
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
File: 14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer (raw, json)
Hash identifier: wieUD0pjw3uEaUIh+GbPGvvF2963jhnUt8Ec9Cyfm+s=
Subject key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584E7BC2B0831BCC70B4C746E2B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 13 Jul 2026 08:45:13 +0000
Certificate not after: Sun 15 Oct 2028 08:45:13 +0000
Subordinate resources: AS: 11368
AS: 12276
AS: 40271
AS: 63055
IP: 149.112.5.0/24
IP: 149.112.115.0/24
IP: 149.112.188.0/23
IP: 192.33.255.0/24
IP: 206.197.187.0/24
IP: 2001:504:30::/48
IP: 2620:8b:e000::/48
IP: 2620:11a:b000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7b:c2:b0:83:1b:cc:70:b4:c7:46:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jul 13 08:45:13 2026 GMT
Not After : Oct 15 08:45:13 2028 GMT
Subject: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:77:cf:be:19:37:5b:29:4d:42:7e:e5:64:
bc:21:0a:74:8e:1a:be:a7:e2:66:d5:30:f9:c8:c9:
2a:74:cd:2a:92:13:3f:fa:8e:44:02:c5:c8:10:30:
84:ce:c0:46:6e:74:b6:52:20:18:44:59:0b:89:15:
3a:df:87:5a:4d:33:17:8f:27:e3:41:64:cc:76:11:
44:ff:37:dd:b7:fa:4b:a2:71:55:03:c3:ab:87:81:
d9:1e:88:a6:4f:76:f8:5d:59:96:50:ec:10:cd:e1:
82:a1:5f:ab:8e:97:4d:8d:e2:9e:d5:93:39:14:94:
6c:99:10:0e:b6:ea:ed:38:6f:77:c2:ec:a9:29:36:
2d:9f:13:b5:ce:12:b3:28:09:a9:9d:7a:3d:f7:01:
55:56:a2:0c:d4:6a:a7:e5:5d:10:4a:fd:c2:95:4d:
d9:f3:07:ed:ed:13:df:d8:66:ff:cf:a9:be:7e:60:
6d:71:01:a4:f1:d7:c3:11:88:4b:df:9f:0a:73:81:
c0:f1:54:7d:c8:62:ba:70:a5:94:d6:a6:cf:1b:ca:
3f:89:5e:68:88:88:36:1e:cb:d2:66:8b:70:ed:82:
00:96:c7:7d:ca:8d:b7:7f:d8:b6:3f:02:20:74:43:
d6:06:ac:a9:47:bf:b2:9a:e6:71:50:55:dc:f6:8c:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.5.0/24
149.112.115.0/24
149.112.188.0/23
192.33.255.0/24
206.197.187.0/24
IPv6:
2001:504:30::/48
2620:8b:e000::/48
2620:11a:b000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11368
12276
40271
63055
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:4e:2a:a2:29:1b:2f:93:05:09:a2:00:e2:33:7e:d5:7b:41:
fd:b9:e6:63:1a:ce:91:a6:e6:59:a0:06:83:b2:c6:28:91:d3:
43:18:b8:d5:de:1a:e2:15:16:48:77:47:39:2c:f2:80:e8:4f:
21:c8:4b:31:66:89:0d:a1:cb:aa:cc:6b:45:dc:3c:fe:a4:12:
6b:0e:a5:f9:b2:60:e5:0a:e7:58:46:3e:4d:96:2a:a9:6e:0d:
2a:d5:6a:fd:be:2b:c9:43:d8:b2:00:b4:96:e5:96:30:a8:1a:
33:fc:3a:a0:8a:a1:de:6e:d2:24:bd:71:1b:f2:b3:50:a4:b9:
de:a4:d6:15:e1:15:7e:e4:cd:47:da:e6:79:80:3b:0e:76:a9:
5a:f3:d9:98:a4:6b:ad:b6:39:48:4b:29:9d:bd:ff:15:e0:1d:
89:11:1f:8b:17:00:02:f5:b4:e9:aa:66:de:e6:a9:75:a7:28:
61:8f:b5:87:1f:50:91:b5:d0:b6:b0:a4:0b:17:98:08:6d:29:
f9:b4:08:ac:e0:ae:53:78:2f:3d:c9:a7:20:69:46:9e:0d:59:
47:c9:89:82:44:4e:55:b2:1c:9b:7b:9b:4d:b0:f2:09:c1:ea:
2a:27:4e:97:29:2a:53:a3:9b:53:50:84:8c:d2:83:df:52:0c:
29:41:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:32 2026 by rpki-client