
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer
File: 03b593fc-7488-4247-a974-e98b5e2cd5b8.cer (raw, json)
Hash identifier: sJAT/s/Zlb1ruqO1dbYlb4O3BczVzWgDhVtzY5efgFc=
Subject key identifier: 8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B3C66C7808B0455D95EF38DC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 18 Sep 2025 13:43:17 +0000
Certificate not after: Wed 22 Dec 2027 14:43:17 +0000
Subordinate resources: IP: 23.145.188.0/24
IP: 2602:f559::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3c:66:c7:80:8b:04:55:d9:5e:f3:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Sep 18 13:43:17 2025 GMT
Not After : Dec 22 14:43:17 2027 GMT
Subject: CN=03b593fc-7488-4247-a974-e98b5e2cd5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:79:e2:a2:5a:e7:0a:3e:58:06:bc:4a:46:
c5:3c:c0:48:29:3f:20:bc:22:ec:1e:0c:10:93:b9:
98:3a:97:c8:d5:31:05:a4:9f:ff:87:70:1c:82:db:
f7:76:4f:9c:99:c6:44:5c:4b:61:cc:10:34:0b:50:
31:82:a5:1c:d8:ee:da:5b:c4:8e:5c:8f:51:d9:e9:
ac:5b:bc:d8:cd:85:ec:50:88:06:0b:32:0e:8a:47:
1e:f2:b0:59:b9:66:71:76:80:e7:52:71:74:bb:90:
81:c5:d8:cd:1a:d5:02:e9:9d:49:9f:b1:d7:c7:4a:
26:df:70:dc:81:25:95:05:6c:c7:b6:7b:19:e7:4c:
7e:6e:24:37:25:a1:e4:3f:31:49:f4:bf:ab:95:75:
a1:fd:9a:25:0d:79:97:05:c0:1e:76:3d:ea:b2:4c:
15:2e:7e:c9:16:e9:d4:90:c9:d0:5d:ba:17:7e:6e:
62:b7:4f:3f:a9:84:50:2f:52:dd:ee:cc:27:fe:03:
6a:9e:96:95:27:0c:58:fe:65:b3:20:8e:c2:24:60:
4d:f0:6d:1b:bb:e1:36:bc:da:9a:d3:87:9d:9b:e2:
0f:51:90:76:fc:e4:09:ce:d7:04:61:8b:86:a1:dd:
43:e6:69:f9:da:2e:e4:b0:dc:f1:cd:52:44:34:4a:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.188.0/24
IPv6:
2602:f559::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a5:ab:4e:1b:4a:1d:6d:d4:fd:a3:4c:56:18:1c:07:de:e1:
20:39:e2:31:ec:06:87:1a:ce:13:1d:d2:71:d8:ce:b5:1e:58:
1d:69:1f:b1:6e:04:0f:22:49:f4:84:34:2d:6b:3b:15:83:11:
ed:9e:1d:6f:8a:65:23:25:8e:56:62:92:b6:1b:44:4c:b5:bb:
92:10:54:a3:1d:28:1d:28:7d:10:9d:8f:ff:77:b2:8e:0b:a6:
ed:a6:d6:24:c2:cf:d6:a3:0d:46:d7:eb:6c:a1:45:ee:50:08:
b3:d4:fc:7e:54:c6:13:5b:29:de:a6:28:70:a1:75:33:cd:60:
9d:38:71:2b:ba:3c:93:66:29:bd:a4:93:c7:f5:37:6f:64:dd:
c8:20:78:94:d0:ef:f1:51:6f:17:de:2e:d5:65:76:b0:1c:06:
0e:dd:f9:72:18:cf:4c:d8:6f:12:29:48:78:c6:38:6a:5d:68:
6a:cb:ea:3f:45:d5:85:b7:9a:20:33:96:9e:a3:df:0f:fc:3f:
93:f8:99:0c:04:c5:bd:f7:07:e3:09:61:a5:6d:42:71:8e:df:
54:d8:91:31:23:95:63:90:99:43:67:06:4f:79:7e:7d:59:0e:
30:cb:62:92:d5:70:b1:a9:45:33:57:e1:96:55:67:80:7a:5c:
05:61:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:24 2025 by rpki-client