
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.cer
File: 29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.cer (raw, json)
Hash identifier: nW93Q7Rs47jmtHM4yqRV/+XvUoKA6SGgQkhjKMm7ujI=
Subject key identifier: B9:7A:49:52:D7:91:68:B3:A3:9E:A2:67:35:D5:08:E1:47:11:64:C3
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584FB66989F6F91416D2E54E3580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Nov 2026 01:45:13 +0000
Certificate not after: Mon 05 Feb 2029 01:45:13 +0000
Subordinate resources: AS: 13769
IP: 192.154.8.0 -- 192.154.12.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b6:69:89:f6:f9:14:16:d2:e5:4e:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Nov 3 01:45:13 2026 GMT
Not After : Feb 5 01:45:13 2029 GMT
Subject: CN=29c8f112-0387-49a9-9bd7-2a6af0b4c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:4b:dc:0f:35:ea:ea:13:9d:7e:90:03:7f:
54:ac:93:95:ee:93:d9:88:61:44:ab:26:0c:a9:62:
f3:d6:9a:98:22:8a:49:0a:a0:96:dc:3f:a6:a6:7b:
e1:25:c8:71:fa:7c:08:9b:e1:2d:22:d3:fd:ca:5a:
2d:67:ed:56:1f:5e:28:05:7a:8e:e2:44:78:87:78:
bb:dd:05:6a:cc:3a:5d:cb:7f:47:ce:59:d2:f9:6b:
27:df:bf:12:b2:9a:b6:e8:e9:0e:6c:a4:49:42:b4:
48:a1:be:ae:1c:11:5e:fa:06:36:c3:5b:24:d0:a1:
2c:55:47:14:59:93:63:3c:59:20:ed:72:da:12:d4:
c4:c9:22:5b:88:97:80:c7:68:e1:51:75:8b:f1:62:
a3:34:de:f5:6d:74:be:18:cd:b8:91:24:ca:89:c2:
25:f6:c5:29:b1:82:f9:10:1a:42:48:63:11:80:28:
10:dc:b4:6d:d1:a2:46:33:ca:a0:14:7d:0d:51:56:
bc:cf:13:61:bf:bc:44:21:bc:29:27:d1:a2:07:d5:
a9:aa:8e:d7:c4:d5:c9:fe:51:e5:73:fc:22:f6:68:
7a:06:92:21:e6:09:f4:0a:bb:60:df:1c:d8:c1:1f:
6c:04:c1:37:67:38:3f:22:78:89:30:be:e6:af:67:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:49:52:D7:91:68:B3:A3:9E:A2:67:35:D5:08:E1:47:11:64:C3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff/29c8f112-0387-49a9-9bd7-2a6af0b4c9ff.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.8.0-192.154.12.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13769
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:9a:f1:09:41:15:00:1d:f1:ef:37:48:be:04:2c:16:d6:0b:
b1:f0:14:3f:22:55:54:84:b6:12:b3:8b:9e:f2:96:b1:c0:3f:
4a:46:b9:ba:fd:6a:16:a0:1f:88:c4:ea:31:8e:ff:06:92:34:
cf:6f:76:ee:22:fe:30:69:4b:99:85:ca:14:70:2c:56:5b:27:
9a:7f:01:89:63:c4:ac:2f:60:84:00:6f:b8:51:b1:c0:ae:f8:
ff:c1:6e:0c:07:6e:2b:30:5d:fd:b9:e7:48:0e:20:eb:f1:99:
6a:0c:c2:6b:6f:50:7e:ac:af:c0:28:b7:23:d0:7a:be:17:16:
09:e8:66:78:f6:06:85:cf:82:fa:9c:76:65:d9:d4:ac:f5:e5:
d2:5d:0e:0f:c1:72:e3:08:21:51:6f:7b:31:21:b3:da:62:bc:
00:b8:3e:65:b8:8c:6f:66:77:23:6c:1c:b6:88:52:ba:d4:8c:
65:5f:93:1e:ed:e7:6a:96:de:f8:09:b2:7f:7d:bc:ce:d7:5e:
97:13:38:29:f9:9c:04:5d:e5:fa:52:47:d9:62:9e:2f:a8:5e:
8c:b8:1f:51:42:42:53:65:1c:80:00:42:ad:c5:0f:fb:23:11:
48:8c:3e:89:2d:e8:b2:eb:8e:5c:d2:8f:47:6b:46:a5:4a:ef:
f7:61:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:37:01 2026 by rpki-client