
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer
File: 505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer (raw, json)
Hash identifier: +L5n0p9BDfd1V5vjWtvVvph93jHqLOn66fUDCa1+56s=
Subject key identifier: 4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584DA5DC802139CCF1E4AC1F5D80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 27 Apr 2026 17:54:14 +0000
Certificate not after: Fri 22 Oct 2027 13:15:44 +0000
Subordinate resources: AS: 397081
IP: 45.74.252.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a5:dc:80:21:39:cc:f1:e4:ac:1f:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Apr 27 17:54:14 2026 GMT
Not After : Oct 22 13:15:44 2027 GMT
Subject: CN=505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:f6:08:36:20:16:0f:69:40:0b:41:55:76:
45:fb:bf:e6:95:c2:8e:52:a4:97:e7:48:52:87:ee:
2c:95:31:fe:da:c3:23:05:bc:a7:b7:ec:dd:5a:06:
ff:23:81:69:3f:c7:12:de:34:0c:30:eb:cf:b5:f5:
89:43:8c:28:9c:be:d9:db:d8:04:04:61:6c:b3:31:
5d:f4:b3:af:c1:ed:2a:7e:2b:6d:ac:9e:10:ee:60:
6d:32:ed:e3:4a:ed:d8:f1:f0:d3:a5:63:ac:9d:96:
e6:ff:5a:19:01:77:cc:c8:ab:16:7c:3a:bf:75:37:
65:06:9f:d8:3d:1b:98:ce:6f:3a:55:25:65:7a:53:
0a:30:e3:10:24:ba:4a:27:25:aa:6b:67:f9:25:9b:
80:84:8a:60:41:93:63:b3:e9:ce:ea:27:b6:f5:f5:
ed:0d:3a:54:ed:9a:1e:1c:be:9d:1e:22:f3:20:fe:
b5:30:f3:a4:36:90:78:e5:19:45:68:15:77:66:d7:
14:ca:fe:cc:51:d1:44:c6:74:61:e3:7c:78:dc:4b:
fc:0b:a4:5e:55:b5:3a:66:86:e7:6d:b7:76:13:20:
ac:e6:a6:cf:4c:84:d5:42:63:0d:78:45:35:7e:34:
0e:2b:aa:89:1d:89:56:2e:7c:82:6e:b5:7d:9c:0c:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.252.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397081
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:b4:40:12:d3:ba:37:9c:e9:c8:15:42:e2:db:f3:b9:cd:28:
bf:2b:a1:8d:8a:2d:19:93:69:18:d6:3f:1b:33:d9:01:86:0f:
6c:c6:27:3b:00:47:3a:1f:34:5c:40:23:8b:02:3a:11:05:27:
cc:e4:49:9a:9e:29:1a:6b:12:d7:6e:b8:c9:7c:c3:ce:78:17:
45:92:48:7a:90:01:0a:0a:54:62:3e:6f:e2:1c:2b:30:ab:be:
1b:9e:8b:b7:6d:c1:75:65:77:70:2d:d5:1a:c2:cf:c6:ec:43:
4e:fd:95:a7:5b:a3:ed:d5:c4:69:51:0f:52:a8:db:ae:8d:77:
05:5a:40:95:9d:c0:3d:a7:97:e6:92:58:41:cf:3c:09:5f:9b:
16:60:1f:46:06:c4:d0:5d:09:54:e3:9f:64:45:b9:c2:1a:eb:
6c:d3:34:eb:8f:44:51:22:ba:ba:59:40:96:59:3c:34:16:dd:
cb:0a:60:d7:d9:5b:14:fa:ad:cf:f3:6d:a5:38:de:3b:4f:72:
aa:06:9b:1e:e0:03:3d:10:a5:1a:1f:2e:72:fe:13:3b:77:9f:
b3:2f:b5:30:83:a3:28:e4:92:6f:a2:27:13:dd:98:9b:5d:dd:
48:50:44:80:8b:bb:35:e9:1f:3c:49:c0:b1:be:34:34:6e:5e:
db:c7:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:17 2026 by rpki-client