
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
File: 497813be-498e-4129-a627-225f97d0e2b5.cer (raw, json)
Hash identifier: vbeaiF1LDI7uqJevrYJZvw9z4qdPG9N1u2WGUkdPFZc=
Subject key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584A532E09EFEAA48D95DCEE8A80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 27 Jun 2025 00:45:37 +0000
Certificate not after: Thu 30 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 63438
AS: 399606
IP: 23.190.176.0/24
IP: 45.45.176.0/22
IP: 2606:5e40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:53:2e:09:ef:ea:a4:8d:95:dc:ee:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jun 27 00:45:37 2025 GMT
Not After : Sep 30 00:45:37 2027 GMT
Subject: CN=497813be-498e-4129-a627-225f97d0e2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:0b:7a:6a:ad:73:85:72:a2:0e:08:53:b8:
d2:4a:71:a8:92:57:21:13:85:9e:c9:08:c3:60:2f:
e1:73:a4:52:39:16:46:fa:b4:84:8e:9c:b6:bf:6c:
d6:47:d9:57:9d:40:0a:9e:b0:9f:5b:77:82:d7:20:
30:5e:a3:92:2a:9f:80:24:fe:cc:22:d2:97:f0:a7:
bf:6a:05:1c:ef:f0:15:59:f5:36:b4:2c:ec:d3:2a:
02:0c:e1:3a:ee:14:71:6c:c6:89:3f:55:95:71:e1:
9a:e4:2c:dd:cc:27:a6:de:8a:cb:13:a1:ac:81:67:
83:31:73:08:f7:20:98:c5:db:3c:72:09:7b:59:eb:
38:60:23:5a:f2:c8:c1:88:eb:7d:05:51:d1:c1:61:
59:b8:d0:b7:0b:6d:e9:48:2f:cc:52:14:71:1a:f9:
ae:f3:0b:09:ca:d5:4d:cf:41:a5:b9:3b:12:bd:05:
ce:88:59:c8:27:ed:25:e8:4a:8a:f3:f7:b1:63:4b:
3e:0b:67:77:01:0c:16:5d:bd:fd:84:ae:d6:a7:a2:
18:84:c9:44:a2:52:43:df:e8:c6:db:fc:bf:60:a2:
c8:26:d5:df:68:d5:06:dc:a8:32:31:9e:89:78:f9:
4a:80:24:ac:84:77:c2:a1:22:fa:3b:1a:5f:07:9d:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.176.0/24
45.45.176.0/22
IPv6:
2606:5e40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63438
399606
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:f9:30:60:63:74:32:26:79:29:8b:05:44:b1:e9:8c:3f:70:
94:38:33:68:2e:dd:c2:a6:f2:8a:c0:0f:49:6c:ab:6f:40:3f:
1b:93:87:e3:97:ae:58:a8:98:62:2e:4f:5e:37:4e:82:ae:06:
8f:2d:2a:5a:a3:b8:d5:6e:5c:89:7d:ef:4b:ce:2c:64:de:a1:
31:13:da:c4:05:35:49:7d:e1:41:7c:45:95:fb:8c:30:00:30:
30:a4:e9:71:85:98:8c:61:59:30:a1:e9:a4:0e:ad:8c:c5:50:
0c:ca:04:30:77:8a:41:7c:7d:a5:08:24:3b:72:9a:63:a5:1a:
0f:a2:eb:f0:bb:9d:ec:d9:6f:29:61:2f:85:34:80:29:d2:ab:
73:d7:b5:18:0b:3d:73:61:0d:19:de:78:2a:e4:58:ca:9f:60:
04:d2:ab:90:92:5a:84:6a:04:6b:75:17:f1:c4:1a:22:c9:21:
9e:5c:7c:ae:49:55:1e:49:cc:66:db:73:29:db:9c:32:6d:b8:
53:be:63:5b:58:f6:88:ff:e6:f9:c8:b1:6c:bd:69:a8:1a:fd:
12:f7:d2:6f:6c:62:6c:22:ac:f0:01:96:37:c2:41:9f:7a:4f:
72:51:6b:65:f3:26:95:b1:f0:97:7e:9a:d7:a5:6a:8c:e6:6c:
db:0e:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:36 2025 by rpki-client