
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer
File: 2b54e030-771e-426d-9da1-303caa03d397.cer (raw, json)
Hash identifier: ap4cvIQ/l5SQ2dQMRZJMghw1nt8+toTc2DyLiYz0flI=
Subject key identifier: AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B6241F1FF8A6B369261F4F280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Oct 2025 03:09:47 +0000
Certificate not after: Wed 05 Jan 2028 04:09:47 +0000
Subordinate resources: AS: 401978
IP: 23.145.236.0/24
IP: 2602:f553::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:62:41:f1:ff:8a:6b:36:92:61:f4:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 2 03:09:47 2025 GMT
Not After : Jan 5 04:09:47 2028 GMT
Subject: CN=2b54e030-771e-426d-9da1-303caa03d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:bc:b0:03:82:3c:fc:9c:e1:8f:a7:91:d7:
79:0b:40:6b:4b:e2:62:98:e7:9a:2c:87:20:d5:3d:
72:ec:0e:e5:26:61:0b:37:fe:13:a1:e2:2f:17:b2:
93:2b:d1:72:07:a3:0e:9f:e1:99:ba:fb:ee:a3:00:
45:02:da:ad:48:1b:d7:f9:42:77:ec:66:b8:19:17:
d1:81:81:15:50:71:8c:80:46:7a:aa:03:72:3a:94:
47:39:cc:39:33:e3:67:08:9a:60:e8:77:71:66:a3:
48:80:3a:c3:c0:f6:13:c3:de:b6:4b:4d:1e:6d:e1:
d0:9f:16:a6:85:4f:4b:59:1e:4c:f7:47:82:19:41:
d2:5b:11:ed:86:15:e3:2e:41:26:c6:71:a1:e0:54:
33:93:94:88:da:09:56:cc:c0:30:dd:3b:12:46:1e:
c5:11:89:70:29:2d:c4:b4:3b:83:b1:87:1f:a3:40:
be:1a:2e:a8:13:bb:1b:dc:49:e7:7f:17:80:0b:df:
6e:1c:e8:c7:37:85:0a:fb:21:79:8a:37:7b:46:97:
69:8b:5b:70:2b:81:cd:38:84:f3:07:1e:fd:62:ac:
c4:ad:92:55:38:05:9a:c3:30:cd:1a:37:d0:c4:3c:
71:43:f5:f5:ce:ae:2f:a0:03:45:6f:20:3a:2e:ac:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.236.0/24
IPv6:
2602:f553::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401978
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:e9:a8:d6:9b:36:8a:24:bf:cd:2e:05:b6:f5:6c:3f:33:89:
d9:ac:6a:3f:80:6a:0d:d6:88:fd:d3:94:3d:08:f6:10:40:b1:
28:0d:26:e7:09:b4:9e:6d:10:04:19:d3:81:35:56:08:55:e1:
2b:fc:28:10:5e:c0:0b:6c:dc:3f:39:1e:25:18:26:46:d0:fa:
74:9c:e4:b9:28:a0:d7:c8:98:9c:08:66:c6:9f:f5:db:6f:65:
47:1f:6d:b0:fd:24:53:4e:c6:68:e5:bd:31:f8:41:4f:16:5b:
e8:d1:81:15:f5:6f:02:17:d7:94:53:70:18:f4:76:d7:7d:8b:
8f:c6:21:e0:27:59:07:30:bf:56:c8:11:c9:f3:53:56:a5:aa:
57:1d:65:d3:f7:ad:61:72:36:60:84:7b:c7:34:d3:69:44:c2:
f6:19:43:5c:7f:ef:c8:02:8d:87:5d:88:a9:87:6b:fb:bc:5c:
80:10:01:3c:1f:fe:d2:92:d4:fe:7c:96:75:6a:bb:a1:ac:98:
fb:73:71:06:c2:83:92:b9:b4:e1:48:41:ad:66:ba:4c:51:52:
ba:b1:7d:78:8f:b5:86:4e:05:98:19:2d:eb:9e:7c:85:11:a3:
8b:68:1f:3c:62:17:27:69:9a:dd:61:02:68:6e:0b:38:91:84:
d2:da:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:35 2025 by rpki-client