
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.cer
File: b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.cer (raw, json)
Hash identifier: 8dt5v5sFMxLktvuaawMao5YMqdVGYGrk79ZdvKYQx1g=
Subject key identifier: 86:B6:C0:54:40:BF:F2:4B:9E:1E:FF:9C:11:2E:DE:71:15:17:6C:0F
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584F7D10BABD0F6A344039CF7B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 13 Oct 2026 12:45:12 +0000
Certificate not after: Mon 15 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 400145
IP: 207.90.245.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7d:10:ba:bd:0f:6a:34:40:39:cf:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Oct 13 12:45:12 2026 GMT
Not After : Jan 15 13:45:12 2029 GMT
Subject: CN=b60417b1-df61-4bc2-b63c-b72bdcc3bb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:ba:34:e1:92:af:c9:2a:8b:b9:c9:41:5b:
2d:ea:e0:69:d7:04:df:01:58:d4:de:ae:3a:b8:d6:
ae:5a:f9:2d:0e:ca:b5:e7:89:ba:eb:3d:dd:a1:dd:
53:7f:fd:c1:10:1d:cd:21:03:53:30:f0:af:9f:c2:
53:ef:f4:37:1f:1c:f5:02:6e:9f:5a:f1:8c:73:7e:
53:6c:78:f0:31:34:74:ae:56:de:4d:ed:5c:b8:ca:
b5:25:03:d4:d2:56:c8:87:a2:e5:d1:fe:e5:57:9c:
94:41:f5:76:f0:dd:7f:5c:7e:65:a3:03:5d:4a:2c:
f7:99:d0:0d:6d:ea:7b:12:1d:a1:8e:fe:23:7c:58:
16:3b:66:74:46:e8:cc:22:6e:47:61:ef:da:29:92:
4c:4a:72:ac:e4:03:19:c2:f0:34:34:a5:33:15:2f:
67:4b:f5:d6:81:23:83:4e:b2:c0:21:48:58:6b:48:
74:8c:cd:5f:2f:b2:16:ea:8c:08:20:a8:6a:76:a8:
31:1e:f7:d2:c5:a3:fc:7b:95:2a:2b:0d:bc:7d:96:
e9:f9:ab:d6:bc:21:19:54:84:e7:7a:0d:f0:5c:f7:
2d:e9:e2:c2:12:51:0f:d3:b1:ba:59:71:93:46:41:
4c:37:3e:f2:46:55:86:1b:aa:5a:33:88:5b:8f:07:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:C0:54:40:BF:F2:4B:9E:1E:FF:9C:11:2E:DE:71:15:17:6C:0F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.245.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
400145
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:ad:12:cb:e0:00:90:7a:92:43:d6:b2:4f:b8:af:52:92:a6:
d0:46:b8:fd:66:29:39:18:56:9a:eb:38:58:91:dd:4a:2d:5b:
46:a1:15:f0:ce:1a:dd:34:d9:2c:d5:31:7b:2b:93:64:09:69:
47:00:00:e2:fa:ad:e1:d2:03:4b:4b:ca:90:67:06:06:bb:73:
a9:bb:df:f0:51:3e:bf:be:32:8d:f1:b0:56:54:59:c9:64:99:
77:08:ef:0c:d3:90:7a:30:03:ce:c3:ac:d1:eb:3c:73:c7:20:
0e:e0:ef:d0:7e:d4:a1:a9:29:15:d0:05:6d:dd:32:dd:3a:5f:
2a:6c:cd:f2:e4:2d:f2:e1:3c:15:36:6e:d8:41:2f:e1:f4:71:
bc:e8:fb:1b:45:e4:b8:b0:9d:6f:9f:50:42:c4:95:fb:24:6b:
be:d8:1a:a9:00:6f:85:a9:ee:39:aa:62:66:37:56:2e:54:63:
33:9a:da:d2:92:29:3e:95:09:d1:2c:47:e5:e7:8c:0f:7a:04:
fc:2c:ef:0f:52:47:5c:0c:a3:2f:74:95:41:17:b4:c6:18:c6:
e5:28:03:83:1b:4b:e4:67:5b:6c:f0:5d:ee:1a:5f:59:86:e4:
98:95:ef:fa:89:14:e6:cf:4c:74:c6:85:00:18:2e:2a:f1:ea:
3e:9b:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:53:43 2026 by rpki-client