
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
File: d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer (raw, json)
Hash identifier: nOXHFed5Txp4frYm/ByEBSup+AbS0BrIy485ZC6GRNM=
Subject key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584BA9E7C9F1011B3A296BFE6F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Oct 2025 19:06:20 +0000
Certificate not after: Sun 13 Jun 2027 12:46:44 +0000
Subordinate resources: AS: 22779
AS: 53733
IP: 148.66.38.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:e7:c9:f1:01:1b:3a:29:6b:fe:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Oct 27 19:06:20 2025 GMT
Not After : Jun 13 12:46:44 2027 GMT
Subject: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:0c:65:49:2c:0c:4a:d7:fe:24:d8:44:9b:
05:23:4a:e0:b7:2c:85:b4:81:58:b8:3a:3c:69:78:
37:34:20:44:70:da:c8:3f:46:60:92:e9:91:16:ba:
e3:17:c3:2c:7d:3d:0d:b9:71:56:ae:a4:92:8f:32:
de:dc:ad:46:d5:db:9e:8a:17:2f:85:0b:f5:b6:ca:
1d:32:a6:ff:f9:81:f1:9b:7b:5f:50:93:74:16:ec:
02:f3:a7:ee:34:dd:85:a6:30:f4:ef:1c:b1:91:42:
22:71:7c:95:ba:c0:61:4c:87:e1:42:13:bb:b8:1e:
8f:95:bf:2a:4b:c1:45:ed:bd:22:c1:78:e0:e4:fb:
78:35:5f:56:d3:a8:fa:25:d6:ad:0b:94:ba:77:20:
36:10:23:56:ef:78:64:bd:7d:e8:8f:36:15:7d:74:
49:51:4c:45:eb:50:05:fb:4e:28:a1:df:b1:c0:27:
d6:37:6e:7f:e9:55:b4:69:b8:d3:fb:8c:36:66:f8:
e8:ba:b8:5b:dc:8a:df:d1:fd:7d:a8:28:f9:7c:c2:
63:9d:53:d1:0d:36:45:68:63:1d:71:21:15:ed:35:
b4:38:32:a7:42:70:b3:c9:b8:d7:31:00:15:57:c3:
a6:36:a7:a4:9e:f8:94:24:fe:1c:af:45:fb:89:c7:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
148.66.38.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22779
53733
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:28:a5:10:97:6b:87:5c:34:d6:c1:08:e9:dd:11:f6:61:da:
94:c6:38:c9:9a:87:5a:37:65:b6:ef:f0:80:b8:82:a1:02:48:
a6:d6:ae:4d:87:86:3d:82:57:a8:81:8f:01:a6:8b:19:14:80:
b8:c0:21:b6:af:3b:1a:66:82:ff:b6:a0:7d:88:61:8d:90:03:
d5:2a:42:73:af:4d:42:11:58:c9:c3:87:84:2d:85:a7:a7:9a:
7e:5c:75:33:53:5e:4d:15:bf:34:35:47:4e:73:ed:71:77:bd:
91:d9:41:5a:d4:f6:86:03:85:e4:5c:b9:bf:f2:18:0f:f3:ed:
ad:32:84:19:de:3a:d0:2e:5a:aa:cb:35:9e:a6:5d:86:71:dc:
55:a8:d4:38:93:6d:c6:85:15:ab:63:b6:57:a6:93:d0:2d:7d:
27:a9:36:39:e7:a6:a7:9b:25:2e:af:f8:06:39:71:cd:fe:2a:
d5:57:71:06:8e:c5:a4:d7:74:0e:a8:0a:8a:af:42:b3:20:62:
94:86:a6:72:50:2a:02:6b:73:50:60:9a:44:40:a4:08:e6:d5:
f7:bc:71:13:cc:80:51:b1:ee:fb:b1:65:6f:40:d0:9f:81:0a:
fd:77:f3:78:a4:9d:32:b5:34:37:0d:3e:da:b0:6c:c2:12:c8:
c7:cb:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:31 2025 by rpki-client