
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/36f000e5-5c97-48b9-b79a-0e4a52629642.cer
File: 36f000e5-5c97-48b9-b79a-0e4a52629642.cer (raw, json)
Hash identifier: P1fPTgJMtZ/oiAvfyFjAjNCxvCisG4mHAfOqN0JMPWg=
Subject key identifier: F2:70:F0:53:76:4C:98:39:26:D1:DA:32:A7:58:27:B8:40:97:68:D4
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584DC12E022AC54216F5DA7A9880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/36f000e5-5c97-48b9-b79a-0e4a52629642/36f000e5-5c97-48b9-b79a-0e4a52629642.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/36f000e5-5c97-48b9-b79a-0e4a52629642/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 07 May 2026 12:45:17 +0000
Certificate not after: Wed 09 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 395443
IP: 2620:4a:e000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:2e:02:2a:c5:42:16:f5:da:7a:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: May 7 12:45:17 2026 GMT
Not After : Aug 9 12:45:17 2028 GMT
Subject: CN=36f000e5-5c97-48b9-b79a-0e4a52629642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:c5:93:d2:6f:67:a1:25:97:58:dc:c0:17:
14:19:81:cf:ae:77:a7:d2:f9:4d:b0:3a:49:11:45:
40:cd:f3:84:5f:c1:43:05:53:08:6a:9f:41:0a:c3:
de:a9:2c:57:1c:03:61:52:2d:dd:7e:de:35:35:7a:
ce:90:d4:7d:9a:66:ec:40:c3:2d:96:b5:fc:4b:e0:
51:52:f8:0d:36:62:70:04:75:1a:2e:96:4c:b5:a4:
84:26:d2:b1:3e:2c:87:ef:45:53:13:b3:ae:33:b0:
40:37:5d:2d:4b:7a:dc:d8:24:f3:ce:52:35:e3:1c:
92:ea:f5:6e:77:e8:aa:ab:2a:1c:74:46:5d:dd:0c:
44:2b:af:d6:60:07:13:76:95:e6:70:76:94:e1:00:
fc:30:b3:3a:d0:27:49:bd:d7:fb:2d:76:da:05:01:
41:ca:b6:38:d8:f0:4f:5f:bb:81:91:e0:3c:59:01:
bf:f2:e8:92:7b:d2:c9:8e:4c:5f:c4:0d:f4:9a:18:
16:61:0a:f3:63:b2:eb:d4:68:85:25:1b:99:0c:2e:
80:16:48:e8:78:78:98:10:c9:ca:8c:3c:57:57:c3:
34:7c:b2:a0:2e:1d:86:c1:e2:98:c7:e9:49:ec:c9:
57:d3:89:e2:7d:20:ff:e6:ee:25:57:1a:69:44:fb:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:F0:53:76:4C:98:39:26:D1:DA:32:A7:58:27:B8:40:97:68:D4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/36f000e5-5c97-48b9-b79a-0e4a52629642/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/36f000e5-5c97-48b9-b79a-0e4a52629642/36f000e5-5c97-48b9-b79a-0e4a52629642.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:4a:e000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
395443
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:65:98:9a:13:a3:93:70:77:3b:d2:8a:1d:b4:68:f4:8e:76:
1c:f2:9a:5a:c8:d9:50:1d:15:db:93:b1:07:2a:f9:c3:b1:9a:
17:9b:03:5b:bf:a8:19:2a:e7:ea:01:57:5c:d1:c8:07:0f:41:
a2:84:3b:fe:09:0c:e8:51:84:63:80:da:be:42:6e:42:17:46:
ae:b7:cc:1e:90:78:a6:31:cc:c2:5d:6b:de:15:1f:4c:e4:2d:
ed:e9:3f:40:00:12:7f:31:80:10:0d:88:b1:33:44:4b:a5:cb:
c1:73:13:ff:3a:02:dd:52:ba:ce:2f:02:65:f1:7c:2c:40:a3:
5a:0b:a4:68:67:1e:33:bc:62:57:ae:de:b7:63:7f:72:3d:d8:
9b:ea:98:b5:6e:c0:2d:89:13:41:2c:8d:ff:27:64:80:cb:74:
3d:b5:db:ea:05:f9:02:56:09:85:83:19:38:00:ef:2a:93:33:
a5:cb:7a:21:6c:2c:47:fc:2a:e5:51:2a:12:f9:26:54:db:5c:
ea:82:8a:76:a9:42:a0:4f:31:02:8d:2f:60:a5:9d:f7:a4:e5:
cf:93:8a:c9:60:78:6f:d2:f3:6e:a8:23:e7:05:0e:39:0f:7d:
b0:20:0d:61:f5:04:ef:4d:8e:9d:b5:bf:45:e1:93:63:53:5d:
07:70:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:03 2026 by rpki-client