
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f.cer
File: 315c2a9b-1d80-464d-8934-f128fe82ab8f.cer (raw, json)
Hash identifier: 1tXaaVKDkrRbMg4/EEwSHTT50KG1w52GkHz6cvs2a6Y=
Subject key identifier: C2:4E:C8:25:7D:B6:06:28:EB:54:AC:17:02:43:00:A2:3C:2B:8B:A4
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584E5B4FFF2C39D3E7C214982900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/315c2a9b-1d80-464d-8934-f128fe82ab8f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 01 Jul 2026 17:48:15 +0000
Certificate not after: Tue 25 Jan 2028 07:40:34 +0000
Subordinate resources: AS: 401919
IP: 2602:f56d::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5b:4f:ff:2c:39:d3:e7:c2:14:98:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Jul 1 17:48:15 2026 GMT
Not After : Jan 25 07:40:34 2028 GMT
Subject: CN=315c2a9b-1d80-464d-8934-f128fe82ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:d0:19:9a:06:9d:1d:6f:61:8e:49:d6:8b:
95:d4:75:41:58:69:d6:94:ec:18:a5:ed:1c:28:1c:
e6:0f:f1:bc:3c:83:e6:19:a0:9b:02:6b:bf:83:5b:
91:7a:ec:b5:e0:5b:6f:0c:eb:c2:85:1a:cf:5e:9c:
a1:42:ea:a9:5c:e5:f9:87:aa:54:ee:a8:cf:98:ba:
38:e2:83:d5:89:89:96:56:01:1b:fd:48:3a:b2:4c:
38:f5:26:a6:4e:e6:43:b2:cc:bd:9a:39:af:46:4e:
b8:2e:42:d8:12:5c:da:aa:84:73:b3:59:60:db:58:
13:db:58:f6:94:ed:ba:b4:a1:26:e6:36:91:a0:87:
ef:ab:05:cf:7f:94:ab:d8:09:eb:2c:64:2b:ba:b8:
e7:0f:db:57:7e:e9:a5:81:4c:9d:4e:96:d6:7a:54:
c3:96:fa:82:30:e0:83:06:0e:25:2a:74:7b:2d:bb:
7e:43:b4:89:c3:6f:87:ce:f5:72:0b:5e:7e:69:c9:
b2:b2:aa:27:83:25:e3:43:a0:3e:ef:d4:98:d5:d5:
9f:69:5c:52:75:4e:d1:5d:4b:de:1b:9d:36:57:79:
86:3b:c1:f7:88:8e:67:7b:46:16:64:3a:9a:6d:a5:
7d:06:9c:93:fe:1f:36:c9:41:9a:5d:91:00:b2:6a:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:C8:25:7D:B6:06:28:EB:54:AC:17:02:43:00:A2:3C:2B:8B:A4
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/315c2a9b-1d80-464d-8934-f128fe82ab8f/315c2a9b-1d80-464d-8934-f128fe82ab8f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f56d::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
401919
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:ce:b0:ef:20:68:1a:a7:1d:ba:89:10:21:e1:39:50:6b:46:
f9:4d:a2:15:42:cb:34:92:cc:c0:1f:29:17:66:56:a4:18:13:
4f:7b:98:e7:a7:a6:1d:00:7e:5c:a2:62:5a:ab:59:ad:fd:73:
1f:f0:3f:b9:33:8f:64:ce:5c:8c:e7:ce:07:0a:0d:56:ac:5f:
27:31:4f:8b:0f:47:a8:bd:0a:df:b1:ce:66:c9:ba:1d:f8:9a:
ca:ae:23:37:40:f8:cf:28:8b:05:4c:6a:c4:32:c4:9b:d7:5e:
d1:da:23:73:f0:0d:ef:d8:07:61:8b:72:3f:d2:10:38:44:08:
13:dd:5b:12:e8:64:7a:ae:c2:ad:7e:80:13:a3:51:4e:0e:94:
a8:87:b6:80:4b:2a:b3:87:b5:f4:cc:03:39:ed:78:c4:96:2b:
14:4f:74:ce:fc:24:cc:83:de:59:07:36:54:d2:60:4d:4b:9b:
ef:cb:a3:4a:7e:3e:17:af:dc:25:36:89:b5:a5:c6:9f:f3:12:
93:f6:0f:97:a3:8c:16:c2:7b:14:fe:9d:15:9d:52:28:15:94:
43:a4:30:2e:8d:8a:77:89:47:ef:b7:a0:b8:69:8b:79:c4:aa:
ea:db:aa:11:ee:48:18:b4:9d:6a:10:81:3b:ba:7d:bd:0d:3f:
1c:67:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 21:30:54 2026 by rpki-client