
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
File: 60853e5b-d7a9-4bc8-8250-635257ad49bd.cer (raw, json)
Hash identifier: d8/sjK9aVZf9/CNOlBedeXAJv3xzRp6eqVjuyMMJSbk=
Subject key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584E38C242AAA290C6556C249B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 19 Jun 2026 08:45:11 +0000
Certificate not after: Thu 21 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 11996
IP: 192.189.147.0/24
IP: 207.251.48.0/20
IP: 208.64.92.0/22
IP: 216.243.96.0/20
IP: 2605:6800::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 30 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:38:c2:42:aa:a2:90:c6:55:6c:24:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jun 19 08:45:11 2026 GMT
Not After : Sep 21 08:45:11 2028 GMT
Subject: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:5b:89:64:92:18:0d:a4:86:89:dd:97:0b:
81:dc:6c:e4:42:77:29:8d:d2:ae:08:cc:f3:4d:fa:
ef:23:3c:b3:25:be:36:f1:5b:d1:39:7b:dc:7c:bb:
37:bf:bd:8a:d6:d5:94:f1:97:e1:7f:20:be:b0:c9:
64:71:9c:81:6a:d8:ab:ea:d0:21:f3:e6:ec:4c:bb:
73:24:e5:8e:c6:1e:83:2e:44:f2:b8:0b:0b:79:77:
ea:53:39:56:c1:99:6d:8f:5f:15:7a:0d:60:f1:c7:
2e:a3:1c:4d:1e:0c:b1:5f:9d:a1:00:8f:79:33:9b:
ba:82:b0:a1:fd:3d:b0:a4:ee:b7:c8:cf:97:bf:2b:
2f:08:e0:fe:d4:da:a2:67:b1:b9:81:4e:34:d8:04:
09:ac:f8:f9:4f:76:33:6c:8e:14:22:11:a7:6e:d9:
42:5b:5d:aa:c4:5d:8f:0e:3f:cf:56:01:97:db:e8:
ee:40:0e:4b:3f:01:71:2b:cb:69:7d:9c:bb:e7:05:
b2:be:56:61:3e:df:ce:5d:f9:ee:1d:49:2f:03:3b:
94:06:3e:35:cd:03:75:d1:e0:4c:d0:db:34:d1:e1:
76:64:af:c0:7b:80:63:a4:8a:3a:dd:d8:68:66:79:
b5:af:71:17:b0:04:e1:55:f3:2b:dc:5f:9f:4e:8f:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.147.0/24
207.251.48.0/20
208.64.92.0/22
216.243.96.0/20
IPv6:
2605:6800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11996
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:d4:1d:55:89:2e:6d:31:2e:e0:30:0a:ae:05:d7:78:fc:39:
19:ca:c8:03:51:dc:95:14:9b:e0:ea:06:31:76:80:89:5b:cd:
c4:17:ea:65:3b:ad:b3:0c:a6:4b:f9:c0:dc:f2:66:5d:fe:88:
93:9b:9b:b7:cd:b2:28:80:5f:15:ec:c7:23:75:9e:b3:d2:1d:
ba:21:bd:b9:19:e8:8c:9e:b5:1a:61:4f:db:d8:ae:91:1d:6a:
6c:1d:99:34:a5:a0:b1:e3:ab:2f:16:f2:44:cb:03:48:a3:b5:
84:36:0c:ab:49:fd:56:9e:51:58:a8:e8:31:4d:da:5d:69:0c:
59:8e:b1:04:1b:6a:0d:09:d4:ac:df:2d:6a:1a:5e:e3:13:6a:
5a:39:c9:80:7d:bb:d8:8b:a1:db:f2:44:7e:a0:7b:8e:c6:42:
e6:09:a7:7d:3d:74:6e:31:60:cd:6f:d6:3b:e8:cd:4c:3a:f0:
7c:74:e7:f5:68:d2:dc:27:f6:b7:10:de:d7:5c:f2:af:4f:45:
80:6a:a9:3b:6b:ce:b2:1f:05:b8:af:59:32:02:1c:5b:1f:12:
28:b6:14:39:56:f7:e4:be:be:59:cf:d1:eb:9e:64:19:34:6d:
48:8b:6b:36:22:dc:0b:c0:e6:ef:e6:f8:f0:3c:22:b9:e7:1d:
d1:1b:05:4b
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE44wkKqopDGVWwkmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI2MDYxOTA4NDUxMVoXDTI4MDkyMTA4NDUxMVowLzEtMCsGA1UEAxMk
NjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0OWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMpbiWSSGA2khondlwuB3GzkQncpjdKuCMzz
TfrvIzyzJb428VvROXvcfLs3v72K1tWU8ZfhfyC+sMlkcZyBatir6tAh8+bsTLtz
JOWOxh6DLkTyuAsLeXfqUzlWwZltj18Veg1g8ccuoxxNHgyxX52hAI95M5u6grCh
/T2wpO63yM+XvysvCOD+1NqiZ7G5gU402AQJrPj5T3YzbI4UIhGnbtlCW12qxF2P
Dj/PVgGX2+juQA5LPwFxK8tpfZy75wWyvlZhPt/OXfnuHUkvAzuUBj41zQN10eBM
0Ns00eF2ZK/Ae4BjpIo63dhoZnm1r3EXsAThVfMr3F+fTo9YKQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFEuq4ADwORIyjFvABCLJrA87NQ8oMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82
MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwODUzZTViLWQ3YTktNGJjOC04
MjUwLTYzNTI1N2FkNDliZC82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdh
ZDQ5YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBADAvZMDBATP+zADBALQQFwDBATY82AwDQQCAAIw
BwMFACYFaAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLtwwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk9Qd
VYkubTEu4DAKrgXXePw5GcrIA1HclRSb4OoGMXaAiVvNxBfqZTutswymS/nA3PJm
Xf6Ik5ubt82yKIBfFezHI3Wes9IduiG9uRnojJ61GmFP29iukR1qbB2ZNKWgseOr
LxbyRMsDSKO1hDYMq0n9Vp5RWKjoMU3aXWkMWY6xBBtqDQnUrN8tahpe4xNqWjnJ
gH272Iuh2/JEfqB7jsZC5gmnfT10bjFgzW/WO+jNTDrwfHTn9WjS3Cf2txDe11zy
r09FgGqpO2vOsh8FuK9ZMgIcWx8SKLYUOVb35L6+Wc/R655kGTRtSItrNiLcC8Dm
7+b48Dwiuecd0RsFSw==
-----END CERTIFICATE-----
Generated at Sun Jun 28 15:24:29 2026 by rpki-client