
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
File: 60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer (raw, json)
Hash identifier: eMPLyyA+wStc/e5kLphBnv/U47Q4lrJsizK9FXFdl/k=
Subject key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584CDF2A6DED568A719986729B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 15 Feb 2026 13:45:23 +0000
Certificate not after: Sat 20 May 2028 12:45:23 +0000
Subordinate resources: AS: 907
AS: 17138
IP: 158.51.172.0/22
IP: 162.248.96.0/22
IP: 170.39.232.0/22
IP: 199.255.224.0/22
IP: 2602:803:9000::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:2a:6d:ed:56:8a:71:99:86:72:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Feb 15 13:45:23 2026 GMT
Not After : May 20 12:45:23 2028 GMT
Subject: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:4e:a7:f4:a4:f5:93:95:c5:e1:94:87:50:
0c:23:e0:92:76:a8:ff:e0:67:db:9b:a4:e0:86:86:
4a:a7:c2:d5:f9:ee:a4:e0:4a:12:2a:f3:19:0e:ca:
f4:1f:e1:03:5c:b6:99:b6:1d:af:2a:e2:ef:fc:f4:
d7:e9:84:d1:da:74:a4:24:16:5a:a9:6d:46:a6:28:
3d:91:49:4d:24:bb:6e:55:1c:b0:36:e5:12:4b:91:
f1:63:e7:e5:37:76:41:d2:c5:11:3a:4b:e9:37:d4:
58:2f:9f:5b:74:16:94:34:2e:18:46:2e:11:b8:9d:
f3:af:5d:00:57:c5:df:cd:79:72:0f:92:30:83:4c:
29:23:21:a5:24:50:0e:c3:81:bb:f4:1d:45:1a:72:
4e:af:dc:8b:ef:5a:2a:ca:33:1f:6e:d5:d3:bd:1b:
5a:0e:2b:ed:d4:5c:78:52:0d:ff:6e:bd:1c:76:17:
31:09:cd:14:ae:b3:1d:30:9f:97:20:6e:73:37:68:
90:74:ad:a6:99:d8:ef:92:3b:94:09:29:ae:c7:c3:
3a:c8:72:21:a0:25:41:6f:db:c0:1c:02:5c:2b:0c:
35:ff:76:53:50:43:bc:8f:de:06:4d:19:26:d0:be:
1f:90:92:4b:d0:ae:0b:8e:17:fa:0f:f1:62:a9:ba:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.172.0/22
162.248.96.0/22
170.39.232.0/22
199.255.224.0/22
IPv6:
2602:803:9000::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
907
17138
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:64:e9:fc:42:b1:2d:d2:49:8d:3b:7c:3a:97:24:f0:0e:31:
7d:de:61:8b:1c:20:58:b3:d7:f7:78:44:d3:31:b7:75:c6:f4:
8b:e6:02:cd:6d:d8:d3:2d:4a:18:c0:e6:78:33:0a:f9:e6:f3:
a2:e5:d7:bc:fc:eb:f4:53:32:87:ff:10:e1:77:f8:4d:33:bc:
72:a8:e6:40:e7:3d:44:f6:12:2e:ab:c1:9b:18:98:4d:12:3f:
68:5b:5c:81:ca:80:cd:b4:91:a6:94:f2:36:be:db:01:49:6b:
d0:82:d7:be:3c:35:da:1f:0f:fa:43:fb:90:f0:38:7a:81:24:
94:18:f7:b0:b9:fb:90:3e:be:75:08:d4:07:0c:3f:32:9d:01:
2e:55:46:5a:39:36:d9:64:3a:fa:76:46:ee:b7:b1:9e:fc:25:
f6:b1:b7:99:94:f7:16:c3:11:0c:b8:2b:ea:da:4d:c4:49:ef:
da:7a:21:aa:f6:42:69:89:95:21:2d:6b:5f:dc:02:d8:3b:00:
74:df:a6:19:78:35:e1:a4:b2:b3:ab:88:34:3f:34:94:6e:45:
45:a6:06:fd:44:8f:4a:5d:b7:5d:4b:d1:16:46:8a:88:9d:65:
8d:38:03:fa:f1:09:6d:b9:81:0b:21:64:37:07:42:20:fa:92:
87:08:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:16:33 2026 by rpki-client