
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer
File: 57b5faad-63db-4cfd-a55b-4143c3e94291.cer (raw, json)
Hash identifier: LO/Lr+Eb9LSJTrBahWnWDQ9sLYHEeyHeNHEaDzaSTBA=
Subject key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584E2ACCD7D05D6020551995C400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 14 Jun 2026 08:45:11 +0000
Certificate not after: Sat 16 Sep 2028 08:45:11 +0000
Subordinate resources: AS: 19008
IP: 96.31.192.0/20
IP: 209.239.96.0/20
IP: 216.49.96.0/19
IP: 2607:fb40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2a:cc:d7:d0:5d:60:20:55:19:95:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jun 14 08:45:11 2026 GMT
Not After : Sep 16 08:45:11 2028 GMT
Subject: CN=57b5faad-63db-4cfd-a55b-4143c3e94291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e6:ad:7a:17:5e:17:4c:67:a9:b6:9b:0c:f3:
c2:06:55:14:0a:a5:08:03:e6:71:f9:08:5a:90:89:
3d:20:ee:a4:1a:00:08:af:6e:4e:d8:1b:42:b8:7c:
32:8c:a9:c8:21:6d:67:bb:ac:27:74:9f:72:9f:58:
76:a4:72:75:22:72:22:2a:e4:fc:00:99:cd:5f:90:
53:b4:b9:a8:9a:02:90:6a:ff:d7:c9:c2:aa:64:cb:
8d:b5:ed:bf:ab:7f:80:85:ff:e9:97:a7:e1:72:ca:
c1:b5:93:ff:22:ae:c7:04:e7:64:0b:03:8d:56:f2:
39:46:7f:aa:cc:a4:3d:db:96:33:75:38:a7:54:3d:
4f:0b:9d:54:99:e6:97:0a:d6:a0:65:c9:f3:a8:29:
9c:26:17:69:35:69:74:53:dd:be:b1:ad:cc:72:56:
dd:6f:db:f5:83:94:74:fc:7a:2b:13:76:7d:c7:4b:
77:12:3b:c5:e4:9d:d6:0d:d0:ac:35:57:bf:f1:e8:
f6:4d:cb:31:29:28:ad:9f:8d:1c:27:38:f4:0f:24:
2e:69:0a:6d:a1:9d:58:28:ba:da:f0:f5:e7:8f:8b:
66:a1:74:a2:49:65:42:6d:4a:b6:14:13:4c:02:37:
b1:c3:62:3b:c6:56:71:e7:8d:86:68:46:d8:83:55:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
96.31.192.0/20
209.239.96.0/20
216.49.96.0/19
IPv6:
2607:fb40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
19008
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:5f:02:6b:0e:76:52:0f:31:bb:74:75:cb:20:bd:84:e0:9e:
14:17:1b:b0:b1:97:28:c5:8c:13:b2:04:b3:35:ff:f7:d1:0f:
bb:3c:a4:bd:2c:f5:85:16:ed:5a:f0:92:79:ac:3a:e7:03:ac:
1a:3e:67:b1:6e:3d:fa:c9:63:1e:a5:14:40:3e:80:4e:f3:75:
20:7b:43:38:1c:85:73:a3:bb:1a:a4:5d:7c:17:f7:57:f3:75:
9a:0d:8f:ae:10:68:e4:a3:13:ea:03:71:64:48:b4:55:a9:46:
f0:ad:1d:33:3d:a3:2d:e5:2b:99:06:e4:0c:97:ab:1f:71:03:
0b:7b:c7:6d:a0:0b:91:29:03:f9:41:ae:f2:d4:52:61:57:11:
a7:17:75:01:3e:92:d7:16:ae:53:9d:9a:e0:4d:7c:43:1c:53:
03:b5:0d:d1:bd:7f:06:29:a0:74:3e:ad:68:96:46:54:1f:38:
91:42:03:57:db:8e:e4:45:33:54:a1:8a:41:b4:c2:20:ea:ca:
a9:d8:e9:5b:61:af:1a:52:2d:c5:1c:f5:c5:ea:52:7d:3f:fd:
64:94:48:5e:37:49:2b:00:bf:9c:f6:20:96:a5:17:c5:ad:66:
be:59:7e:26:57:b4:1a:4c:25:d6:ba:3c:2d:6c:49:3c:63:c5:
a5:09:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 09:09:48 2026 by rpki-client