
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer
File: b25db122-9955-42d2-8413-be2d15a44347.cer (raw, json)
Hash identifier: PtJcv3T09FhWOwsu1LBZzGlzlUQv7StJQbnWzBz40Gw=
Subject key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F9FF64847D2AABC7375A96700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 26 Oct 2026 00:45:12 +0000
Certificate not after: Sun 28 Jan 2029 01:45:12 +0000
Subordinate resources: AS: 401859
IP: 23.142.156.0/24
IP: 2620:da:6000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9f:f6:48:47:d2:aa:bc:73:75:a9:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 26 00:45:12 2026 GMT
Not After : Jan 28 01:45:12 2029 GMT
Subject: CN=b25db122-9955-42d2-8413-be2d15a44347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:f2:8e:be:08:d2:b8:54:c6:af:ed:f2:95:
92:db:22:5f:fd:5b:11:7f:f8:34:c3:07:e7:61:6f:
c7:04:c3:a2:5d:07:db:57:d1:4b:13:b9:3d:c8:7b:
04:18:a0:c7:68:aa:67:76:19:36:86:19:16:7a:69:
ee:fe:47:21:e3:d9:55:68:5f:a6:f9:88:89:f6:3d:
37:08:aa:8f:2f:4b:b8:4d:e6:12:8c:0c:a3:e7:48:
cf:74:cf:35:3d:9a:a7:64:3a:72:ad:2c:e2:65:56:
a1:e7:3c:de:1a:44:46:ad:08:0a:44:9e:ef:07:c6:
15:9d:88:1b:ae:bf:48:56:c7:53:29:ae:84:12:9b:
c3:19:8a:b1:4c:c2:0f:99:af:4c:3a:a8:6f:0d:d5:
93:c0:0a:42:42:3a:a4:1d:4b:bc:e6:45:64:91:14:
bc:1b:1b:c4:49:6c:59:e1:9a:e2:57:2b:3b:f7:1e:
fb:eb:de:2f:a4:a7:18:91:94:f0:8e:a1:85:6e:67:
45:10:62:15:fd:94:55:5c:47:ce:20:67:ef:42:d8:
1d:23:a3:c4:a7:30:91:09:3a:3c:ac:61:7c:e3:71:
b1:df:ce:6c:95:09:47:08:fc:dd:38:49:5b:69:93:
55:e1:ae:d1:c4:a5:42:c9:10:85:d9:55:16:fa:95:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.156.0/24
IPv6:
2620:da:6000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401859
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:82:4c:ec:03:00:bd:9d:26:a4:cc:39:b4:dc:4a:81:53:67:
35:92:7a:e9:00:fb:04:74:f3:e4:56:5d:a5:86:21:fd:1e:1c:
df:3c:ff:8b:f8:8b:7e:16:4f:8f:63:0a:f3:08:11:6a:a9:a4:
1e:f8:6c:09:3d:5d:3d:66:3f:98:6a:be:b3:04:81:65:38:ac:
96:f2:cb:c7:d1:66:99:cc:c7:74:50:84:69:ef:83:f1:6b:08:
5c:d3:2e:c3:5b:1f:40:aa:d7:8a:3b:bb:1b:a6:7a:c5:44:12:
8b:8e:2c:71:66:fc:44:bd:40:7f:bd:b2:27:72:00:90:f7:49:
e2:9f:a3:59:50:23:16:0d:96:da:15:be:7a:43:05:70:67:e5:
ce:af:eb:e7:b7:0c:d7:fc:22:c5:d9:50:7c:55:2b:81:a2:9f:
b3:1a:f2:9e:1c:74:4a:23:66:af:46:ca:c2:2b:88:f2:ae:ca:
1f:34:ad:8d:6d:42:74:47:b6:1a:00:5e:1e:fe:82:c6:ac:d3:
1b:f8:01:ce:da:43:b8:b8:d3:9c:80:24:ed:1b:2f:24:da:1f:
28:3a:df:1a:86:80:50:7d:35:e3:d8:a3:a5:2c:f3:22:12:4d:
8f:45:78:1c:a8:ba:22:da:66:f7:f1:9f:6a:e2:2e:8d:7a:2f:
a7:c1:06:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:51 2026 by rpki-client