
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
File: ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer (raw, json)
Hash identifier: nFTr/NJNCdDgdsY5NAysvD5mMTAMoo1BZ+lgGJd8fjI=
Subject key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584CD7BE89A180A0BC43D7D14D60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Feb 2026 21:57:21 +0000
Certificate not after: Sun 19 Mar 2028 20:22:01 +0000
Subordinate resources: AS: 10974
IP: 199.189.180.0/22
IP: 208.79.20.0/22
IP: 2606:3b40::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d7:be:89:a1:80:a0:bc:43:d7:d1:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Feb 12 21:57:21 2026 GMT
Not After : Mar 19 20:22:01 2028 GMT
Subject: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:7c:f2:c2:dd:df:90:f3:d1:89:6a:62:9f:
0f:d1:d4:ef:c8:92:a8:a1:e1:cc:44:3e:2a:38:eb:
b3:7f:2b:ca:f5:44:ba:ca:2c:b8:1e:dd:c1:88:d5:
8b:20:2a:b7:e8:83:43:a4:26:fa:be:cd:5a:35:c0:
26:80:f6:dc:00:14:6c:6f:f3:9e:77:0d:c2:3c:28:
31:df:35:8e:81:a5:1d:a0:f8:74:72:d4:ce:2f:b2:
40:3e:6a:c5:d7:a7:66:1a:01:f6:c7:c7:2f:f9:11:
a4:3e:bb:1c:09:38:06:62:1f:41:bf:32:ad:65:52:
b1:74:46:aa:68:83:ed:b8:a2:f8:01:ae:da:da:b4:
d8:26:9b:5b:3d:f3:6c:33:f4:1e:d3:2d:ec:39:6a:
b2:10:58:9f:21:25:cf:91:4f:4c:67:43:b9:33:d4:
8d:fc:39:99:34:2b:08:18:53:82:bb:67:45:46:44:
21:63:24:20:5a:5c:8e:e9:1c:0c:d0:c1:6a:64:1c:
98:b1:76:f0:c2:c6:d2:ed:49:bd:81:e0:f1:f3:53:
42:76:bd:ab:17:7b:d1:be:51:8b:fa:0e:64:47:4d:
ba:c2:bb:60:4b:88:98:f4:9e:10:0c:10:a7:a3:68:
c7:a3:ae:4f:26:0e:3a:ed:16:99:be:49:e5:7f:7e:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.180.0/22
208.79.20.0/22
IPv6:
2606:3b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10974
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:9e:76:d2:df:42:ac:87:ac:0b:0f:f3:24:43:33:57:87:c3:
7b:91:c2:51:59:11:a6:84:f2:44:dc:0a:0e:63:1e:19:9c:15:
f9:6f:e2:f3:d0:71:68:da:3c:af:06:c4:8d:21:65:02:7a:c0:
d4:aa:58:95:4d:66:3d:6b:c2:62:2e:30:2f:71:20:ec:5e:99:
d8:8d:8d:aa:39:7b:02:13:50:6e:1f:bf:c6:a8:16:28:48:91:
ac:0d:96:6c:4e:be:72:08:9d:42:af:68:dd:49:1b:79:f8:0b:
02:35:0c:0e:6e:05:61:18:ac:de:d3:b3:40:a0:f8:e5:54:6b:
88:6f:fe:df:62:89:c2:34:66:1c:76:06:c4:ab:32:d1:78:7f:
f8:10:07:cd:eb:9e:09:cd:44:7a:ed:fe:46:80:98:e5:d7:1d:
6a:92:62:e8:c0:32:2c:a6:4b:8d:3e:fe:42:94:73:53:ce:16:
5f:88:3d:eb:85:40:fd:05:ff:31:81:21:53:d9:71:de:e7:8e:
95:59:f7:cf:54:6d:c1:48:7f:5b:dc:54:49:45:0a:32:ce:aa:
5c:22:5a:bc:4b:06:35:d3:b6:7a:f4:6e:dd:0e:8e:85:75:bf:
dc:c1:5c:ee:e3:23:48:b0:0a:2a:40:f3:d5:e7:65:85:9e:ef:
60:c8:ef:d9
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEzXvomhgKC8Q9fRTWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI2MDIxMjIxNTcyMVoXDTI4MDMxOTIwMjIwMVowLzEtMCsGA1UEAxMk
Y2NiOTg2MzctYWFlMS00MmMzLTkwY2EtMGNlZTJmNGViZjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmR88sLd35Dz0YlqYp8P0dTvyJKooeHMRD4q
OOuzfyvK9US6yiy4Ht3BiNWLICq36INDpCb6vs1aNcAmgPbcABRsb/Oedw3CPCgx
3zWOgaUdoPh0ctTOL7JAPmrF16dmGgH2x8cv+RGkPrscCTgGYh9BvzKtZVKxdEaq
aIPtuKL4Aa7a2rTYJptbPfNsM/Qe0y3sOWqyEFifISXPkU9MZ0O5M9SN/DmZNCsI
GFOCu2dFRkQhYyQgWlyO6RwM0MFqZByYsXbwwsbS7Um9geDx81NCdr2rF3vRvlGL
+g5kR026wrtgS4iY9J4QDBCno2jHo65PJg467RaZvknlf37t2wIDAQABo4IELzCC
BCswHQYDVR0OBBYEFCbtBcTmutzeWnoUJAKmFc8cRX4ZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9j
Y2I5ODYzNy1hYWUxLTQyYzMtOTBjYS0wY2VlMmY0ZWJmNTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2NjYjk4NjM3LWFhZTEtNDJjMy05
MGNhLTBjZWUyZjRlYmY1OS9jY2I5ODYzNy1hYWUxLTQyYzMtOTBjYS0wY2VlMmY0
ZWJmNTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBALHvbQDBALQTxQwDQQCAAIwBwMFACYGO0AwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICKt4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJp520t9CrIesCw/zJEMz
V4fDe5HCUVkRpoTyRNwKDmMeGZwV+W/i89BxaNo8rwbEjSFlAnrA1KpYlU1mPWvC
Yi4wL3Eg7F6Z2I2Nqjl7AhNQbh+/xqgWKEiRrA2WbE6+cgidQq9o3UkbefgLAjUM
Dm4FYRis3tOzQKD45VRriG/+32KJwjRmHHYGxKsy0Xh/+BAHzeueCc1Eeu3+RoCY
5dcdapJi6MAyLKZLjT7+QpRzU84WX4g964VA/QX/MYEhU9lx3ueOlVn3z1RtwUh/
W9xUSUUKMs6qXCJavEsGNdO2evRu3Q6OhXW/3MFc7uMjSLAKKkDz1edlhZ7vYMjv
2Q==
-----END CERTIFICATE-----
Generated at Thu Feb 26 19:57:49 2026 by rpki-client