
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3.cer
File: 33abedb9-022c-43d0-ac12-a00ad12424b3.cer (raw, json)
Hash identifier: sv1gldTqN90bMtEwJytLhnJYMrEwPfXX76ktOUdQl3g=
Subject key identifier: 62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584F07CFFE869DF318EDDDA7E5FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 01 Sep 2026 12:45:11 +0000
Certificate not after: Mon 04 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 27400
IP: 74.116.160.0/21
IP: 199.36.232.0/21
IP: 208.85.60.0/22
IP: 208.88.112.0/21
IP: 2607:f3d0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:07:cf:fe:86:9d:f3:18:ed:dd:a7:e5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Sep 1 12:45:11 2026 GMT
Not After : Dec 4 13:45:11 2028 GMT
Subject: CN=33abedb9-022c-43d0-ac12-a00ad12424b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:c9:6d:95:a7:66:43:2a:cc:ee:61:bd:f7:
2a:1e:03:0f:ef:84:8d:67:92:02:2b:a8:a7:b5:96:
35:54:ac:93:32:f8:31:c2:b0:52:92:ab:ed:2d:e6:
4b:64:62:b0:b3:03:e9:d9:b8:8a:2d:8f:00:29:b4:
52:df:52:7e:f0:07:52:f9:9e:26:f4:5c:40:e3:f4:
2e:58:c2:c8:bc:35:19:33:6b:a1:d7:3b:e5:84:bc:
17:f8:fb:9c:45:d6:fc:35:02:09:5f:e3:0a:64:f0:
18:df:35:a9:1e:8c:97:e3:43:68:18:89:c4:20:df:
fe:55:e1:af:77:2d:f3:c5:bc:31:93:05:ac:1f:40:
ae:40:47:d7:d3:a0:2e:38:39:c7:f7:f0:12:c4:11:
83:1c:b2:cc:16:a8:8d:2e:76:3d:8a:a5:0d:8b:3b:
e5:27:04:26:95:06:f1:c6:86:67:98:92:6c:20:73:
fc:80:97:7b:ee:2b:9c:d1:1c:37:33:a7:f7:e8:32:
c2:74:eb:1c:62:f3:5f:ef:77:ff:1e:cd:53:e0:b7:
d9:3d:12:c6:af:61:5f:94:5f:65:ff:a8:d5:21:82:
0a:df:fe:72:8d:17:e6:77:16:30:50:00:b3:d5:9f:
2e:e2:00:39:1b:74:8d:1c:9d:b7:3d:53:66:c1:26:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:E3:8E:36:FC:9F:F7:9D:CB:EA:0A:D9:1C:1F:0C:09:DC:CE:09
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/33abedb9-022c-43d0-ac12-a00ad12424b3/33abedb9-022c-43d0-ac12-a00ad12424b3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
74.116.160.0/21
199.36.232.0/21
208.85.60.0/22
208.88.112.0/21
IPv6:
2607:f3d0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27400
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:12:65:40:47:3a:2e:e9:c4:a9:d4:ef:97:f4:f9:87:68:e1:
88:78:e6:0d:bb:1f:85:ca:c2:a0:bb:0e:d0:ba:25:eb:fa:d3:
24:dc:d2:1f:7a:0b:8c:24:1f:92:10:02:81:38:ef:aa:a2:12:
0f:ca:c2:27:f3:b1:ac:55:a8:4a:7c:ec:75:e5:7f:7d:9c:58:
f1:0a:77:19:dd:1f:57:1c:e7:05:e9:8b:82:73:fc:58:a5:95:
40:3c:b6:5e:ae:2f:3e:b2:df:d8:19:3c:df:65:35:75:6d:6a:
e9:8a:8f:b2:d1:85:b9:27:dd:ee:8c:3f:a7:8a:3d:be:1d:da:
7c:25:58:5e:3d:16:c1:c5:23:f0:cf:57:62:bc:86:50:2b:2b:
6a:10:f9:92:8b:a2:68:14:e3:d2:23:d5:1a:09:b4:cb:ab:97:
7a:39:bf:bd:ec:25:c8:b1:0f:3c:84:24:f7:9d:b3:75:6a:8e:
f3:a2:79:a0:7b:38:58:c6:4f:06:30:e8:f0:58:2f:97:33:c4:
05:1d:a6:72:2c:74:5b:be:0d:83:47:f7:7b:81:dd:39:38:d4:
61:19:f2:31:b9:19:20:a4:95:39:ca:41:04:05:ae:02:d0:ea:
1d:89:cf:4f:b3:ab:54:b9:63:11:0d:0a:8f:c7:e9:82:20:11:
be:f0:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:46:46 2026 by rpki-client