
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
File: 8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer (raw, json)
Hash identifier: yqUOkuJEwz7CaFcHF13AFVLftXdSyO3YtRfsU8Hjxgw=
Subject key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584DF36E547866277AEAEB5F7920
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 25 May 2026 12:45:18 +0000
Certificate not after: Sun 27 Aug 2028 12:45:18 +0000
Subordinate resources: AS: 204
AS: 574
AS: 1206 -- 1207
AS: 5050
IP: 128.182.0.0/16
IP: 147.72.0.0/15
IP: 192.70.221.0 -- 192.70.223.255
IP: 192.88.114.0/23
IP: 192.101.139.0 -- 192.101.140.255
IP: 192.231.242.0 -- 192.231.244.255
IP: 198.206.16.0/20
IP: 204.194.24.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f3:6e:54:78:66:27:7a:ea:eb:5f:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: May 25 12:45:18 2026 GMT
Not After : Aug 27 12:45:18 2028 GMT
Subject: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:79:c4:c2:1d:36:95:b1:ca:ee:57:09:e9:
89:83:dc:7d:cc:1e:46:db:80:2a:f5:14:4d:62:5f:
aa:0f:47:58:0a:f8:fe:92:32:c2:d3:59:ce:d7:7b:
f0:79:9a:72:d5:3c:e7:26:e6:61:23:34:48:8b:c7:
99:86:91:be:32:78:b0:d8:96:26:5e:39:1d:8f:57:
d3:91:9e:14:70:7f:f3:b1:ff:54:69:03:76:f3:ee:
09:cb:a8:4d:99:e5:ea:78:b8:11:29:8f:1c:93:5c:
26:d9:ce:23:47:93:95:31:12:78:35:c8:44:d7:3e:
b8:c9:bc:3a:6c:f5:c1:73:20:45:05:72:55:cb:bd:
32:b5:45:a1:85:f0:f1:60:0f:81:f1:fa:4a:17:f8:
f7:65:b5:21:8a:db:95:14:81:9c:05:b0:dd:ab:98:
5f:ca:8b:d0:4b:c1:b6:75:b8:07:75:3d:51:80:86:
51:fd:25:44:3a:2c:53:1a:1d:65:c8:08:9b:58:e8:
d3:85:22:dc:17:70:ba:f4:7f:39:6a:d0:4b:52:0d:
6c:d3:46:b1:91:0c:cd:a4:45:25:8e:14:c3:fb:f5:
9e:38:79:5e:94:5c:39:4c:e7:f1:47:5b:c8:68:e6:
d1:37:b7:19:54:e9:88:6f:ae:f4:1a:09:2e:84:e4:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
128.182.0.0/16
147.72.0.0/15
192.70.221.0-192.70.223.255
192.88.114.0/23
192.101.139.0-192.101.140.255
192.231.242.0-192.231.244.255
198.206.16.0/20
204.194.24.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204
574
1206-1207
5050
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:43:f8:77:e8:af:67:3f:9e:5f:c0:13:34:98:39:64:68:22:
76:71:e9:36:7f:c2:95:2b:7e:d7:f5:d1:ef:ab:eb:5f:61:6b:
3f:48:4c:f3:df:f0:10:e9:c0:6f:1c:81:85:93:12:68:c9:34:
47:db:61:50:fa:e6:2d:e7:1d:c8:0f:bf:e4:33:c2:35:e5:62:
60:65:8b:2d:12:70:37:6b:47:b9:e0:3f:82:c0:59:3e:4f:26:
3e:41:d9:1c:3e:83:2a:3f:de:fe:e8:27:48:a4:bd:98:5c:c3:
9e:5f:35:7c:8c:5b:a8:5a:55:85:75:09:d4:9a:22:aa:9d:38:
4f:8b:d5:ca:dd:9f:32:b0:8d:3e:4c:4d:e9:7e:9c:2b:a1:10:
bd:48:20:ce:0c:8f:69:4e:55:90:50:d6:5a:1c:c8:d1:b2:32:
a9:b4:38:69:aa:e3:b7:78:dd:ee:33:f5:84:7a:91:b6:33:8f:
97:9b:29:39:6d:bf:a5:07:41:d7:01:34:ff:9e:35:7a:8d:1e:
05:d3:01:1c:4f:9f:39:a2:3c:e6:95:b3:1e:d2:00:51:eb:14:
17:62:3d:9a:a7:86:83:d5:bf:b7:10:70:c2:ed:af:39:8b:d0:
11:6f:e4:f3:db:44:94:25:fa:5b:38:04:76:78:01:23:84:70:
d7:6d:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:58 2026 by rpki-client