
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20.cer
File: c4097851-b4f5-4ab6-aa88-86c3b7454a20.cer (raw, json)
Hash identifier: EQ58Lwzw8WbLs3lfKsNWCel4xgbjT3kz5wgk58vsJHE=
Subject key identifier: F7:03:8E:96:A6:4A:C7:1C:6E:10:6F:0F:5B:48:8D:46:2C:39:3B:E5
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584A3931B1626F5D445BE1EEE100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/c4097851-b4f5-4ab6-aa88-86c3b7454a20.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 17 Jun 2025 17:21:58 +0000
Certificate not after: Mon 20 Sep 2027 17:21:58 +0000
Subordinate resources: AS: 393827
AS: 394955
AS: 395996
IP: 66.132.188.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:39:31:b1:62:6f:5d:44:5b:e1:ee:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jun 17 17:21:58 2025 GMT
Not After : Sep 20 17:21:58 2027 GMT
Subject: CN=c4097851-b4f5-4ab6-aa88-86c3b7454a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:42:4c:32:ea:9a:df:24:86:b9:08:26:7f:
9c:1e:47:ed:6d:e4:56:4d:4b:91:3a:a4:a3:9d:ef:
8a:bc:ea:15:bc:36:fa:2c:93:e5:3b:11:50:15:f3:
ff:57:cc:50:62:cf:08:da:da:b4:21:1b:d2:6b:23:
f6:73:35:c6:26:6e:a5:43:32:2e:be:9e:2e:0e:f2:
e7:8d:8d:c4:ef:ea:74:59:a7:ef:e0:61:b3:94:b4:
84:58:d8:4d:1f:49:b5:f4:9d:e1:08:c7:e9:7c:08:
de:d4:2f:ca:9d:f7:27:a0:0d:11:99:55:5e:11:e3:
42:db:d6:7d:6b:e3:ed:40:6c:5a:6f:42:d7:38:ec:
d3:cf:cb:f6:07:95:90:7c:b6:37:63:e8:b8:b3:ad:
d4:f7:84:be:27:19:ca:94:96:75:ff:72:c1:6f:c0:
8e:70:96:00:d8:28:ed:63:e8:a4:98:89:8d:5e:74:
74:f5:8d:76:0d:58:1e:60:73:22:15:01:b6:56:e5:
fd:d2:16:3c:62:d1:66:e7:38:29:07:8e:f0:b8:40:
eb:33:8a:1b:45:f7:3e:dc:23:b5:30:9c:46:ef:18:
17:df:ce:79:70:6a:2d:51:3c:bd:7e:a6:8d:a9:56:
8c:55:f3:b7:93:b2:25:fc:56:a1:24:93:ab:72:61:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:03:8E:96:A6:4A:C7:1C:6E:10:6F:0F:5B:48:8D:46:2C:39:3B:E5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c4097851-b4f5-4ab6-aa88-86c3b7454a20/c4097851-b4f5-4ab6-aa88-86c3b7454a20.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.132.188.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
393827
394955
395996
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:8d:f6:11:76:31:5f:62:0f:d4:29:a9:48:25:58:54:1b:6d:
23:f6:b5:15:a3:27:f5:cf:c7:b9:49:c3:03:60:c2:1c:f7:c6:
7e:05:f6:19:0b:3d:2b:2c:a9:7b:8a:2c:b7:e4:0b:88:59:39:
2d:92:bc:f6:95:16:73:67:d8:c3:10:63:c4:b0:b2:e6:93:ed:
92:eb:42:23:f2:c6:be:97:f4:87:f7:98:c6:f6:17:68:77:ef:
df:f4:2f:ab:cb:ed:85:e3:b5:e3:f6:ad:6c:69:61:46:d5:ad:
8e:d8:bc:a9:79:92:71:90:7b:ba:0d:ce:fe:b5:98:f7:48:4a:
ae:29:e5:c3:1e:d1:1f:52:66:cd:7f:b5:01:3b:4f:a8:d6:f9:
0b:84:99:e1:b0:2c:93:ff:e2:25:fe:b0:ba:e8:11:e0:04:8f:
04:f8:0f:59:66:26:0e:46:6b:b4:99:e0:39:70:42:c0:c6:48:
fb:24:e8:ce:10:e0:cb:18:8e:14:83:ba:24:ff:e8:49:af:9a:
7a:53:38:d7:0f:c8:1d:f4:73:1d:58:6f:7e:6c:c4:2b:66:15:
a3:16:8e:8a:f8:b4:a0:6b:0c:d6:70:71:21:4c:8c:25:e0:df:
97:ad:7f:b8:d4:ff:1c:f3:a4:fb:67:1e:a3:ae:9e:ed:97:3d:
c6:80:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:24 2025 by rpki-client