
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
File: 589a433f-d0bb-4ea9-85da-52c4d90317c6.cer (raw, json)
Hash identifier: efauuP8qApz7++rGgfgb0sHQ1uR3g9D+VCJb0SGaQio=
Subject key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B8786BDFD4C33A59AD3D3D000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 15 Oct 2025 11:33:19 +0000
Certificate not after: Thu 14 Oct 2027 21:15:40 +0000
Subordinate resources: AS: 401454
IP: 23.147.116.0/24
IP: 2602:f647::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:87:86:bd:fd:4c:33:a5:9a:d3:d3:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 15 11:33:19 2025 GMT
Not After : Oct 14 21:15:40 2027 GMT
Subject: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:e8:68:ad:ca:2a:25:f9:a1:99:31:ac:c6:
4d:e2:82:90:7e:53:b5:c7:2d:1a:a3:a6:d1:a6:33:
94:b8:d0:7b:bb:df:1c:9d:67:39:b6:98:04:f5:da:
ea:61:f3:33:f5:81:c6:ca:90:0c:7f:a2:57:82:d5:
aa:19:4c:1b:9b:50:a8:d2:44:7b:88:ec:df:5a:7d:
d8:67:6e:ef:73:b0:cb:11:f8:68:d4:cb:ad:9e:cb:
6b:bd:bf:7b:83:84:0e:b5:b5:20:44:70:64:65:01:
38:cb:5c:c2:88:56:92:6d:87:17:ab:ee:25:6b:cc:
cb:a7:4b:69:90:74:8d:c5:3d:c0:ba:bf:98:80:29:
8e:a7:b2:1f:71:5e:95:8a:62:e6:50:e5:b5:12:a4:
3a:9d:e1:a4:6e:3f:20:55:cc:33:fe:07:9f:b9:fd:
8c:78:36:b9:ac:5f:be:ca:af:40:8d:4b:49:e2:ec:
fe:26:b2:3e:f9:5b:df:cf:91:ae:81:92:c1:eb:e3:
77:f0:23:81:20:6f:5e:42:a7:44:59:35:c6:23:d5:
b1:f2:5d:fa:33:01:f2:71:96:eb:2e:81:d6:2e:38:
61:44:d0:f9:9c:6e:1a:a0:d0:57:2d:53:30:62:9c:
ed:78:21:e8:8d:3c:46:8f:2f:b9:f4:ff:58:43:0e:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.116.0/24
IPv6:
2602:f647::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401454
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:32:83:bb:61:f2:a8:dc:2f:b5:a7:0a:58:13:46:9a:f9:80:
9f:1c:d0:b7:2a:9d:33:bd:f2:0b:33:0b:e6:28:56:15:32:86:
42:e4:b7:1b:9b:06:42:2a:b0:4e:ca:6e:d7:80:64:31:88:43:
d7:6c:48:a3:a8:bf:04:bc:00:73:9e:66:a7:d1:7b:e5:b4:89:
ac:e0:82:14:bf:dc:91:33:f4:09:06:1e:9f:00:8b:55:c8:72:
6e:5a:ec:b8:ef:94:cd:6b:ce:fb:50:48:18:7e:02:6b:c9:f6:
ea:76:01:8d:7b:cc:00:2a:69:e8:f6:d9:de:f0:51:ad:6b:22:
ae:e8:97:a1:bb:66:8c:72:47:ca:be:d7:4e:b8:78:e9:aa:a5:
3c:85:92:4b:40:55:d0:64:eb:e5:ec:39:f1:2e:c3:83:0b:6b:
25:ac:44:4d:79:40:cb:48:10:e8:73:00:8e:e2:d0:03:15:b8:
af:20:6f:05:1f:16:51:13:01:59:e5:f9:b5:c2:f9:74:2c:f4:
ec:d8:fa:4b:58:3b:cb:72:53:52:01:c1:30:e0:31:f2:e2:31:
d6:69:e1:22:e3:d1:14:72:24:de:73:ad:1a:9e:91:f5:cf:ac:
ab:09:07:32:0c:11:8b:67:01:c8:63:8c:46:db:10:07:e1:65:
79:8b:0a:d2
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuHhr39TDOlmtPT0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI1MTAxNTExMzMxOVoXDTI3MTAxNDIxMTU0MFowLzEtMCsGA1UEAxMk
NTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMxN2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5roaK3KKiX5oZkxrMZN4oKQflO1xy0ao6bR
pjOUuNB7u98cnWc5tpgE9drqYfMz9YHGypAMf6JXgtWqGUwbm1Co0kR7iOzfWn3Y
Z27vc7DLEfho1Mutnstrvb97g4QOtbUgRHBkZQE4y1zCiFaSbYcXq+4la8zLp0tp
kHSNxT3Aur+YgCmOp7IfcV6VimLmUOW1EqQ6neGkbj8gVcwz/gefuf2MeDa5rF++
yq9AjUtJ4uz+JrI++Vvfz5GugZLB6+N38COBIG9eQqdEWTXGI9Wx8l36MwHycZbr
LoHWLjhhRND5nG4aoNBXLVMwYpzteCHojTxGjy+59P9YQw7stQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFHlgIr4zTRps2+ethA9wSrfph2vzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81
ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU4OWE0MzNmLWQwYmItNGVhOS04
NWRhLTUyYzRkOTAzMTdjNi81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkw
MzE3YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXk3QwDgQCAAIwCAMGACYC9kcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzMoO7YfKo3C+1pwpYE0aa+YCf
HNC3Kp0zvfILMwvmKFYVMoZC5LcbmwZCKrBOym7XgGQxiEPXbEijqL8EvABznman
0XvltIms4IIUv9yRM/QJBh6fAItVyHJuWuy475TNa877UEgYfgJryfbqdgGNe8wA
Kmno9tne8FGtayKu6Jehu2aMckfKvtdOuHjpqqU8hZJLQFXQZOvl7DnxLsODC2sl
rERNeUDLSBDocwCO4tADFbivIG8FHxZREwFZ5fm1wvl0LPTs2PpLWDvLclNSAcEw
4DHy4jHWaeEi49EUciTec60anpH1z6yrCQcyDBGLZwHIY4xG2xAH4WV5iwrS
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:45 2025 by rpki-client