
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.cer
File: 9681c311-90a2-4cfa-9ad0-e1185cd22f1d.cer (raw, json)
Hash identifier: fyO3+olLiSwzbjxx24HDHEpY1TeevfY/8CGV25ciY3c=
Subject key identifier: B1:3A:47:F5:BA:47:C0:64:69:5C:E7:D8:07:49:CE:B7:69:A6:73:2D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584E8422BB92285E4CE46CC2DD00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 16 Jul 2026 08:45:12 +0000
Certificate not after: Wed 18 Oct 2028 08:45:12 +0000
Subordinate resources: AS: 62766
IP: 23.167.240.0/24
IP: 2620:138:8000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:84:22:bb:92:28:5e:4c:e4:6c:c2:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jul 16 08:45:12 2026 GMT
Not After : Oct 18 08:45:12 2028 GMT
Subject: CN=9681c311-90a2-4cfa-9ad0-e1185cd22f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:57:53:97:e2:0c:84:80:07:d7:b6:8f:f6:
6e:5a:d8:1e:e4:99:62:f8:59:e3:15:b3:ef:98:cb:
c3:c9:78:d2:88:37:94:2d:be:db:bb:36:c3:12:fa:
e8:a3:7c:ed:30:60:f9:03:d8:ba:04:86:39:f0:32:
31:49:bc:fb:32:19:ca:79:97:61:27:bb:81:73:4c:
18:99:47:99:2d:5f:bc:c8:22:d2:f0:54:64:da:82:
ea:c2:4c:3f:34:4b:7a:db:51:35:ec:65:b7:1e:b7:
ef:f4:cb:2a:84:4b:fd:28:f6:f5:04:b4:4e:6b:ac:
03:3a:9d:a6:c6:c0:a9:33:a2:d2:48:e3:34:10:80:
74:88:be:fb:aa:71:80:eb:1d:43:69:54:5f:12:de:
97:7c:85:cc:fc:bd:1b:c2:5b:8a:66:a3:06:77:d6:
da:73:1f:11:05:ee:56:e1:ef:8b:0e:83:e4:bf:cf:
09:bd:8b:07:dd:44:00:f5:2f:dc:4c:49:82:90:f5:
d5:b6:7c:6c:39:8b:85:df:de:9c:87:1d:29:91:a6:
75:d4:44:d2:8b:32:d2:53:14:c1:89:48:0f:2c:37:
a0:c7:0e:db:08:e0:53:62:18:c9:c0:13:52:1c:fa:
c8:0b:7c:64:14:db:3a:c2:6a:b5:3d:47:6f:89:48:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:47:F5:BA:47:C0:64:69:5C:E7:D8:07:49:CE:B7:69:A6:73:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9681c311-90a2-4cfa-9ad0-e1185cd22f1d/9681c311-90a2-4cfa-9ad0-e1185cd22f1d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.240.0/24
IPv6:
2620:138:8000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62766
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ac:d2:06:31:e8:90:fc:4b:90:d8:d6:ab:09:98:ee:2f:29:
37:c6:fb:66:a3:22:16:da:ad:38:70:bf:e9:1d:b0:42:ba:9e:
7d:e5:37:ec:70:8b:16:f4:66:2e:02:d5:fa:df:1b:39:7c:e0:
94:c6:c1:cf:63:fe:f5:31:1d:4d:81:18:8d:02:c9:12:57:5e:
10:3b:68:c0:22:ee:b9:de:3f:94:18:26:36:e2:3f:e8:a1:f7:
04:71:16:89:a5:04:40:81:d3:cc:ac:4d:13:5a:d3:b3:12:e5:
6f:04:bf:b9:1f:3c:c2:a9:2b:c0:38:d6:80:f8:7c:9a:25:3f:
4e:d8:55:39:c4:26:f9:af:44:8a:c4:ac:6d:c2:fc:e6:e7:b4:
a2:b9:be:a2:f5:ad:50:5a:fb:0f:e4:24:a7:70:4d:af:4f:f0:
88:3e:1d:bd:8b:07:ce:3f:c8:00:31:e7:d6:77:42:8c:07:99:
43:ad:92:6a:bc:f3:82:12:c1:42:8d:04:0e:59:4a:f2:1d:ab:
cc:5f:89:3c:8f:1d:c4:e8:59:8b:22:5f:e2:e3:4b:69:82:1e:
18:7b:6b:69:f3:b6:37:35:27:e7:92:65:34:54:9d:7a:3a:85:
4c:58:2d:5b:14:88:e0:d3:a3:80:3b:1f:17:95:aa:8e:dc:74:
00:80:31:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:40 2026 by rpki-client