
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6.cer
File: 4d541041-019c-4979-9880-aed5fbe0e9d6.cer (raw, json)
Hash identifier: AqVVyvQ6CTslEFXDWaWR387UMuPOMvV/RDBi9ZzuZDs=
Subject key identifier: C7:3F:51:5C:14:5A:F9:40:28:D1:53:48:D2:AC:49:3F:B1:94:15:1F
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584AE6B8371DD30EA9A4166E6880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/4d541041-019c-4979-9880-aed5fbe0e9d6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 18 Aug 2025 21:07:51 +0000
Certificate not after: Sun 21 Nov 2027 22:07:51 +0000
Subordinate resources: AS: 1089
IP: 2602:f784::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e6:b8:37:1d:d3:0e:a9:a4:16:6e:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 18 21:07:51 2025 GMT
Not After : Nov 21 22:07:51 2027 GMT
Subject: CN=4d541041-019c-4979-9880-aed5fbe0e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:71:d7:2f:78:94:59:2c:47:71:9b:df:4a:
53:48:3c:7a:a4:86:32:53:75:e9:f2:61:8f:1c:d8:
21:b2:4c:71:d6:a5:30:ba:14:aa:d6:48:64:8c:f6:
7a:58:99:af:91:56:41:3c:04:bd:31:20:81:a3:a5:
fd:9d:df:84:51:c2:e9:65:6a:37:95:f5:61:3d:b8:
eb:7e:3e:e2:0a:57:9d:a8:04:9f:1d:49:aa:a3:1b:
ce:32:31:d9:03:97:8e:21:86:37:67:5f:4f:c4:d9:
89:9e:5e:89:34:a0:85:dd:84:14:b7:ae:54:3a:4c:
6f:d9:ee:f6:cb:ad:2d:0a:58:74:9d:e8:60:75:59:
34:21:7a:af:fa:83:fa:29:e7:36:6e:ac:b0:7a:f0:
13:a6:4a:fb:0c:9a:00:11:07:8a:01:f4:8f:2b:04:
af:7a:0a:89:a9:bd:17:9d:47:20:1f:a7:5d:f0:6b:
56:84:24:08:66:d5:45:ce:e2:4b:49:ba:8b:f9:7d:
08:37:62:52:9b:88:cb:20:01:f4:c5:de:9d:5f:0a:
66:96:19:9a:6c:fa:02:0c:7f:70:fa:e9:76:d8:c0:
ce:cc:cd:f5:07:5c:22:c4:a0:22:d2:80:d7:9d:cd:
c1:86:4d:65:e1:e8:11:66:49:c3:ca:55:28:a1:8a:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:51:5C:14:5A:F9:40:28:D1:53:48:D2:AC:49:3F:B1:94:15:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d541041-019c-4979-9880-aed5fbe0e9d6/4d541041-019c-4979-9880-aed5fbe0e9d6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f784::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1089
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:79:d5:cd:4d:11:6d:4b:0f:85:13:47:37:f6:17:37:71:05:
43:43:87:36:2a:e1:d1:7d:47:ea:88:fa:dd:0b:19:ca:fe:93:
83:3f:b6:46:4d:85:52:59:28:ef:11:9f:8c:de:46:4b:0a:b2:
ee:93:9d:d6:3a:75:39:dc:09:7c:e3:e2:26:80:35:f0:76:17:
6c:27:e1:d3:e5:45:68:66:e0:92:04:99:94:81:ef:68:13:87:
9f:58:0d:3e:eb:fb:81:68:53:e0:11:9c:c1:3c:9e:ba:bd:a7:
47:6e:7f:79:ee:6d:81:f3:55:8c:9b:0a:c5:5e:32:29:7c:53:
d7:e5:ee:bb:23:2d:ce:de:69:ba:b3:3a:cc:d1:79:a8:0b:10:
cd:5a:ca:0e:4e:75:ce:21:79:54:21:0e:ed:36:b3:f5:54:13:
0b:40:c4:be:fd:f3:e1:12:9b:c7:9e:ff:cb:8e:14:e0:27:7f:
cf:91:bd:43:fb:12:3e:30:e2:38:85:58:e9:d6:de:7d:f2:7c:
ba:2c:aa:40:d3:7b:70:3c:fb:fe:c7:e1:8e:fd:de:77:7a:67:
b8:e0:38:f3:26:cc:62:3c:33:b3:cb:04:43:a4:7e:9e:c7:19:
d3:d1:d6:13:9b:c7:96:69:c7:c7:4f:4c:98:85:a3:9a:2d:fd:
5e:49:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:10 2025 by rpki-client