
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
File: 4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer (raw, json)
Hash identifier: 32sh5an7cJBHOj0IgvWy8zODWURhALYiJAuGFSmQGww=
Subject key identifier: 06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B707587F17AA91B03D86803E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 07 Oct 2025 05:15:03 +0000
Certificate not after: Mon 10 Jan 2028 06:15:03 +0000
Subordinate resources: AS: 402038
IP: 23.146.180.0/24
IP: 2602:f538::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:70:75:87:f1:7a:a9:1b:03:d8:68:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 7 05:15:03 2025 GMT
Not After : Jan 10 06:15:03 2028 GMT
Subject: CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:b8:80:66:29:a8:74:d3:29:1b:ed:a6:18:
95:1e:75:b3:d3:39:dd:ab:46:3c:30:d3:eb:11:c6:
47:1c:e0:4b:2e:01:b7:50:1c:86:e2:f1:09:0e:c1:
f9:b1:dc:0b:27:ea:df:b1:2a:8f:8e:7c:93:92:8e:
a6:06:36:1f:ce:81:9f:dc:ff:1b:36:49:e7:fa:fc:
38:53:e6:0a:6b:f8:77:f6:e9:d5:9c:8c:6b:30:d3:
82:d3:f4:f4:c6:9c:c8:48:c5:cf:a7:a6:72:d4:cd:
39:f6:0d:3a:e9:2e:c1:9b:23:fb:93:af:d3:a0:49:
b2:17:c4:93:94:80:f1:52:5e:73:03:a1:e8:2c:43:
a8:38:c3:29:e5:6b:1e:4e:2b:33:ec:32:17:9e:c3:
3a:c4:07:ea:f1:ef:a4:8a:85:fb:89:39:52:a5:08:
18:d9:08:0a:ce:09:6c:17:2b:bf:d6:b7:35:5e:1f:
de:d4:4f:1e:30:88:41:87:bf:27:44:8f:6d:84:8f:
ed:3d:55:19:fb:14:20:aa:e7:eb:2d:ba:21:4d:34:
59:e8:09:02:61:44:6c:ec:14:f3:42:a2:dd:5a:d5:
8f:4a:51:05:ec:6b:2f:79:34:d6:8d:c8:9f:97:38:
a5:c5:9a:8a:04:27:40:88:37:d7:37:c8:ae:46:a4:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.180.0/24
IPv6:
2602:f538::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402038
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:c3:e6:ee:b0:3a:f8:44:64:79:03:91:53:62:56:a0:47:8f:
68:e3:a7:af:80:d5:ad:04:de:78:c0:c1:0c:c7:c7:ba:a4:31:
d9:48:f5:63:9d:81:9c:ee:78:67:de:1c:70:78:8d:03:65:8b:
77:27:ae:78:ae:74:e3:fe:4c:fa:81:38:0c:08:b2:3e:f3:9a:
23:88:31:8d:9d:d5:20:63:4d:f4:0a:2c:32:21:bb:5b:b4:eb:
02:85:33:3c:27:71:fe:b0:c7:48:85:da:cb:ad:04:c9:3a:2c:
1f:4c:bd:8d:4d:c8:62:6e:c0:ce:b6:66:4c:af:de:28:03:02:
29:31:3a:9a:ec:21:ca:d2:e6:6d:e1:4c:0d:8c:7d:7f:3b:b5:
76:51:12:c2:6c:be:33:41:f1:3a:52:17:10:ff:29:0e:6b:ec:
6e:53:cd:53:8d:94:1b:2c:25:bf:b1:40:eb:64:4b:5b:de:92:
74:47:d5:34:05:81:81:f7:89:22:e6:e0:6d:c2:aa:69:53:0c:
b4:2c:68:1a:57:ef:76:6b:40:c9:9c:5e:f5:ec:c6:58:36:a7:
dc:3e:da:4c:9e:01:05:22:9d:b9:6a:dc:87:6b:84:e1:a8:8b:
6a:28:b9:f3:2f:39:35:60:ec:b9:72:55:ae:91:a5:26:80:a2:
8a:28:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:34 2025 by rpki-client