
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.cer
File: 5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.cer (raw, json)
Hash identifier: e+wsX34DZ77De0KdgQSyRXl3KHmVUDCHpjWGNfhblSo=
Subject key identifier: 21:E1:1F:4B:AB:85:29:4C:5E:24:C9:0A:A7:25:7D:3F:AB:13:4F:0A
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584E5DF3F451B3F86E5B3DD19830
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Jul 2026 16:30:14 +0000
Certificate not after: Thu 13 Apr 2028 23:26:06 +0000
Subordinate resources: AS: 402107
IP: 23.151.244.0/24
IP: 198.99.149.0/24
IP: 2602:f481::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:f3:f4:51:b3:f8:6e:5b:3d:d1:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Jul 2 16:30:14 2026 GMT
Not After : Apr 13 23:26:06 2028 GMT
Subject: CN=5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:84:ce:3a:7c:dd:ff:b2:77:84:21:0a:2a:
23:58:84:a7:e4:b9:5a:de:aa:58:4e:cc:bf:0a:fa:
f7:71:8d:e8:94:0d:99:51:7b:96:f7:a9:4e:fd:08:
43:e2:ca:c3:10:8c:58:1f:0c:b7:d3:3e:86:bf:17:
59:c2:14:3e:56:41:0f:d6:01:19:9a:02:05:2c:88:
63:98:2f:4d:d4:d3:78:24:45:fe:62:d5:02:d4:d4:
60:52:b4:3f:60:9b:43:0c:96:9d:10:f5:cd:68:50:
fb:fb:c8:ba:bd:4d:86:e6:51:be:6a:f4:4a:e9:af:
ef:23:41:65:5a:61:6c:95:55:b2:98:14:3e:c3:84:
97:5a:22:c4:c0:6c:53:4d:33:79:57:ef:4b:a1:86:
70:d7:11:47:41:82:91:e5:fb:12:21:f5:98:0b:cd:
a4:45:6f:61:59:16:5d:dc:8c:82:e7:23:dd:1e:28:
75:d6:aa:7a:a9:f8:6c:49:bf:1d:bb:f9:18:9c:24:
c2:e7:b9:a7:ee:7f:f4:a7:d0:f2:47:96:02:fc:df:
ab:ae:92:bf:ed:1c:65:f6:5f:0c:ec:79:65:7a:26:
84:4b:1f:b8:66:1e:c1:f5:04:8b:3a:4c:48:b3:58:
96:35:db:aa:93:79:05:fb:3c:a7:e6:79:48:2c:85:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:1F:4B:AB:85:29:4C:5E:24:C9:0A:A7:25:7D:3F:AB:13:4F:0A
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15/5a6e7ada-2f4c-408c-a0dd-b2b737ac1d15.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.244.0/24
198.99.149.0/24
IPv6:
2602:f481::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402107
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ba:c2:4c:ea:ef:04:30:d7:f9:11:c1:c1:99:df:67:63:ae:
22:7a:e6:78:0f:91:1d:54:74:92:ba:ec:6b:14:53:38:b1:28:
ab:19:bf:7f:4b:86:7a:c8:b5:b3:65:bf:33:89:61:79:35:82:
dc:b4:b7:c2:7a:2a:8a:81:fb:c1:d1:e3:49:7e:98:c6:92:27:
be:9b:fd:86:28:45:69:d6:4f:02:a4:48:87:50:ce:4e:5e:6f:
5a:a7:23:25:3b:84:33:00:f0:bc:78:85:b3:15:ab:40:01:aa:
20:b2:37:6b:15:17:76:ec:7a:41:0f:81:79:b8:20:b3:13:f2:
1b:2b:6b:87:cc:5a:68:3a:c4:24:34:d9:a7:12:fb:bd:9b:5e:
79:a2:6a:41:28:5e:42:db:04:47:89:1c:29:60:cb:e0:f2:c5:
6f:ab:3a:d6:24:90:ab:98:44:e0:45:8c:53:16:24:5c:46:5b:
8d:2e:97:8c:6e:19:f1:6e:7c:8f:3d:79:3f:bc:42:0e:34:d9:
74:6f:94:a7:bd:47:19:5a:79:a5:ba:c0:d3:e5:55:6d:db:69:
67:0e:e0:65:82:a6:45:54:83:e4:20:36:21:fc:69:91:0c:c7:
c4:30:0d:96:8a:47:b2:27:07:5e:fb:71:c6:04:19:4f:c3:88:
f7:a7:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 21:28:35 2026 by rpki-client