
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eeb72942-df8c-4b9f-844d-fd5e0f5eb084.cer
File: eeb72942-df8c-4b9f-844d-fd5e0f5eb084.cer (raw, json)
Hash identifier: UxnhgoL8ClnM367sGGc/xwCPmJgFwvt0ETOZpktTy08=
Subject key identifier: 43:88:32:0F:51:13:2D:C0:90:7E:DD:8A:5B:E4:5C:4F:42:B6:54:DB
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B052929EBDD7AF2F5C0448100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eeb72942-df8c-4b9f-844d-fd5e0f5eb084/eeb72942-df8c-4b9f-844d-fd5e0f5eb084.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eeb72942-df8c-4b9f-844d-fd5e0f5eb084/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 29 Aug 2025 18:49:41 +0000
Certificate not after: Thu 02 Dec 2027 19:49:41 +0000
Subordinate resources: IP: 204.99.192.0/20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:05:29:29:eb:dd:7a:f2:f5:c0:44:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Aug 29 18:49:41 2025 GMT
Not After : Dec 2 19:49:41 2027 GMT
Subject: CN=eeb72942-df8c-4b9f-844d-fd5e0f5eb084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:e6:96:10:f0:f9:63:79:47:7c:8e:c4:d4:
04:c9:f6:89:d1:2f:85:16:62:fe:a8:25:0e:30:56:
fc:03:38:cd:da:95:7d:e4:72:22:a7:f4:78:27:59:
35:7a:d2:60:d9:7b:b2:5b:00:94:dc:00:f7:58:09:
7d:6d:48:47:de:6c:48:f4:a6:07:1b:20:47:89:da:
eb:dc:99:dc:de:02:cc:2d:e2:64:59:28:26:34:2d:
08:eb:7d:4b:50:e2:11:7f:c2:19:7b:e0:4e:19:bc:
60:6b:01:5a:0e:1c:fa:ab:8d:99:fe:78:6b:c2:80:
8b:ed:6f:d1:39:b5:fa:80:a5:66:01:b3:27:8a:23:
26:84:73:b0:b4:6a:22:7f:fd:af:4a:63:e0:e2:5f:
db:fb:ec:79:97:4c:d7:b0:9e:54:d6:01:d2:6c:a6:
69:54:4e:be:03:82:3b:e8:3a:f1:8f:04:e1:41:2e:
b9:2e:e5:af:00:07:1b:3a:52:e5:ba:e4:57:f4:55:
76:12:52:f3:32:7c:69:0e:7b:2c:d1:ae:ff:d2:9e:
0e:4e:61:c9:e4:f1:98:30:86:bb:d0:88:97:8c:ab:
15:6b:8f:48:a5:95:2e:c1:f8:c0:f7:d3:b1:fd:54:
f8:be:63:4d:37:31:00:23:33:72:28:64:91:1a:9d:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:32:0F:51:13:2D:C0:90:7E:DD:8A:5B:E4:5C:4F:42:B6:54:DB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eeb72942-df8c-4b9f-844d-fd5e0f5eb084/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eeb72942-df8c-4b9f-844d-fd5e0f5eb084/eeb72942-df8c-4b9f-844d-fd5e0f5eb084.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.99.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:b1:c7:ff:cc:58:3a:0c:01:1b:7d:39:b7:32:a4:66:c1:16:
92:f4:66:1f:79:eb:73:ae:6c:b8:4f:1c:17:78:f0:b0:c4:70:
74:fc:67:9d:13:2f:f5:4e:e8:f8:66:07:25:c9:6f:40:a6:70:
a8:a7:62:64:a2:de:b3:b4:e0:1f:fa:15:ed:01:7f:ab:53:c4:
2b:86:9f:49:ef:8e:f8:67:3b:56:d3:fb:92:22:3f:11:3e:3f:
7c:a7:4a:d7:7c:c3:ee:8b:97:ab:41:c0:c5:a4:af:38:cc:38:
fa:81:1b:42:da:cf:5a:8c:27:3d:bf:55:f5:6d:b1:0e:0c:98:
1f:23:dc:65:74:05:e7:34:86:50:c3:67:87:93:bf:81:b2:9e:
ba:5f:a7:50:95:86:bd:7d:ef:69:4a:70:2e:bd:58:d7:7c:13:
d2:33:1b:45:d4:36:06:79:ce:8e:6a:82:44:ef:e5:f5:80:51:
72:1c:1d:16:c4:36:c1:47:52:62:cf:20:a5:4c:62:d1:a4:71:
cc:13:2c:80:2d:26:d9:43:f7:17:e6:66:e3:d4:c8:58:1b:7c:
7a:b2:5f:00:88:74:13:91:4f:ad:20:16:6b:89:be:c1:b0:71:
cd:e8:84:61:9a:c4:3f:37:56:91:bf:ff:d7:05:7f:b2:c6:e2:
39:14:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:32 2025 by rpki-client