
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
File: b2f0a061-78dd-4d61-988a-266b192d9caa.cer (raw, json)
Hash identifier: 81Uhbwm+lQzgPCg/LyE/R/JfYMJ68ls57t70VZ9zNdo=
Subject key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584EB9A4D6D0674D855F2FB59B40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 04 Aug 2026 12:45:11 +0000
Certificate not after: Mon 06 Nov 2028 13:45:11 +0000
Subordinate resources: AS: 6427
AS: 6939
AS: 393338
IP: 64.62.128.0/17
IP: 64.71.128.0/18
IP: 65.19.128.0/18
IP: 65.49.0.0/17
IP: 66.160.128.0 -- 66.160.207.255
IP: 66.220.0.0/19
IP: 72.52.64.0/18
IP: 74.82.0.0/18
IP: 184.104.0.0/15
IP: 209.51.160.0/19
IP: 216.66.0.0 -- 216.66.95.255
IP: 216.218.128.0/17
IP: 2001:470::/32
IP: 2600:7000::/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b9:a4:d6:d0:67:4d:85:5f:2f:b5:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Aug 4 12:45:11 2026 GMT
Not After : Nov 6 13:45:11 2028 GMT
Subject: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:2d:4b:15:ce:ad:1b:61:4e:39:0e:4e:b1:
5b:13:ab:ad:a6:cc:48:9b:b7:73:bb:d8:d8:26:62:
5b:11:fe:ae:cd:d5:27:b3:90:c5:b5:1e:ae:7b:3b:
94:4e:89:05:f1:2a:68:fd:47:20:83:20:e0:78:02:
ef:a7:ae:f0:83:62:a9:47:ec:a5:62:a3:f4:9e:7b:
8c:d8:61:97:bf:fa:9e:d0:bb:1e:6d:a5:56:ed:54:
4d:7f:46:0d:66:37:93:c5:a2:3f:0d:b2:3f:be:57:
26:90:02:ca:d9:2c:7a:30:84:35:cf:6c:75:12:44:
eb:1e:77:81:33:6c:f0:72:3a:c9:93:79:8f:97:52:
9d:04:67:c4:16:b7:dc:88:7e:13:31:0e:ec:63:73:
04:e7:eb:a3:2e:fe:de:f6:c3:f2:9a:c7:cd:85:ba:
f9:c5:cb:11:7a:0b:2c:5e:a7:f7:7a:53:fd:29:26:
22:68:45:45:92:16:bc:00:7e:2f:b8:41:00:8f:21:
bd:4f:84:f6:82:e4:1c:b7:35:4f:0c:c9:09:f6:83:
01:c9:e1:46:51:68:bf:c3:89:cf:95:4c:36:5f:c9:
8a:de:f3:90:28:c9:e9:d8:70:a6:f1:fd:ed:d5:d1:
85:da:66:37:76:ed:2c:6f:ce:0d:af:36:33:61:c9:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.128.0/17
64.71.128.0/18
65.19.128.0/18
65.49.0.0/17
66.160.128.0-66.160.207.255
66.220.0.0/19
72.52.64.0/18
74.82.0.0/18
184.104.0.0/15
209.51.160.0/19
216.66.0.0-216.66.95.255
216.218.128.0/17
IPv6:
2001:470::/32
2600:7000::/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6427
6939
393338
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c5:19:9a:e4:39:cb:bf:18:4e:b0:db:d5:14:7b:11:0b:06:
f3:83:e4:8e:3d:de:7b:be:7c:0b:60:3b:2a:16:95:0e:d7:dc:
f9:fe:08:20:c3:63:5a:35:35:a9:9b:97:bf:1f:62:f9:6a:6b:
19:55:e9:00:f4:3d:c4:3d:cd:2f:3f:f4:11:50:1f:b4:43:0d:
91:ea:29:d7:45:d7:9e:dd:ee:fe:80:37:68:b2:c2:6d:c0:ca:
79:b7:96:86:c8:44:2b:5c:d0:df:43:bd:e5:e0:40:a0:31:c7:
47:64:7f:a2:2f:2f:07:91:82:55:48:e1:5e:a9:cd:0c:ec:cd:
b7:7a:69:2d:2b:18:ca:8b:e4:8b:68:20:10:c3:ae:2c:59:e9:
e0:8f:8c:b9:f1:d5:0c:9c:19:5b:b6:89:f8:51:e7:87:36:d7:
9d:b0:3b:73:76:4d:c8:10:2b:17:b0:a2:db:f0:40:e7:2f:52:
b3:6f:46:df:b1:3a:60:3f:46:70:77:c5:f6:f2:6c:d6:3c:6e:
66:04:4e:a9:91:af:c9:b5:8b:8b:3f:34:9f:12:bc:f3:1a:5f:
32:10:5d:0c:be:fd:b7:1e:c5:11:57:9f:75:ec:fd:c3:4d:25:
02:6b:7f:51:7b:00:7a:9c:e0:09:28:9e:e7:ed:03:61:df:40:
ad:48:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:09:52 2026 by rpki-client