
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
File: b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer (raw, json)
Hash identifier: hZBMYe/ZrBjnGo1at2acjeE+FSnSa8l+MDWDfl91Qro=
Subject key identifier: 6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584E094CA092899641080354E680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 02 Jun 2026 08:45:11 +0000
Certificate not after: Mon 04 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 14691
IP: 23.135.100.0/24
IP: 2620:d4:2000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:09:4c:a0:92:89:96:41:08:03:54:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jun 2 08:45:11 2026 GMT
Not After : Sep 4 08:45:11 2028 GMT
Subject: CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:02:99:ab:e2:d5:31:c6:06:b5:8d:cb:0d:
45:61:61:79:b3:a3:67:93:89:73:18:1e:37:04:d2:
03:3e:88:ba:17:f6:1e:7a:b1:99:f5:7f:b0:58:46:
e3:75:36:aa:2a:bf:01:f2:63:97:67:2f:fc:a0:25:
ab:8a:42:eb:b5:ee:ec:36:5b:24:df:22:30:44:08:
69:c8:cb:70:5b:b8:65:36:b4:3a:88:03:09:2d:b3:
ce:cf:18:4e:49:fb:f6:36:42:4d:09:46:2a:79:95:
69:76:e0:71:dc:cb:c0:ed:85:b0:9f:57:03:f5:e2:
1b:88:22:02:89:e5:10:75:94:ec:95:ef:69:22:cd:
4c:d2:76:8e:e5:00:40:9b:8a:da:20:8f:81:e9:59:
47:86:18:09:65:6a:c6:70:f6:6e:e3:95:24:f3:51:
4e:21:d9:0a:7f:88:0c:e9:97:0a:99:1f:e3:46:ad:
21:ee:d8:5b:6c:02:56:31:6a:0e:46:b1:45:6c:05:
a9:51:ba:61:6a:89:b2:1d:90:0c:65:fe:be:76:bf:
ac:19:39:e3:fd:04:19:b7:76:f3:03:c1:2f:33:74:
89:a6:67:b1:82:b7:d6:d8:b9:f2:65:09:57:bf:11:
20:4f:0d:82:1c:b8:50:48:0e:f7:73:3d:cd:30:21:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.100.0/24
IPv6:
2620:d4:2000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14691
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:77:7c:0a:6a:9e:5f:d3:45:d6:ca:ae:a3:79:25:c8:2c:9f:
5e:e0:2a:06:bd:b9:44:03:f2:ee:52:7b:d9:be:94:98:41:f6:
25:d4:03:89:46:d8:3f:25:38:8b:bd:1c:dc:23:e8:ba:c3:7a:
03:a7:73:3f:1b:96:18:0f:fa:c4:89:0a:7f:81:f7:4e:01:e3:
c4:51:1b:30:15:66:11:9f:80:68:e4:3b:8f:12:cf:c7:13:30:
b1:e4:80:43:2b:df:7e:2b:77:c1:f3:ff:f8:d0:4a:84:0b:c1:
a0:21:ab:c0:d7:92:4a:08:92:54:0e:ce:3f:51:88:36:8e:3b:
69:49:d0:b3:89:db:e0:11:6b:24:47:af:4e:55:3b:33:a7:1c:
6f:70:5f:30:42:8f:d4:b1:93:32:ce:e2:c8:9b:b1:cd:ea:65:
91:96:4e:46:dc:48:ea:a2:a7:29:10:96:fd:57:a1:79:83:98:
cf:aa:d7:63:f5:be:ea:24:b5:34:3e:ca:e0:cc:32:19:0f:b6:
2f:17:27:3a:aa:fe:ce:47:58:31:b3:3e:7f:ed:fc:61:27:ea:
61:44:55:5c:8e:d6:71:7b:9c:cd:d8:0f:7b:67:a3:c2:c5:46:
f1:cb:69:bf:27:dc:dd:35:02:f1:32:48:8c:21:d7:98:4b:b7:
96:6c:8c:dc
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE4JTKCSiZZBCANU5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MDYwMjA4NDUxMVoXDTI4MDkwNDA4NDUxMVowLzEtMCsGA1UEAxMk
YjkxZjY3ZWItNGJmOS00NWJiLWE1OTEtNmIyMmFjZmQzMGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgscCmavi1THGBrWNyw1FYWF5s6Nnk4lzGB43
BNIDPoi6F/YeerGZ9X+wWEbjdTaqKr8B8mOXZy/8oCWrikLrte7sNlsk3yIwRAhp
yMtwW7hlNrQ6iAMJLbPOzxhOSfv2NkJNCUYqeZVpduBx3MvA7YWwn1cD9eIbiCIC
ieUQdZTsle9pIs1M0naO5QBAm4raII+B6VlHhhgJZWrGcPZu45Uk81FOIdkKf4gM
6ZcKmR/jRq0h7thbbAJWMWoORrFFbAWpUbphaomyHZAMZf6+dr+sGTnj/QQZt3bz
A8EvM3SJpmexgrfW2LnyZQlXvxEgTw2CHLhQSA73cz3NMCFnoQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFGx0WDa6oe3RysSKSZglO1+QdV2KMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i
OTFmNjdlYi00YmY5LTQ1YmItYTU5MS02YjIyYWNmZDMwYzcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I5MWY2N2ViLTRiZjktNDViYi1h
NTkxLTZiMjJhY2ZkMzBjNy9iOTFmNjdlYi00YmY5LTQ1YmItYTU5MS02YjIyYWNm
ZDMwYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXh2QwDwQCAAIwCQMHACYgANQgADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgI5YzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdd3wKap5f00XWyq6jeSXILJ9e
4CoGvblEA/LuUnvZvpSYQfYl1AOJRtg/JTiLvRzcI+i6w3oDp3M/G5YYD/rEiQp/
gfdOAePEURswFWYRn4Bo5DuPEs/HEzCx5IBDK99+K3fB8//40EqEC8GgIavA15JK
CJJUDs4/UYg2jjtpSdCzidvgEWskR69OVTszpxxvcF8wQo/UsZMyzuLIm7HN6mWR
lk5G3EjqoqcpEJb9V6F5g5jPqtdj9b7qJLU0PsrgzDIZD7YvFyc6qv7OR1gxsz5/
7fxhJ+phRFVcjtZxe5zN2A97Z6PCxUbxy2m/J9zdNQLxMkiMIdeYS7eWbIzc
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:50 2026 by rpki-client