
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
File: 60e6a30d-f63a-493d-8227-28d94c142383.cer (raw, json)
Hash identifier: NrQYRCcUXFOw9SWO+ql/PbGIJJw88PHeZ3lq7zPRwPo=
Subject key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584F2AB589ED568CE65F8876CC00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 14 Sep 2026 00:45:11 +0000
Certificate not after: Sun 17 Dec 2028 01:45:11 +0000
Subordinate resources: AS: 19163
IP: 23.140.228.0/24
IP: 2607:b340::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:b5:89:ed:56:8c:e6:5f:88:76:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 14 00:45:11 2026 GMT
Not After : Dec 17 01:45:11 2028 GMT
Subject: CN=60e6a30d-f63a-493d-8227-28d94c142383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:5b:46:a5:94:3b:0b:22:4a:c9:ac:e3:ef:
ca:da:5f:0e:2f:84:e8:63:ca:76:d4:73:ff:40:38:
56:98:a5:95:eb:70:24:f4:1a:d0:50:5f:e5:32:ac:
8c:17:71:f0:23:e9:21:c0:c4:61:10:49:ba:67:39:
8f:5d:ea:e9:1c:07:e1:e2:5d:55:71:ae:dc:6a:dd:
28:14:c2:94:0a:2a:0a:3c:0f:4b:b9:7c:e4:af:87:
ef:76:12:12:ee:36:f4:71:c8:f6:54:14:3c:cc:42:
3b:41:5c:53:43:6b:ea:7f:90:6d:61:bb:92:0e:03:
e7:a5:e8:5c:48:84:42:4d:87:1b:dd:53:86:b6:0a:
aa:a2:84:4a:4d:5a:03:dc:c5:d9:ff:3e:0b:77:57:
82:0b:d5:63:33:06:d0:46:30:78:9b:d8:5a:ca:59:
25:9a:0d:08:d9:b4:d1:7c:59:a0:e3:04:4e:a2:b4:
ed:12:c2:35:cb:0a:5c:77:e0:7d:49:79:30:33:b9:
b1:2d:d4:7b:7c:03:76:09:dc:28:1a:6b:c3:c4:11:
dd:7b:dc:dd:03:85:47:1f:5f:85:c9:51:47:c9:f1:
41:8d:ce:67:46:35:f4:33:c5:09:e1:0b:f1:9d:65:
19:56:2c:47:49:af:16:d6:e2:4c:b7:6f:05:b7:17:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.228.0/24
IPv6:
2607:b340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19163
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:fe:f1:d6:5e:c1:78:c5:d0:74:2d:99:96:0d:42:d4:d5:63:
f2:2a:ec:0d:ea:54:22:40:66:d4:4e:16:31:af:92:51:2a:84:
10:03:71:67:dc:c8:94:c9:b5:95:cc:48:4e:72:68:89:6f:de:
a3:fc:a3:8a:9a:c9:54:d5:a2:0d:56:8e:4a:04:6e:1e:a6:9b:
93:ca:1f:4d:4c:4a:27:f1:55:58:ce:8f:62:49:71:4f:4d:c5:
e0:ba:aa:86:93:14:b4:08:d4:73:e2:e6:e3:6c:ee:e9:0a:d7:
10:6a:d3:fd:6e:d8:b7:64:e5:f1:7e:ae:6f:08:62:39:8f:8a:
52:f2:e0:79:1e:76:f5:63:97:a5:8e:7f:db:4c:b3:3b:c9:46:
bc:59:e7:51:21:c5:d1:47:e9:4a:cf:5e:08:0a:7e:a8:14:9b:
8e:15:f1:c0:71:d7:3f:00:16:df:d0:ed:a8:a3:33:3b:36:0b:
41:27:62:55:6d:fc:e4:f8:f7:5f:19:6e:1c:e7:9a:a7:e9:0c:
54:3c:86:8e:8d:36:fd:63:e1:63:b1:1f:26:e6:9b:58:17:07:
62:20:14:86:22:0a:25:b1:77:77:6b:fb:d6:d8:93:75:2b:36:
d3:a8:da:06:57:88:fa:4c:e7:e0:1d:3b:32:70:47:f6:99:67:
7a:9b:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:24:14 2026 by rpki-client