Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
File: 4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer (raw, json)
Hash identifier: SbqlGpkKAYjhguFnZkXYYOpche7xejuo2MnpeXSBf8k=
Subject key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584CCF852EF888DA9F6107547938
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Feb 2026 23:15:19 +0000
Certificate not after: Thu 10 Feb 2028 13:38:21 +0000
Subordinate resources: AS: 1696
AS: 2908 -- 2913
AS: 3073 -- 3081
AS: 4996
AS: 13642
AS: 19954
AS: 22081
AS: 22650
AS: 25883
AS: 30284 -- 30285
AS: 32111
AS: 32287
AS: 33463 -- 33464
AS: 35967
IP: 129.14.0.0/16
IP: 135.53.0.0/16
IP: 135.155.0.0/16
IP: 144.215.0.0/16
IP: 146.128.0.0/16
IP: 150.110.0.0/16
IP: 159.17.0.0/16
IP: 161.127.0.0/16
IP: 161.161.0.0/16
IP: 162.124.0.0/16
IP: 165.203.0.0/16
IP: 168.72.0.0/16
IP: 168.109.0.0/16
IP: 169.160.0.0 -- 169.183.255.255
IP: 169.185.0.0 -- 169.195.255.255
IP: 192.48.247.0/24
IP: 192.104.163.0 -- 192.104.164.255
IP: 192.129.81.0/24
IP: 192.135.38.0/24
IP: 192.148.191.0/24
IP: 192.195.119.0 -- 192.195.133.255
IP: 199.67.128.0 -- 199.67.247.255
IP: 199.85.246.0/24
IP: 199.85.250.0/24
IP: 204.13.184.0/21
IP: 204.107.124.0/24
IP: 204.130.247.0/24
IP: 204.152.4.0/23
IP: 204.153.72.0/23
IP: 204.235.128.0 -- 204.235.141.255
IP: 205.167.114.0/23
IP: 209.99.240.0/20
IP: 2620:0:d80::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cf:85:2e:f8:88:da:9f:61:07:54:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Feb 9 23:15:19 2026 GMT
Not After : Feb 10 13:38:21 2028 GMT
Subject: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:28:59:ee:8a:0a:1e:af:86:fa:bc:3e:1d:
9d:bf:53:57:2a:e2:cd:9b:37:a6:1e:a4:32:bf:c1:
41:99:75:38:62:bd:22:b4:2a:06:21:c2:51:4a:6c:
2c:7c:f7:ef:7d:76:f1:d3:fa:2f:96:73:04:f6:4f:
41:2e:6e:da:c1:74:c2:6f:a2:27:35:e9:b7:00:87:
62:f1:00:fb:6a:83:3a:30:ea:0d:b7:a7:73:b2:51:
10:0e:30:49:2e:3a:b5:3d:eb:f4:3f:d4:da:fa:70:
4b:d5:b5:33:2f:d0:2f:fd:39:df:35:9d:86:f6:9a:
b5:89:e8:68:8c:7a:bc:b9:e4:d9:28:51:d2:63:7d:
e8:0b:f9:70:e5:2f:d7:c7:12:ed:7b:6d:d0:5b:de:
65:5e:94:77:d0:ac:ad:21:8b:73:9e:4b:2a:a7:93:
4e:aa:a4:df:e5:57:5d:a4:a1:59:46:9a:58:a2:8f:
26:a6:6b:8d:b5:09:b8:f4:1f:d5:60:62:57:25:9e:
b8:41:38:44:fd:29:52:dd:1f:bd:f0:a2:14:ba:83:
a1:2c:c7:d4:dc:24:79:76:a2:90:e7:53:dc:34:22:
f1:43:3d:d0:f1:f9:18:33:c7:c1:3b:41:29:f2:82:
35:81:f7:29:7d:41:41:e7:1e:bf:20:d5:7e:89:e7:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.14.0.0/16
135.53.0.0/16
135.155.0.0/16
144.215.0.0/16
146.128.0.0/16
150.110.0.0/16
159.17.0.0/16
161.127.0.0/16
161.161.0.0/16
162.124.0.0/16
165.203.0.0/16
168.72.0.0/16
168.109.0.0/16
169.160.0.0-169.183.255.255
169.185.0.0-169.195.255.255
192.48.247.0/24
192.104.163.0-192.104.164.255
192.129.81.0/24
192.135.38.0/24
192.148.191.0/24
192.195.119.0-192.195.133.255
199.67.128.0-199.67.247.255
199.85.246.0/24
199.85.250.0/24
204.13.184.0/21
204.107.124.0/24
204.130.247.0/24
204.152.4.0/23
204.153.72.0/23
204.235.128.0-204.235.141.255
205.167.114.0/23
209.99.240.0/20
IPv6:
2620:0:d80::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1696
2908-2913
3073-3081
4996
13642
19954
22081
22650
25883
30284-30285
32111
32287
33463-33464
35967
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:ac:ca:81:e8:5a:f3:3e:c8:92:4f:72:9b:55:9d:c0:65:1e:
73:9a:93:6d:4e:15:50:dd:64:02:5d:fa:49:40:fc:75:61:c3:
85:04:e3:25:db:3c:41:29:3a:e5:2c:9e:5f:6e:0b:80:9f:92:
08:05:31:8a:89:bc:31:0b:e9:93:e4:15:eb:ff:25:8b:e6:92:
26:67:d5:3a:0a:7f:b2:9b:31:c8:2c:3d:98:b7:d6:55:93:98:
0d:73:aa:51:26:59:1d:21:7c:20:c9:a2:3e:41:94:b7:bb:dc:
a0:d0:65:26:7b:04:d9:60:0b:0f:fe:13:da:d1:b5:db:a8:4a:
02:00:09:ee:12:9c:d6:d2:34:91:56:ae:d3:93:25:e4:9e:0d:
6f:38:04:bf:86:35:56:cd:07:a7:68:c0:99:e5:f6:63:0a:3d:
90:2a:df:5c:b8:70:e5:16:ba:3b:00:3c:d6:84:8a:19:17:65:
25:74:1f:ac:14:b5:fa:c3:87:5b:45:fd:64:41:c5:da:9c:79:
75:9f:0e:ca:6f:bc:8c:00:15:f3:05:c3:c3:78:ec:68:ae:46:
ab:03:f5:ff:9f:3d:e4:77:91:e4:85:28:1b:d5:30:a5:8c:45:
53:be:97:20:73:b1:98:2c:74:ce:34:81:69:36:71:99:01:11:
bb:f7:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 19:58:18 2026 by rpki-client