
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be93b02b-b4b8-4908-b006-e7dea3eeda67.cer
File: be93b02b-b4b8-4908-b006-e7dea3eeda67.cer (raw, json)
Hash identifier: /ZOT+RX1gt0RSZ+VLSfkrArMse0zdHQ1G5CAs1wYHkQ=
Subject key identifier: 69:6A:B1:CD:DF:55:E9:81:8F:CE:BB:2E:9F:FE:2B:CE:F1:7D:6E:66
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584AFAAEFD4A6D85DF334EC70580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be93b02b-b4b8-4908-b006-e7dea3eeda67/be93b02b-b4b8-4908-b006-e7dea3eeda67.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be93b02b-b4b8-4908-b006-e7dea3eeda67/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 26 Aug 2025 00:45:26 +0000
Certificate not after: Mon 29 Nov 2027 01:45:26 +0000
Subordinate resources: AS: 398263
IP: 2606:11c0::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:fa:ae:fd:4a:6d:85:df:33:4e:c7:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Aug 26 00:45:26 2025 GMT
Not After : Nov 29 01:45:26 2027 GMT
Subject: CN=be93b02b-b4b8-4908-b006-e7dea3eeda67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:a5:c4:70:6b:13:e4:91:f3:63:12:22:09:
af:0f:d9:8c:7d:fa:ef:c3:4e:f2:cf:31:23:36:92:
d4:33:4e:49:a2:ba:cc:e2:5e:57:4b:88:8a:d1:07:
42:7f:13:62:47:55:dd:2c:8b:53:2c:cd:36:88:30:
30:1a:45:69:e0:33:fd:8c:46:fc:2d:92:64:66:9a:
85:b4:88:0c:56:29:32:b8:c3:50:de:1c:62:e8:e1:
2d:94:f9:5c:ee:e9:18:3d:52:07:d8:81:aa:ba:a8:
00:21:2a:98:b3:63:28:80:ea:54:22:b3:ac:0d:0d:
73:65:c1:37:f7:04:68:70:ff:17:f9:53:9a:c9:99:
c8:c2:88:d1:cd:5a:20:22:45:6a:04:fe:72:b4:3a:
77:57:73:5c:f4:cb:83:69:f6:c2:f9:7b:c1:11:da:
8f:80:fd:3f:70:8c:3b:f4:25:57:f9:84:1d:60:84:
90:4d:ff:fd:d3:47:40:59:06:4d:0c:30:bd:98:68:
4f:ef:8d:33:1b:34:5c:f9:6c:50:f9:1d:59:63:2c:
63:9d:76:98:56:3d:49:bf:5f:30:ee:b1:f0:31:a9:
1e:9e:74:fa:89:db:b8:85:f3:7e:ef:59:c8:f1:2c:
a8:d3:be:a0:e6:5f:71:3f:a8:8e:3f:ae:1c:ef:24:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6A:B1:CD:DF:55:E9:81:8F:CE:BB:2E:9F:FE:2B:CE:F1:7D:6E:66
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be93b02b-b4b8-4908-b006-e7dea3eeda67/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be93b02b-b4b8-4908-b006-e7dea3eeda67/be93b02b-b4b8-4908-b006-e7dea3eeda67.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:11c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
398263
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:52:18:ed:c6:ec:3f:3d:ed:03:aa:8e:42:e7:6b:73:f8:35:
9b:a5:85:f7:14:7a:9f:2b:4a:6d:0e:97:7d:2c:59:62:4c:86:
cc:a7:63:e1:b7:bb:6b:87:03:21:36:d0:e6:80:6e:9b:b0:ff:
70:f8:3d:54:14:de:bb:0a:f4:71:2c:2d:ed:43:db:3b:9d:de:
7b:10:57:0e:cd:1b:27:01:b9:8a:22:14:af:28:d2:75:fb:48:
38:41:9a:76:6e:3e:6c:dc:8d:48:f9:e4:11:ce:c2:b7:d1:38:
33:97:56:a5:77:9d:02:bb:07:2b:04:86:94:25:26:bd:eb:5b:
37:ea:a7:49:8b:12:9a:13:88:02:83:b2:a4:3c:d4:e0:1a:45:
1c:74:84:64:7d:39:84:96:e9:52:7e:f0:a0:fc:c2:e1:18:9b:
d5:7e:59:fe:56:9f:69:ca:4a:94:77:f5:4a:51:f0:71:c2:97:
67:26:12:58:ab:27:c0:2f:36:bd:6e:d6:5f:21:40:25:17:ac:
c9:30:4c:09:f9:4b:01:4d:9b:33:c2:d8:9b:cf:c4:ea:de:c6:
51:2e:3d:f5:82:81:2a:07:5f:d7:c9:e8:46:2a:15:37:07:dc:
89:0d:31:ec:c1:4a:1c:95:03:c8:0b:cf:be:a3:e3:0e:16:e5:
8d:14:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 13:39:38 2025 by rpki-client