9:35:14:ac:
5b:5a:65:11:a8:04:a6:05:79:8d:c9:dc:c6:63:05:
df:f0:cb:bd:ef:20:0e:bf:b1:c9:53:9e:ef:61:e0:
d5:5d:9a:2c:a4:eb:7d:22:b6:69:85:92:bd:69:23:
0e:b3:9b:cd:34:83:9e:e1:d6:aa:c8:1e:ba:da:cc:
36:12:08:e2:f2:49:ba:54:b3:71:08:ec:59:be:22:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.212.0/24
IPv6:
2620:d7:6000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401736
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:54:c2:2a:41:74:9f:e7:b0:e0:d1:0d:7d:e7:cc:df:41:7e:
23:ed:3d:9d:b9:51:88:01:ae:7e:8d:71:d4:87:50:5a:26:ac:
46:86:04:bd:07:cf:6b:11:82:53:e3:4a:8f:d8:1d:f5:d0:ad:
49:2c:3a:42:2a:04:68:38:51:b1:16:6d:2d:71:1d:f5:b5:ab:
72:2f:4e:43:20:7c:df:94:69:ff:c7:55:f5:1a:fa:fb:c0:5e:
4d:5e:8b:52:af:d1:02:c8:09:f7:12:f2:63:3f:19:6a:ff:c7:
62:74:22:18:5e:aa:6b:12:70:40:84:62:0a:77:0d:1f:6e:ff:
ea:86:b7:9a:ca:5b:4f:f6:fa:2e:f6:98:3f:1c:17:7b:ff:24:
e8:48:7f:db:72:de:64:d5:08:e5:3c:93:42:cb:70:9e:e6:ee:
87:c8:32:4f:42:75:12:36:b5:01:c0:3b:f6:c2:7f:ef:f6:59:
cc:20:ab:67:26:13:87:55:3f:60:95:8e:69:ac:f3:97:8b:04:
ca:66:6e:16:54:40:af:84:a4:a5:a5:c7:fb:97:9b:51:9f:36:
af:d9:a6:17:e6:a5:a4:ce:41:3e:ff:9d:f3:3d:f7:d5:6c:bf:
19:69:23:0d:f3:8e:c7:46:cf:5f:d5:68:b8:45:b3:4d:4c:93:
c3:2c:03:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:33 2025 by rpki-client