
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa.cer
File: 34285642-e4d7-4f7f-9184-0dd9bad48efa.cer (raw, json)
Hash identifier: 0yg54/bde2iV2XSG27ZlqXGFFkt5MCZGMHkFSoAEFQA=
Subject key identifier: 02:19:AA:05:DC:19:83:DA:9A:9B:79:BB:01:7B:E3:70:5A:AF:E1:86
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584A9DED0962811465D46B64CC00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/34285642-e4d7-4f7f-9184-0dd9bad48efa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 23 Jul 2025 19:20:16 +0000
Certificate not after: Tue 26 Oct 2027 19:20:16 +0000
Subordinate resources: AS: 11333
IP: 162.42.0.0/16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9d:ed:09:62:81:14:65:d4:6b:64:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Jul 23 19:20:16 2025 GMT
Not After : Oct 26 19:20:16 2027 GMT
Subject: CN=34285642-e4d7-4f7f-9184-0dd9bad48efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:fb:aa:39:8f:5f:1e:b8:e0:d0:16:f5:aa:
ab:b8:46:ea:ed:9c:cb:25:cd:53:17:72:bc:ea:a0:
1a:d0:0b:fe:6d:65:44:2c:90:26:2a:88:2f:0c:d2:
07:be:4e:e5:0f:fd:25:19:1b:76:32:71:95:5c:8a:
47:ae:b4:36:97:00:26:e7:ec:f3:07:5d:e9:ce:ea:
14:36:5a:b0:3e:b1:47:3e:88:e6:61:8f:d5:e6:ef:
49:0d:c7:7e:44:60:ab:44:65:02:3c:ee:38:3e:d5:
7f:86:a5:28:40:07:cc:eb:f2:bc:b1:3e:ad:d7:aa:
24:ef:60:bc:52:d3:2b:43:06:5e:98:d7:68:9b:4a:
99:20:1a:5c:29:db:72:b1:59:3e:0d:37:35:85:4a:
ed:31:a8:18:65:ad:f6:15:db:87:66:7b:ed:4e:95:
f3:24:d7:39:b7:82:d8:c5:3b:3c:1b:5f:8b:cd:cd:
ff:8c:c2:a1:96:13:91:96:02:f3:ae:5a:6a:5a:17:
0a:95:0b:1b:48:31:22:1f:ad:60:91:36:f3:44:18:
13:b8:8a:c5:99:33:38:d1:6c:aa:c3:73:9d:96:0c:
33:fb:cb:8f:b8:a3:0d:2d:26:12:ed:c3:47:e6:f5:
93:50:ac:82:9c:5c:15:33:c7:f3:35:d9:d7:74:0c:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:AA:05:DC:19:83:DA:9A:9B:79:BB:01:7B:E3:70:5A:AF:E1:86
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34285642-e4d7-4f7f-9184-0dd9bad48efa/34285642-e4d7-4f7f-9184-0dd9bad48efa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
162.42.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11333
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:b0:46:61:76:4e:f3:ee:f6:23:6f:b4:94:06:b5:8d:99:cb:
f7:bf:e7:ee:09:15:87:55:35:04:e2:8a:57:0a:0f:17:0f:8c:
11:02:d9:f3:63:bf:ec:ae:95:b7:c3:a1:25:fa:92:ad:ec:14:
e4:57:83:79:9c:27:c9:42:24:df:a2:f5:8d:38:e9:e8:4f:85:
cb:95:26:03:0a:e5:06:26:b9:04:a0:06:fc:57:81:3e:ab:f5:
51:72:e7:98:ef:50:c0:c4:ab:7b:5f:26:ab:b5:27:32:11:f0:
0f:f0:e3:b1:65:d2:43:4b:19:18:b2:27:61:55:30:51:e7:69:
8a:2e:f2:d7:4c:24:83:83:3e:c2:78:ce:24:2a:df:2a:b8:07:
06:24:22:34:a4:f6:94:b3:32:1f:8d:67:36:bd:be:e5:31:ea:
eb:97:72:d1:2d:69:2f:e4:1b:23:85:f7:92:e9:89:6a:3b:82:
94:05:c0:64:81:53:02:52:f1:e6:1c:2d:d7:92:11:59:8d:94:
6d:c6:0e:0e:5e:2a:52:2e:79:ed:b0:64:2c:b6:98:8e:37:1d:
20:fd:31:ce:f6:45:2d:5b:78:da:80:62:b1:06:9d:95:e5:87:
54:3a:e1:ef:12:22:e8:ba:2f:41:6a:11:88:6b:a6:46:6b:8c:
8a:7e:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:19:16 2025 by rpki-client