
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
File: 21adcbb8-b500-460f-90cb-bca0525aabcb.cer (raw, json)
Hash identifier: 6+g/SdFrC1E4H22+hS/Ik+XR6IBT2SVe3mXfSuRprUU=
Subject key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584E43ECFF07F93D3163DA0EB56E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 23 Jun 2026 08:45:11 +0000
Certificate not after: Mon 25 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 13607
IP: 170.176.192.0/19
IP: 199.87.76.0/22
IP: 2620:13b:3000::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 07 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:43:ec:ff:07:f9:3d:31:63:da:0e:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jun 23 08:45:11 2026 GMT
Not After : Sep 25 08:45:11 2028 GMT
Subject: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:bb:6b:d4:c0:6f:12:53:be:65:21:bb:69:
0a:c5:5c:d3:e6:25:da:1a:89:9f:84:49:fa:b8:84:
40:57:23:5f:dc:2c:14:32:47:ae:28:cc:92:c8:f2:
4a:8a:67:7d:3c:8e:12:1f:09:a6:2a:bc:44:dd:c3:
18:4f:b5:f5:b6:be:18:9b:45:cf:0d:b0:1c:d0:8c:
9a:93:02:c8:54:d1:dd:be:67:f2:b4:c6:2a:fe:5b:
b4:49:f0:59:90:fa:14:85:98:d9:10:c8:e4:3e:19:
a4:06:98:31:2a:c6:12:f0:c2:f6:00:3b:6f:7b:97:
d5:79:6c:50:69:20:5e:3d:a9:f7:18:b6:37:6e:b1:
da:58:6d:0a:85:eb:c3:93:a2:a8:12:44:70:2a:67:
38:ea:13:0b:f0:e6:bf:e7:76:01:26:c6:c5:e3:92:
b0:11:c6:0b:85:2d:d9:14:3b:a2:bc:83:3e:22:5c:
8b:03:b8:83:4c:98:07:8d:ed:a6:17:fc:fa:ab:69:
c3:9c:64:e7:a9:f4:69:3b:01:1c:f9:21:0e:1d:d5:
e9:47:a1:a6:56:ed:7e:18:f5:07:dc:68:d9:17:50:
d5:7d:00:5e:0d:11:9f:61:56:3c:4f:bf:81:f7:36:
6e:d5:ad:79:91:60:7c:83:06:6d:c4:46:12:8c:39:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.192.0/19
199.87.76.0/22
IPv6:
2620:13b:3000::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13607
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:af:87:f7:75:a3:76:7b:bc:fe:a3:8c:90:c6:c0:2d:58:57:
9b:29:d9:85:0a:bc:a3:64:8f:29:d7:6c:05:13:00:b3:e8:c5:
e6:d8:3e:84:80:e5:7b:97:f0:54:4c:39:0d:58:cb:e6:4e:9c:
55:0b:db:d6:96:19:f1:81:33:07:3d:97:34:20:5a:36:28:c5:
39:a0:93:ce:14:0b:76:b1:4b:38:44:0e:2e:b9:bd:16:f4:04:
16:1a:59:12:e4:98:88:e9:71:d3:6d:a8:cf:39:4e:c2:5d:1c:
30:8b:35:30:d8:47:73:ef:d4:36:43:6d:ac:57:ca:45:2c:c9:
79:71:e8:1d:5c:39:1f:b0:ea:f6:f7:b9:58:f2:6b:82:18:72:
b5:ef:27:cf:d5:b5:be:03:30:13:63:e7:b2:f6:59:14:94:1a:
b3:ed:89:c2:3f:ca:0f:33:f6:b5:38:8c:59:90:32:f5:7c:85:
86:cf:94:4b:e4:50:77:c2:5f:e6:e9:ca:c5:9f:34:70:ec:b0:
aa:7f:1d:97:ce:01:2a:c9:d8:14:1f:08:14:d4:54:8a:67:9a:
2c:50:b1:24:7a:24:a2:5f:da:96:4b:d2:94:3e:cc:be:0a:b1:
b6:16:bb:d3:85:30:bb:5e:cf:f3:80:a6:f6:27:e0:bf:fa:d2:
7d:fe:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:24:09 2026 by rpki-client