
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer
File: b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer (raw, json)
Hash identifier: sLyYoHv0F4dPeGn1Jo7aDdB1YcXCAzJ/6FF/HiPrMh8=
Subject key identifier: DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584AF99234060CC42B516D877100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 25 Aug 2025 15:11:37 +0000
Certificate not after: Sun 28 Nov 2027 16:11:37 +0000
Subordinate resources: AS: 22890
IP: 192.203.98.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:f9:92:34:06:0c:c4:2b:51:6d:87:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 25 15:11:37 2025 GMT
Not After : Nov 28 16:11:37 2027 GMT
Subject: CN=b07d4ad0-c782-4df0-8b2f-1442c683b9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:d3:a5:21:37:36:0d:f5:cc:8c:00:da:a9:
24:6d:95:8d:e9:49:cd:44:73:af:90:18:15:5a:aa:
68:5d:d4:29:34:60:f9:a1:9e:ed:0c:65:d4:de:66:
fc:4c:54:34:39:f7:46:bf:36:57:1b:4e:33:14:d6:
07:af:99:06:8a:ea:da:76:a4:e9:90:af:0d:dd:b1:
72:24:90:22:17:12:1e:91:44:d5:25:b7:ea:c9:4b:
3c:f5:8f:23:01:80:cc:9f:6f:ec:22:48:e3:83:4c:
8b:bc:1b:61:07:93:a7:f9:98:49:0f:b2:67:30:2d:
d4:fc:73:42:ea:44:8e:01:4c:8e:26:b2:fe:45:f8:
ea:7f:78:c0:b9:23:df:2f:57:08:6d:db:bf:1f:cd:
f3:d0:03:89:48:88:87:5f:7c:8b:0d:84:b5:e6:b5:
45:3e:1a:00:77:58:18:3b:23:f3:92:24:93:c9:87:
4e:2a:29:0a:96:c6:fc:1d:e1:b7:66:dd:28:c7:a2:
3a:d0:9a:08:f9:f3:ae:7f:92:09:9d:d0:c9:fc:48:
cc:89:ce:de:24:ef:ea:51:d0:2f:87:93:a7:26:38:
eb:3b:53:8a:77:5d:4b:d2:ae:ee:5c:09:8f:75:ca:
d2:2f:91:5f:02:0e:f4:f2:f4:c9:fd:e6:a8:6b:46:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.203.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22890
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:3d:2f:1e:7d:f4:c6:77:c2:1d:e3:1b:6c:89:93:10:e6:b0:
4d:a0:3b:8d:b7:db:c9:65:71:8a:04:1a:da:26:c8:78:84:2a:
18:e4:af:c0:d3:0e:e1:1b:99:99:ae:f3:0e:c2:d2:78:7a:50:
91:c8:6d:db:85:e5:0d:26:a9:03:0b:72:04:c8:c8:d3:db:a6:
bc:9e:00:6c:85:3d:5f:34:c6:0a:2c:f1:19:41:6c:b4:8b:72:
2d:bf:4e:77:5e:92:d1:fc:e7:1c:7c:b8:e5:4b:e7:65:af:0c:
61:35:b3:34:11:dc:89:64:cb:7c:28:0a:5b:31:d4:2f:9f:a9:
90:5c:92:d9:90:e7:d6:04:00:78:c1:d3:b4:ce:1e:39:54:af:
6b:3c:d5:6b:f8:74:31:44:53:81:92:7d:22:d3:03:0c:d5:f5:
17:a8:f8:44:ee:24:21:2b:db:7b:38:0e:e6:cf:2e:9d:4d:0e:
a5:f2:b9:13:37:03:c5:85:14:ae:a8:0e:05:62:a2:9d:e3:55:
5e:e2:28:cc:db:75:70:5b:3b:34:96:68:fe:7c:7d:4d:63:60:
bd:78:ce:f0:a0:4f:94:a7:53:62:10:e6:58:49:0a:93:4b:ea:
45:25:96:d9:ac:32:f5:10:09:3d:0f:22:3e:05:e9:ca:72:93:
f3:85:ea:02
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEr5kjQGDMQrUW2HcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI1MDgyNTE1MTEzN1oXDTI3MTEyODE2MTEzN1owLzEtMCsGA1UEAxMk
YjA3ZDRhZDAtYzc4Mi00ZGYwLThiMmYtMTQ0MmM2ODNiOWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihnTpSE3Ng31zIwA2qkkbZWN6UnNRHOvkBgV
WqpoXdQpNGD5oZ7tDGXU3mb8TFQ0OfdGvzZXG04zFNYHr5kGiuradqTpkK8N3bFy
JJAiFxIekUTVJbfqyUs89Y8jAYDMn2/sIkjjg0yLvBthB5On+ZhJD7JnMC3U/HNC
6kSOAUyOJrL+Rfjqf3jAuSPfL1cIbdu/H83z0AOJSIiHX3yLDYS15rVFPhoAd1gY
OyPzkiSTyYdOKikKlsb8HeG3Zt0ox6I60JoI+fOuf5IJndDJ/EjMic7eJO/qUdAv
h5OnJjjrO1OKd11L0q7uXAmPdcrSL5FfAg708vTJ/eaoa0ZlAQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFN0uKFfdZ8gNnIvBr44h24t7lzKHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i
MDdkNGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQyYzY4M2I5YmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2IwN2Q0YWQwLWM3ODItNGRmMC04
YjJmLTE0NDJjNjgzYjliYi9iMDdkNGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQyYzY4
M2I5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAy2IwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
WWowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAcD0vHn30xnfCHeMbbImTEOawTaA7jbfbyWVxigQa2ibIeIQq
GOSvwNMO4RuZma7zDsLSeHpQkcht24XlDSapAwtyBMjI09umvJ4AbIU9XzTGCizx
GUFstItyLb9Od16S0fznHHy45UvnZa8MYTWzNBHciWTLfCgKWzHUL5+pkFyS2ZDn
1gQAeMHTtM4eOVSvazzVa/h0MURTgZJ9ItMDDNX1F6j4RO4kISvbezgO5s8unU0O
pfK5EzcDxYUUrqgOBWKineNVXuIozNt1cFs7NJZo/nx9TWNgvXjO8KBPlKdTYhDm
WEkKk0vqRSWW2awy9RAJPQ8iPgXpynKT84XqAg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:15 2025 by rpki-client