
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8c48326a-28bc-47d0-99c2-2a185f830d37.cer
File: 8c48326a-28bc-47d0-99c2-2a185f830d37.cer (raw, json)
Hash identifier: uWWzRdCY+ue5ua+lTfYcwJ7eGaCx13rmLOlQz9mCyW4=
Subject key identifier: FD:DE:29:6C:E5:47:DC:E8:70:77:3A:D5:71:72:C1:74:DA:0D:29:A2
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584AD8615D6DAE52E71455179AA0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8c48326a-28bc-47d0-99c2-2a185f830d37/8c48326a-28bc-47d0-99c2-2a185f830d37.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8c48326a-28bc-47d0-99c2-2a185f830d37/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 13 Aug 2025 17:51:33 +0000
Certificate not after: Tue 16 Nov 2027 18:51:33 +0000
Subordinate resources: AS: 54918
IP: 174.34.226.0/24
IP: 198.186.189.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:d8:61:5d:6d:ae:52:e7:14:55:17:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 13 17:51:33 2025 GMT
Not After : Nov 16 18:51:33 2027 GMT
Subject: CN=8c48326a-28bc-47d0-99c2-2a185f830d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:9b:32:d6:9d:d8:7b:71:15:12:63:e3:55:
50:36:b1:2a:ee:ac:51:f5:fc:0d:5b:ee:fc:1a:ed:
c1:1c:7a:fb:3c:ce:8e:f1:d1:84:05:0c:3e:3c:c7:
d7:6e:0e:04:ee:6c:34:cf:63:7c:db:7c:54:b5:1a:
73:ac:8b:d6:e5:0c:fa:7b:2a:4e:2c:19:36:c2:7d:
4c:15:12:e4:f4:4c:4d:a8:ac:90:c1:f8:39:59:f3:
e8:7d:ee:62:84:a8:53:82:c9:ca:79:09:88:d3:ba:
fd:e2:75:1c:4e:ff:fa:c2:84:35:3d:b3:9d:4b:5e:
43:aa:0b:39:0e:b6:e6:73:3b:38:6c:69:df:f9:57:
ce:0d:56:41:8d:98:3a:06:1b:7c:19:cf:7f:ef:50:
d3:10:ec:52:55:ef:e6:72:eb:4d:bb:ae:40:84:4e:
68:44:d1:c6:e8:ea:a4:e1:e2:01:b0:a4:49:ca:9c:
f1:f5:8b:ec:c1:12:65:c8:d7:5f:2d:a8:fb:f3:b3:
68:9c:29:0f:ed:c3:6f:c2:4a:25:e2:b0:ef:f7:5e:
3a:84:67:b6:5f:0e:72:45:4f:01:3c:fd:a1:24:61:
33:7c:40:3a:a9:28:bb:8c:41:63:22:11:29:7f:c9:
eb:68:47:36:ad:3c:32:c5:75:95:96:a4:36:8e:84:
4c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:29:6C:E5:47:DC:E8:70:77:3A:D5:71:72:C1:74:DA:0D:29:A2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8c48326a-28bc-47d0-99c2-2a185f830d37/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8c48326a-28bc-47d0-99c2-2a185f830d37/8c48326a-28bc-47d0-99c2-2a185f830d37.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.34.226.0/24
198.186.189.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54918
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b3:c7:d7:a1:f7:79:da:a6:a9:e1:1e:e9:59:d6:8a:80:fa:
a5:91:a8:fd:3f:3e:7f:59:77:19:41:50:d7:01:13:51:59:aa:
41:67:53:9e:bf:a5:e1:a4:44:2c:a4:56:be:34:30:c3:5d:c6:
e1:f9:f7:f6:73:81:e0:8b:e8:1f:02:b2:86:4e:73:3b:b7:f9:
a5:70:1d:ce:42:a8:22:51:14:a8:77:1e:74:8e:c6:6a:6a:60:
2d:9d:34:6f:c1:5a:a6:f5:fb:90:c8:79:1d:44:5a:be:d2:12:
f8:9d:c7:4b:14:90:ed:94:cb:c1:9b:e1:97:04:60:31:37:3c:
2b:6b:13:32:dc:12:4a:79:c3:4d:29:21:07:cf:3f:da:9f:9f:
bf:71:6a:71:7a:29:00:66:5c:54:96:6d:7a:09:f9:df:80:d1:
fc:a2:69:11:77:b6:04:c2:c2:97:93:12:cc:e0:e3:51:e8:bb:
19:63:0b:9f:fd:ce:90:16:26:8d:d0:da:b7:c1:62:1f:0a:d2:
6c:6b:61:c4:19:99:60:81:0d:44:ee:8c:8a:9e:ae:f9:81:af:
31:e4:d7:33:0c:2c:f1:ed:5f:91:1e:c0:da:f7:0b:4f:63:9b:
94:91:09:3b:28:ce:ba:e1:cd:d9:1a:b6:0f:24:25:34:7e:2a:
14:d7:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:59 2025 by rpki-client