
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95.cer
File: 41babb23-89de-46a4-977a-703f3bd0ca95.cer (raw, json)
Hash identifier: ORzbMA1HTH8YoIpuQOVVONW2E6poadMNeM+ISldykP4=
Subject key identifier: 39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B28EFACA50E8114E92E19A580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 11 Sep 2025 14:22:57 +0000
Certificate not after: Wed 15 Dec 2027 15:22:57 +0000
Subordinate resources: IP: 23.145.76.0/24
IP: 2602:f566::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:28:ef:ac:a5:0e:81:14:e9:2e:19:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Sep 11 14:22:57 2025 GMT
Not After : Dec 15 15:22:57 2027 GMT
Subject: CN=41babb23-89de-46a4-977a-703f3bd0ca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:3e:2c:21:b0:12:47:61:65:1f:5e:a9:0f:
9b:67:3e:b5:d6:f0:03:51:5a:64:f9:63:d8:64:c4:
1d:af:a4:01:81:c3:06:56:90:95:6e:a7:9e:fc:5d:
1c:67:61:8f:2c:70:56:b8:c2:b3:6d:94:55:e5:42:
39:f6:da:8e:dd:19:d6:ba:f7:34:61:e9:7c:8b:26:
2f:d9:54:fe:0f:88:5d:7d:46:3a:eb:f7:a4:4f:03:
38:c7:50:ce:2d:eb:e0:bb:d5:5c:45:4a:d1:44:3c:
2d:2e:4c:84:16:3e:9c:f5:e7:30:09:dc:7f:38:ba:
36:d1:e4:55:dc:a9:5c:e7:1e:b8:a2:3c:08:95:f9:
d9:e1:8a:2c:94:79:cd:d9:4d:3c:2c:6d:96:3c:ad:
91:42:dc:0b:a0:2e:f7:19:8e:56:9f:88:62:24:76:
fd:9a:bf:f5:16:22:11:fe:bc:6f:e9:3d:c6:a7:6a:
e1:5e:be:4b:48:2a:17:bc:10:5e:ab:e6:66:b8:c7:
cd:a5:44:db:0a:3c:5a:67:8f:09:6f:4a:48:40:d6:
5f:0f:50:7c:dc:7a:a4:31:de:24:ba:b0:15:2f:22:
5b:5a:47:c4:04:26:86:e3:f7:ee:4f:d5:c6:cf:db:
94:65:92:1c:ed:eb:64:6a:5d:0b:44:0e:c8:e4:db:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.76.0/24
IPv6:
2602:f566::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:ef:de:f0:5c:ee:7d:2e:b6:0e:9c:20:dd:94:39:ca:b8:24:
b0:df:26:d3:6a:7c:4e:66:45:dd:52:78:94:e8:8c:f9:30:1c:
41:ee:a6:20:6d:75:8a:73:db:6a:b6:4a:61:21:0a:e8:a6:d2:
1b:c2:40:da:2e:da:f0:b4:ec:02:a5:6e:26:a4:11:c1:48:98:
22:dc:f6:24:18:3a:fd:20:c1:a2:c6:75:8e:1b:26:81:4d:66:
8c:15:be:6f:37:3d:d7:b3:91:08:9a:00:e2:aa:e8:03:50:2c:
ea:a7:97:7d:4e:dc:e7:23:47:af:50:4b:1f:9b:3a:51:78:09:
5f:29:39:1d:2f:d1:59:79:d7:91:dd:92:e9:03:ac:e0:bb:e7:
19:67:fe:a9:f2:d5:03:26:41:bc:b8:3d:89:da:52:fe:04:42:
90:85:5a:ba:2c:f9:17:03:60:e6:9e:87:32:6c:86:ab:f5:fc:
3e:7a:28:07:00:cc:9e:5e:fc:4c:2b:a3:37:8b:ff:b1:42:85:
28:f4:79:92:79:2e:30:f4:5c:26:47:d1:34:a3:75:ce:60:be:
18:78:fc:f9:87:cd:b9:d4:cd:67:b6:d4:b8:72:47:92:c0:62:
16:64:bf:56:c8:99:c4:a3:90:36:b5:36:e3:51:3a:22:fb:68:
77:72:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:40:53 2025 by rpki-client