Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
File: 85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer (raw, json)
Hash identifier: ifgrLauoepkJnXyY+k+UBtwlI2vGqG+No4o1ZcZ3IOc=
Subject key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer: /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial: 010D0C9F4328584B7A861FF0E7B7B2B78D316B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Oct 2025 19:46:34 +0000
Certificate not after: Thu 13 Jan 2028 20:46:34 +0000
Subordinate resources: AS: inherit
IP: inherit
IP: inherit
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:7a:86:1f:f0:e7:b7:b2:b7:8d:31:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Validity
Not Before: Oct 10 19:46:34 2025 GMT
Not After : Jan 13 20:46:34 2028 GMT
Subject: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:0f:79:4c:e0:01:e9:33:c2:ad:c4:e7:ce:
b7:91:74:df:b9:aa:9f:70:a5:a3:4a:f8:0d:61:96:
d5:bf:90:eb:6a:3e:3f:cd:c6:6a:04:9e:f9:03:81:
1a:35:ff:0a:bd:62:ae:b1:99:8f:d5:fa:14:53:02:
c0:66:e0:98:72:bb:6f:3a:23:be:5b:49:00:d4:ce:
07:56:7b:f5:97:ee:69:37:f0:4a:2b:8d:94:ef:77:
d7:55:30:ef:cc:36:f2:70:ae:cb:fc:33:84:a5:0d:
c5:7d:aa:ad:a1:67:11:a0:9e:ee:2f:b2:4b:74:9b:
75:ba:d9:ba:2d:71:91:01:6f:93:8b:63:cf:a6:91:
00:f4:31:9a:f8:4a:ad:8f:2d:d6:4c:3c:2c:62:00:
33:2e:ed:0e:05:f4:79:bf:a9:60:9f:52:2f:bd:d2:
ae:62:97:1b:b2:76:dd:92:98:9e:1e:ba:d8:7c:51:
dc:75:6f:cd:dd:0b:db:ba:02:df:93:ec:36:a7:58:
95:c3:d9:68:23:ab:86:17:dc:ea:2b:a9:fd:a0:ba:
fc:13:5e:03:e9:cb:05:32:2c:81:72:7f:f7:83:bc:
15:70:db:98:2e:61:f6:ad:5e:f6:74:59:d7:41:4f:
91:ea:b4:a4:41:9a:65:ee:ca:2b:a0:c1:01:37:8a:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
X509v3 Authority Key Identifier:
keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:f9:e2:d3:22:37:2b:f9:49:db:2e:d2:83:93:58:e9:f3:2c:
a6:07:15:a4:53:ff:b4:8f:54:14:6e:37:04:82:68:bc:64:8e:
30:bc:ed:d4:3d:b0:5c:05:8c:11:6c:d6:41:4f:47:b5:01:f1:
45:7a:e3:ca:5b:e2:bd:e4:b9:10:1a:01:ee:18:2a:f2:9f:c5:
57:4a:7a:3e:95:3f:f3:86:91:8a:23:17:7e:a1:b8:ba:0e:bc:
e9:fa:4e:15:b8:60:df:b9:86:cf:a4:79:b9:bf:45:0d:2c:62:
90:ac:1b:fd:2c:5f:e8:54:50:79:aa:57:5c:15:ee:79:75:9f:
4d:f6:26:ee:7a:a5:c2:a6:46:84:56:94:56:af:f7:5b:26:56:
67:82:81:19:68:56:c5:3a:53:8a:30:35:19:58:e0:30:4f:36:
75:8b:74:26:63:80:fb:a2:85:4a:87:c3:4f:dc:16:c0:a0:d6:
02:14:ae:a6:37:4c:20:e7:38:31:1c:38:1e:ea:31:5a:bc:ee:
c4:b9:dd:3e:71:d8:72:cf:86:5d:fc:b6:14:00:2c:8a:02:4b:
c3:d8:00:56:e8:80:30:1e:25:fb:42:41:8b:01:1b:bf:85:9d:
1e:79:c9:e7:57:73:0c:31:8e:4a:62:43:88:49:30:0f:1a:69:
6d:a7:a3:95
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEt6hh/w57eyt40xawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI1MTAxMDE5NDYzNFoXDTI4MDExMzIwNDYzNFowLzEtMCsGA1UEAxMk
ODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRAPeUzgAekzwq3E5863kXTfuaqfcKWjSvgN
YZbVv5Draj4/zcZqBJ75A4EaNf8KvWKusZmP1foUUwLAZuCYcrtvOiO+W0kA1M4H
Vnv1l+5pN/BKK42U73fXVTDvzDbycK7L/DOEpQ3FfaqtoWcRoJ7uL7JLdJt1utm6
LXGRAW+Ti2PPppEA9DGa+Eqtjy3WTDwsYgAzLu0OBfR5v6lgn1IvvdKuYpcbsnbd
kpieHrrYfFHcdW/N3QvbugLfk+w2p1iVw9loI6uGF9zqK6n9oLr8E14D6csFMiyB
cn/3g7wVcNuYLmH2rV72dFnXQU+R6rSkQZpl7soroMEBN4q/DQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFG+W/O41hwYWpaD5uPTl5ZRdjXjkMIIBfQYIKwYBBQUHAQsE
ggFvMIIBazCBhAYIKwYBBQUHMAWGeHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzCB
rQYIKwYBBQUHMAqGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRw
czovL3JyZHAuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My5jcmwwHwYDVR0jBBgwFoAUYkd+H9nlJdDXortj2RThTuRUo2QwDgYDVR0PAQH/
BAQDAgEGMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFr5
4tMiNyv5Sdsu0oOTWOnzLKYHFaRT/7SPVBRuNwSCaLxkjjC87dQ9sFwFjBFs1kFP
R7UB8UV648pb4r3kuRAaAe4YKvKfxVdKej6VP/OGkYojF36huLoOvOn6ThW4YN+5
hs+kebm/RQ0sYpCsG/0sX+hUUHmqV1wV7nl1n032Ju56pcKmRoRWlFav91smVmeC
gRloVsU6U4owNRlY4DBPNnWLdCZjgPuihUqHw0/cFsCg1gIUrqY3TCDnODEcOB7q
MVq87sS53T5x2HLPhl38thQALIoCS8PYAFbogDAeJftCQYsBG7+FnR55yedXcwwx
jkpiQ4hJMA8aaW2no5U=
-----END CERTIFICATE-----
Generated at Tue Oct 14 00:33:17 2025 by rpki-client