
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/60c0ef4d-cd19-4576-9739-30ebfe8dd320.cer
File: 60c0ef4d-cd19-4576-9739-30ebfe8dd320.cer (raw, json)
Hash identifier: a90peqol/DwonXW/kvM4yNZCHpTPQ6wd+OM0yOxmsw8=
Subject key identifier: 79:31:07:4C:7F:A1:1C:7C:D5:02:9B:3A:49:79:4E:A2:8E:EC:F0:D3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584CD134FEA02FF3CCD71CA7A900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/60c0ef4d-cd19-4576-9739-30ebfe8dd320/60c0ef4d-cd19-4576-9739-30ebfe8dd320.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/60c0ef4d-cd19-4576-9739-30ebfe8dd320/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 10 Feb 2026 13:45:21 +0000
Certificate not after: Mon 15 May 2028 12:45:21 +0000
Subordinate resources: AS: 19607
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:34:fe:a0:2f:f3:cc:d7:1c:a7:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Feb 10 13:45:21 2026 GMT
Not After : May 15 12:45:21 2028 GMT
Subject: CN=60c0ef4d-cd19-4576-9739-30ebfe8dd320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:3e:69:a5:a6:40:b5:1e:1e:5c:bb:89:93:
a1:42:b7:ad:10:28:e3:67:8f:d0:93:87:8d:75:46:
d2:74:7a:98:77:8b:02:f0:dd:f1:82:06:4c:4d:c6:
6e:a0:e8:9b:dd:37:ff:f9:b8:d6:2d:a7:4c:a1:25:
c9:eb:fe:e7:8f:37:6d:ae:bb:1e:ca:a9:0c:7c:67:
04:1a:0d:6a:66:fd:0d:ab:27:68:c2:52:84:b7:68:
1b:a7:48:97:bb:dc:88:d9:01:7f:7c:02:b6:d2:88:
5e:96:d6:dc:2c:45:5d:5a:1c:4c:dc:c5:52:d8:df:
25:13:8a:f1:ca:0a:ac:d5:9b:2d:a6:79:d3:f3:a1:
80:0a:ad:08:1b:ce:59:63:0e:df:a3:d1:a2:8d:1f:
75:dd:72:3a:5c:53:cd:95:61:a5:26:a9:48:a8:15:
79:62:6b:4d:0f:b3:86:2d:5f:77:30:ca:55:ae:38:
fe:09:30:7a:8f:6a:59:72:d3:09:1a:7e:b2:bd:c5:
e1:38:7f:12:6f:c1:bd:dc:15:41:0c:2e:f3:f6:4a:
1f:6b:34:ef:c2:46:e4:12:4d:2c:02:b3:a0:90:51:
21:51:01:a6:33:e1:5f:ba:14:46:ec:2b:5c:61:63:
45:bf:fa:d7:a2:4e:68:90:3b:7d:64:87:ff:7c:e6:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:31:07:4C:7F:A1:1C:7C:D5:02:9B:3A:49:79:4E:A2:8E:EC:F0:D3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/60c0ef4d-cd19-4576-9739-30ebfe8dd320/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/60c0ef4d-cd19-4576-9739-30ebfe8dd320/60c0ef4d-cd19-4576-9739-30ebfe8dd320.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19607
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:13:e8:91:b9:d6:32:ac:ff:e6:57:45:a8:28:72:07:89:78:
3d:92:51:02:62:5f:fc:36:63:0e:8d:5a:f3:33:22:fc:df:87:
c3:9d:41:b2:ef:b6:d8:d8:02:ae:3d:1c:a8:78:c9:80:d3:7d:
b8:81:1a:08:a6:5f:a7:fe:bf:4a:d0:5e:19:e5:3d:ff:bf:17:
1a:ff:56:46:30:94:e5:01:03:17:8e:3d:b2:22:c1:dc:4d:f6:
10:ab:1e:b4:ad:f8:49:b9:37:5b:e7:04:3e:cd:cd:20:1d:64:
60:b4:5f:dd:02:1e:f5:04:b5:e2:6a:9c:46:84:40:fb:4f:33:
9b:bc:c5:b1:8f:17:6e:c1:f9:ad:ed:db:36:ce:89:bb:8f:f0:
e1:97:f6:76:55:5d:76:92:dd:a3:a5:70:5d:2c:86:41:24:d9:
41:35:73:87:d3:51:3b:8f:34:42:d6:2c:16:ee:7d:e4:12:cf:
70:02:84:30:d8:f7:18:e7:e0:22:df:77:31:54:d4:58:43:fe:
6f:af:0d:27:66:b6:f0:d1:55:94:81:b9:24:5d:a0:b7:cd:10:
00:ca:8b:bf:eb:17:eb:79:56:26:64:53:f1:aa:49:fc:ca:22:
22:5c:a1:43:5d:7b:0d:09:24:23:1b:f0:95:82:dc:88:5e:64:
96:9d:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:35 2026 by rpki-client