
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer
File: aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer (raw, json)
Hash identifier: oCuJt+OF6oSAqfcn5pB5+yqUOwkWvAZS7c39pw/UdxQ=
Subject key identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584AEB6AEB491F8365977DA0B600
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 20 Aug 2025 13:31:09 +0000
Certificate not after: Tue 23 Nov 2027 14:31:09 +0000
Subordinate resources: AS: 36267
IP: 172.83.52.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:eb:6a:eb:49:1f:83:65:97:7d:a0:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 20 13:31:09 2025 GMT
Not After : Nov 23 14:31:09 2027 GMT
Subject: CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:0d:4e:99:d7:01:cf:25:7c:e2:aa:52:bd:
de:25:32:c3:57:80:97:c2:05:34:0d:ef:bb:05:bb:
ea:90:35:5a:a4:ff:f0:95:e4:54:d8:5e:cd:72:de:
7d:d3:04:7a:16:b7:b6:89:7a:d7:a9:c0:2b:98:cd:
11:29:c6:2c:fd:43:8b:87:8e:92:26:e0:1e:df:2f:
5e:03:d1:5a:14:f1:b6:8e:3d:ee:09:27:8a:aa:e6:
7d:45:8a:2d:d4:19:c5:3b:21:c2:50:78:d8:63:4c:
41:b0:9e:72:7a:c8:30:46:0f:c8:90:11:09:6f:39:
bd:0d:54:7c:00:18:20:2a:73:11:cd:ab:0d:5f:81:
a8:ee:fc:14:a5:cb:2b:91:2b:df:87:88:ae:c6:9c:
3a:c9:58:ba:4e:48:ea:42:61:cd:4a:7d:57:61:d2:
bd:52:91:c5:34:00:a7:06:0d:37:53:4c:9c:65:94:
52:78:8f:ee:85:21:cc:3a:c1:ae:72:f6:c4:f0:ac:
fe:d6:9b:92:ed:c3:1e:e4:03:76:e9:13:92:ab:a1:
4b:42:11:27:a9:25:df:cd:55:db:15:a6:bf:54:4b:
c8:11:a5:55:57:45:d9:21:73:6e:49:65:c0:7e:df:
2b:78:a8:04:39:63:a9:66:38:36:c9:09:2d:26:c9:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.52.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36267
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:f7:e9:ff:65:1b:8e:c3:c8:6d:2a:1c:b4:e8:b2:3f:0a:00:
e5:0a:df:0f:6d:3c:4b:25:26:85:43:ea:b9:c3:0a:26:cf:98:
8d:c7:b6:67:a8:15:13:a8:c2:82:35:7d:34:7f:ca:50:69:77:
15:74:e5:e9:4a:16:33:9f:78:1a:fd:82:1b:46:15:1e:ac:ca:
f4:3b:80:d6:82:32:d8:f6:93:fc:34:05:52:69:9d:b1:48:59:
9f:d7:5a:8f:a7:9f:34:fc:8d:e1:38:35:75:a4:ef:64:91:a4:
49:12:e5:5a:67:81:23:2e:fc:6d:e5:ae:56:83:33:0a:b8:21:
dc:b9:ba:1e:db:73:6c:63:e1:81:ac:34:41:4b:1a:17:7a:40:
f2:e8:32:56:bf:49:43:08:4d:24:0d:96:94:b5:5c:b8:bd:c6:
3c:b2:6b:67:ca:2a:23:cc:65:52:9d:ff:5a:47:4d:e1:2e:3c:
72:06:bf:a3:b7:3d:30:4d:bb:9b:a9:80:89:6f:8e:c2:56:e3:
78:e1:7b:e2:83:d7:92:98:50:d5:75:9d:7b:22:5e:28:23:6f:
7e:f4:9b:27:3d:15:c3:9b:1b:f6:04:e6:fe:64:11:dd:02:83:
38:fe:54:8c:c2:f0:2b:f7:34:f9:27:33:bb:89:01:16:8e:84:
45:d7:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:09 2025 by rpki-client