
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52199fb0-398b-4a59-899c-7d6e3811d5f9.cer
File: 52199fb0-398b-4a59-899c-7d6e3811d5f9.cer (raw, json)
Hash identifier: 5RwbwYsZFEb0EjxrKm0fSTYpyX4yFD6AlT9iK5B1ct4=
Subject key identifier: 75:05:CD:76:9C:BE:3A:53:F8:1E:81:F3:C2:4B:AE:FE:30:4B:F9:4F
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584A9AC3A7039DD91CB2798A33A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52199fb0-398b-4a59-899c-7d6e3811d5f9/52199fb0-398b-4a59-899c-7d6e3811d5f9.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52199fb0-398b-4a59-899c-7d6e3811d5f9/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 22 Jul 2025 16:09:28 +0000
Certificate not after: Mon 25 Oct 2027 16:09:28 +0000
Subordinate resources: AS: 401660
IP: 139.180.30.0/24
IP: 209.222.118.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9a:c3:a7:03:9d:d9:1c:b2:79:8a:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Jul 22 16:09:28 2025 GMT
Not After : Oct 25 16:09:28 2027 GMT
Subject: CN=52199fb0-398b-4a59-899c-7d6e3811d5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:23:e2:97:53:bf:31:0c:fc:2f:2c:de:c7:
c2:70:3b:fe:c7:93:30:d1:d4:22:c0:f5:73:e4:97:
b5:53:d7:24:f8:cd:5f:67:e0:93:80:a7:e0:b5:9f:
09:fa:84:11:88:f1:12:77:8a:d2:2c:1b:32:6e:5c:
89:31:cc:e5:48:88:9a:d4:5a:dd:22:5a:68:19:f8:
bb:a9:0c:17:4d:c9:dc:77:11:92:27:33:10:fc:e6:
d3:3a:94:1d:66:f3:58:dd:15:90:3c:c2:af:97:c3:
a7:9c:35:84:8d:c4:58:a4:6a:c9:a6:a9:9b:15:1b:
36:eb:aa:a6:7d:4a:d3:ab:ae:50:4d:e7:7f:08:56:
51:7a:97:5f:15:8f:1d:3b:88:6a:6c:3a:b5:eb:4b:
9b:7c:1c:fb:3d:d4:69:f1:40:3e:d0:0c:4d:c3:9b:
01:87:82:ba:90:48:e6:99:dd:9a:db:19:51:5d:fe:
de:a8:27:e5:2f:5a:6c:36:65:57:fc:ed:20:29:95:
a4:ed:5d:37:51:b2:0e:ec:e6:4a:88:7d:63:f7:7b:
71:34:6a:5b:77:af:46:a6:8c:41:de:d1:70:a5:02:
ec:55:e8:f9:ca:bb:b7:6d:9a:27:58:8f:c8:31:ef:
00:9f:6d:06:10:56:e5:17:b7:af:03:c6:cc:43:39:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:CD:76:9C:BE:3A:53:F8:1E:81:F3:C2:4B:AE:FE:30:4B:F9:4F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52199fb0-398b-4a59-899c-7d6e3811d5f9/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52199fb0-398b-4a59-899c-7d6e3811d5f9/52199fb0-398b-4a59-899c-7d6e3811d5f9.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.180.30.0/24
209.222.118.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401660
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:3b:cd:da:15:b3:ee:69:d6:2c:d0:a0:18:e8:bb:68:56:38:
53:32:60:a6:6b:b7:66:47:fe:b8:9b:66:36:61:49:cd:9c:20:
67:83:15:46:70:6c:7b:a7:be:5d:be:39:15:5e:21:b5:a3:12:
13:2b:55:3e:06:d0:c6:ad:a5:7e:e2:06:0c:d0:51:3f:26:2f:
3e:2c:9f:d4:2b:2a:d4:3b:2b:33:48:cf:56:70:63:66:5f:4f:
ac:42:81:a9:34:3c:05:30:3f:04:b1:c3:0d:a2:6e:e9:99:f2:
b9:18:98:4f:9a:5a:f0:42:0c:14:fa:85:73:83:58:86:b1:1b:
a5:c0:ee:0b:1b:df:a5:34:60:55:99:50:b2:be:51:8b:a5:35:
f9:c1:29:e9:f5:53:ee:4e:f5:f7:1d:bc:e7:88:4d:f7:55:29:
06:63:64:02:6b:80:a5:e6:7a:50:8f:46:2d:25:8f:f8:a3:b7:
1c:df:0b:f1:ad:44:46:81:37:7c:ba:d5:e9:0c:fc:a7:02:a2:
e2:60:9d:85:a7:3f:64:e9:bb:87:44:9a:8a:ce:b4:68:61:ab:
98:ef:de:4a:08:41:2d:93:a9:14:30:cb:77:18:80:33:c2:4f:
0b:62:10:63:71:d2:ca:57:7b:54:1c:e0:3b:33:c1:d1:13:02:
fc:75:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:02 2025 by rpki-client