
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98.cer
File: d80ecca4-df87-49ed-896a-31c912ba8c98.cer (raw, json)
Hash identifier: 98+gExCLXUQA6Loc1Op+ZQTt7+/LLl6qjaOgyoqGObI=
Subject key identifier: FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584A74AE3F34878301215CC8B580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 09 Jul 2025 00:45:36 +0000
Certificate not after: Tue 12 Oct 2027 00:45:36 +0000
Subordinate resources: AS: 26370
AS: 26566
IP: 23.178.224.0/24
IP: 130.51.192.0/23
IP: 198.163.75.0/24
IP: 2602:fe68::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:74:ae:3f:34:87:83:01:21:5c:c8:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jul 9 00:45:36 2025 GMT
Not After : Oct 12 00:45:36 2027 GMT
Subject: CN=d80ecca4-df87-49ed-896a-31c912ba8c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:cc:f9:52:c1:ce:85:96:3e:83:f0:19:0d:
c9:29:3f:c4:9f:ac:80:8b:f3:8a:01:35:83:e0:18:
0e:5b:61:54:85:ef:93:b8:ca:d5:d6:c7:8c:9d:0c:
10:11:e5:fa:2e:66:7f:3e:73:cb:0c:fe:40:a8:3a:
98:c2:3e:6f:8b:8a:f6:87:12:40:50:71:a4:a6:c2:
20:3b:98:59:4d:78:27:bb:f7:3b:e3:26:e4:08:95:
1e:34:65:4c:c3:48:64:f9:03:23:7f:f8:44:ae:7f:
90:3a:8a:a7:86:93:79:6f:98:5d:ce:f7:3f:f6:62:
65:10:77:d5:9a:7b:a5:19:00:a8:45:cc:8e:a4:b5:
22:eb:5e:72:09:f5:c9:42:9a:7f:84:3e:1d:db:97:
f0:c6:cc:a8:04:10:86:24:5d:64:49:02:5c:42:01:
31:49:f6:ab:9b:0a:f5:ab:65:0e:2b:0b:f6:e1:2a:
84:63:41:ce:4a:e9:97:fd:fd:36:48:ba:75:10:2f:
a7:a5:96:01:4b:73:e4:7e:4d:f3:46:42:ac:07:67:
4c:74:fb:b5:d4:5b:ef:a7:52:3b:8d:a1:25:6d:76:
99:8b:20:74:cc:12:16:b6:ed:c2:5f:fd:76:fd:61:
46:36:28:33:53:91:4c:35:41:23:d4:f7:1c:13:ba:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:0F:C3:78:D6:B6:FC:4F:0F:BD:88:B6:29:B6:71:96:9B:0D:18
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d80ecca4-df87-49ed-896a-31c912ba8c98/d80ecca4-df87-49ed-896a-31c912ba8c98.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.178.224.0/24
130.51.192.0/23
198.163.75.0/24
IPv6:
2602:fe68::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26370
26566
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:1d:55:60:b1:69:4a:73:d3:0d:01:b6:cf:92:e5:22:c1:08:
ca:28:9d:6a:07:b3:9f:bf:4c:fe:49:3c:42:94:96:9a:31:24:
f1:d4:2f:8d:9f:c1:c8:2c:0b:ff:a8:34:89:2c:52:29:29:fb:
da:6d:02:d0:e5:a0:66:8c:b0:df:7b:46:41:1e:cb:19:35:bb:
e6:a4:b7:f0:32:af:36:91:25:1f:13:f8:5c:63:45:09:24:8c:
8e:a2:d5:b5:8c:45:03:b9:8e:0c:11:b7:4b:fa:70:da:11:64:
25:b0:f7:a0:4b:5e:f7:46:e0:ea:a3:c4:6c:3f:0f:5f:64:b0:
fd:58:9b:68:99:d3:6a:2f:a5:ec:3b:fc:29:2d:01:df:f8:bb:
a2:81:44:ea:3f:79:d4:fa:1c:9e:c3:5d:39:9f:01:f6:66:61:
18:04:2b:86:c1:8a:d2:43:bd:95:50:de:86:e0:67:db:8c:ff:
1a:a8:2c:c1:5a:bb:2b:bf:dd:78:7f:b7:be:be:98:8f:f4:b2:
a3:42:5b:c2:34:64:01:2b:ef:ed:4c:c9:10:8c:67:b1:ac:40:
bb:af:84:e3:b6:68:6f:a0:09:e3:d8:77:49:f4:58:21:0f:fe:
fa:73:56:a0:7d:54:ac:ae:a3:50:1b:b5:21:56:bb:1c:68:4f:
84:6a:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:45:00 2025 by rpki-client