
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4e15ced-54f9-409a-b480-70705d5e9aef.cer
File: a4e15ced-54f9-409a-b480-70705d5e9aef.cer (raw, json)
Hash identifier: unsCO5Wf8lw3MrAxMpJCqL4RVnYWhopw2SRVzb1QfK8=
Subject key identifier: FC:82:95:E2:29:BF:19:EE:C6:9F:42:65:5B:A7:29:B0:D3:C8:AA:9D
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584AD126109E33F0DC647EFE5F00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4e15ced-54f9-409a-b480-70705d5e9aef/a4e15ced-54f9-409a-b480-70705d5e9aef.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4e15ced-54f9-409a-b480-70705d5e9aef/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 11 Aug 2025 03:41:24 +0000
Certificate not after: Sun 14 Nov 2027 04:41:24 +0000
Subordinate resources: AS: 401865
IP: 23.142.188.0/24
IP: 2602:f5bd::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:d1:26:10:9e:33:f0:dc:64:7e:fe:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 11 03:41:24 2025 GMT
Not After : Nov 14 04:41:24 2027 GMT
Subject: CN=a4e15ced-54f9-409a-b480-70705d5e9aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:01:ad:fa:46:53:73:a4:62:5a:81:8f:98:
c9:28:fd:74:89:b7:f8:77:60:20:d8:fe:b5:cf:e0:
fc:47:94:a9:72:11:65:45:a3:2e:48:db:20:80:fa:
ac:1b:db:d3:5c:82:d5:ca:4b:68:b5:95:09:56:60:
a7:16:b6:d0:5d:d4:35:4f:11:49:8e:36:85:ba:a6:
2c:e2:54:f6:b1:82:2b:f1:d9:bc:40:3a:c1:5b:1b:
82:68:4e:73:aa:c3:eb:b1:cd:bf:bc:9c:44:f2:7b:
54:6e:64:1f:2f:25:ca:04:3d:02:a5:2e:76:d3:c7:
33:87:3c:8b:b7:53:4e:bc:51:7f:7f:80:54:1b:51:
4e:06:fe:04:08:d3:64:dd:1e:62:a0:05:b4:35:94:
59:43:bf:02:a4:cc:90:c4:02:73:db:c4:71:b5:24:
2d:9b:22:44:e2:ec:30:0c:05:36:ea:d9:49:33:a6:
50:5e:5f:84:57:a9:85:60:60:d5:eb:07:0c:91:c0:
23:53:d2:f1:b5:9d:dc:b2:08:06:4f:59:ee:ba:a4:
32:de:aa:3a:66:79:25:64:39:c4:a3:9b:05:ed:c6:
65:78:be:81:75:df:4c:f8:97:b7:b8:3c:82:82:fb:
97:d3:5d:3b:d8:77:9a:ab:a7:df:7e:4b:bd:97:24:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:95:E2:29:BF:19:EE:C6:9F:42:65:5B:A7:29:B0:D3:C8:AA:9D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4e15ced-54f9-409a-b480-70705d5e9aef/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a4e15ced-54f9-409a-b480-70705d5e9aef/a4e15ced-54f9-409a-b480-70705d5e9aef.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.188.0/24
IPv6:
2602:f5bd::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401865
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:af:9a:d7:86:96:e1:81:f6:f6:df:e3:f2:a2:6a:53:b2:f8:
ed:2a:fb:53:19:86:ec:f1:7f:6b:6a:fa:80:7d:78:0a:07:1e:
ca:c0:98:ff:df:3c:36:9a:eb:01:8b:31:e1:dd:11:b4:fc:f6:
60:09:d1:6b:90:13:28:7a:53:e9:27:90:3a:cf:f4:2d:7b:32:
1e:f4:43:6c:58:d3:e2:07:00:ea:cd:db:46:7f:f2:cc:ff:5e:
27:7d:a3:bf:f5:a3:16:fc:c2:48:44:77:a3:4a:c2:c5:d6:94:
ad:67:3c:66:be:e9:1e:27:80:14:b7:a1:04:1d:a2:b9:c1:a5:
2d:14:8f:ca:f8:be:48:ff:e4:06:a7:21:ad:38:0a:78:66:55:
dc:2f:37:00:7a:28:c5:dc:98:d3:9f:60:7e:3e:ba:47:67:9d:
f9:e9:de:4e:e6:31:32:93:99:22:74:29:3b:3a:97:1b:0f:da:
05:b5:2e:e8:a2:84:4a:01:1c:62:36:2c:cb:70:2e:f3:ac:8d:
7f:ce:05:d9:50:a8:21:5a:8b:58:c3:9f:60:d1:da:28:9b:29:
0d:e0:c8:6a:2e:65:f8:20:57:82:4d:d8:0e:3e:c2:a2:03:cb:
49:ee:53:b9:8b:cf:fb:80:e2:bb:c5:41:fd:4a:e9:2b:b2:07:
bf:d6:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:03 2025 by rpki-client