
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
File: 74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json)
Hash identifier: YinEOuEroHPbzGQzn0TaO+arbAlXDE8lgm526cX9XZg=
Subject key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584CB0128F3F655A77C5D7B6A880
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 29 Jan 2026 16:54:18 +0000
Certificate not after: Sun 30 Jan 2028 07:40:29 +0000
Subordinate resources: AS: 23506 -- 23507
IP: 2602:f704::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b0:12:8f:3f:65:5a:77:c5:d7:b6:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Jan 29 16:54:18 2026 GMT
Not After : Jan 30 07:40:29 2028 GMT
Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26:
82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86:
0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54:
dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db:
65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19:
bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1:
fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd:
68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d:
e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5:
87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7:
dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c:
7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb:
da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b:
78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c:
be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7:
ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12:
8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f704::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23506-23507
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:76:0d:dd:75:cb:8b:9c:2b:59:88:a1:13:4a:92:1c:2d:53:
d7:7a:f8:3d:28:fb:c1:f9:55:ce:1c:bc:b0:7a:e6:0b:35:d3:
47:b6:4b:02:aa:2a:3f:63:ec:ab:c8:9b:01:a1:b6:d0:a9:ca:
e3:d8:ae:65:60:b8:ef:9f:35:aa:f7:00:db:ba:46:19:be:60:
10:85:da:14:5c:22:f7:0f:7d:1c:79:aa:4e:7f:ef:ed:7a:49:
73:a9:a4:5f:d8:cb:a5:27:31:22:69:82:0f:6a:10:d9:0f:bd:
48:a1:8a:89:75:6f:d6:69:c3:81:58:cb:20:68:a2:6e:23:df:
e7:33:c3:51:cd:11:7a:5c:67:4f:eb:f7:3e:64:cd:fd:68:3a:
0e:0b:b8:7f:69:43:82:8e:ce:45:a4:8a:06:62:82:86:9c:79:
13:df:7d:9c:f8:84:b5:d0:de:2d:30:71:eb:8d:a9:9f:8d:6c:
97:d5:61:41:80:cf:b9:61:a4:d6:25:e5:35:9d:34:2f:2c:a9:
f8:73:48:ef:d2:49:56:da:48:42:14:63:b9:08:a9:65:9c:4f:
0a:67:6a:d3:43:5d:ff:6c:03:a6:51:9a:3a:1e:ea:0a:4e:a6:
93:d2:94:b6:ee:0c:54:6b:04:21:41:d4:db:c7:fa:7f:c4:4c:
d5:fb:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 19:57:55 2026 by rpki-client