
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a.cer
File: f8e9b39d-7487-4785-9ac4-252370044d7a.cer (raw, json)
Hash identifier: EU2j4EFzQkYVG7MK+1+WhHJ4gZ1JGtdASUrBFcb4w4A=
Subject key identifier: 09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584DEAE3116058144BBD71684780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 22 May 2026 11:18:15 +0000
Certificate not after: Fri 11 Feb 2028 05:10:50 +0000
Subordinate resources: AS: 55280
AS: 402546
IP: 2602:f4d3::/40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ea:e3:11:60:58:14:4b:bd:71:68:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: May 22 11:18:15 2026 GMT
Not After : Feb 11 05:10:50 2028 GMT
Subject: CN=f8e9b39d-7487-4785-9ac4-252370044d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:e8:d6:99:ff:19:4a:4f:2a:fa:b0:b1:ab:
99:5f:70:75:49:03:76:a3:40:c1:6c:be:7a:ff:d9:
4f:11:65:54:ff:39:aa:03:2f:30:db:b1:8e:db:bf:
75:ad:0c:20:16:4e:97:a4:14:1d:56:da:30:75:d5:
c2:02:ef:c5:29:a5:6a:d4:49:ec:83:3b:a5:e1:5d:
32:f6:87:94:eb:8a:92:37:51:09:29:ba:ed:3c:c9:
dd:54:03:a0:02:0c:f7:64:31:45:79:9f:32:a4:0b:
5e:66:7c:fa:0c:1a:4a:05:03:74:23:1c:3b:84:6d:
5b:26:c2:db:0e:fe:de:4c:e7:13:16:f9:27:3b:11:
84:02:07:e9:2d:70:d1:13:3e:c1:f9:b5:17:25:78:
ed:a4:5c:70:0a:5c:62:08:3c:8b:c1:2f:ea:ec:4c:
ea:27:96:46:db:a9:05:4e:49:7d:bf:98:0a:5d:ec:
fb:2d:85:08:21:a3:89:9f:4b:bc:0f:e4:40:f4:49:
9e:2a:3b:e6:88:6f:7a:28:66:81:fe:2d:c7:bd:45:
9a:29:d6:f2:09:fe:e0:4a:a4:76:bd:14:81:44:11:
33:d3:2c:a3:4d:3a:77:50:19:9a:66:dd:f9:98:2d:
8e:fe:10:de:d3:23:fb:d9:6b:ec:ab:24:c5:a3:67:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:C3:D7:6D:D2:6B:29:4D:B6:EF:E4:CA:BB:21:3B:93:97:D5:BB
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f8e9b39d-7487-4785-9ac4-252370044d7a/f8e9b39d-7487-4785-9ac4-252370044d7a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f4d3::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55280
402546
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:56:b8:0b:f1:94:a2:d3:3b:39:d9:e7:c8:36:97:87:9a:4d:
e9:8c:16:7f:b9:9f:44:b5:f4:0e:42:09:72:b2:67:b6:b7:72:
06:c5:2a:9e:28:63:47:1b:52:14:30:e5:e9:92:b0:ff:e0:ea:
ba:4d:13:c0:55:db:d7:8d:ce:2c:0a:ac:f7:00:dd:95:58:fc:
cd:a4:42:26:ab:20:c5:15:51:e2:2b:3a:23:00:f0:dc:fc:8d:
2f:c6:0b:e2:77:39:87:11:6c:90:39:77:a1:7c:85:0d:9d:48:
d5:90:38:5c:43:78:68:57:3f:a3:b6:54:67:99:4b:cb:41:4f:
3d:58:a6:24:27:79:db:5a:fb:ad:b0:87:f4:66:9f:4c:84:a3:
57:29:3b:8f:3e:be:ae:fa:4c:f8:fc:f1:c6:57:a2:0b:f9:e5:
2b:df:39:3a:49:d1:e1:5b:9a:90:a8:92:c1:7c:67:4f:5b:3c:
2c:2a:fa:66:6d:76:8f:ee:e4:21:76:09:91:07:66:78:c7:8a:
19:5a:3c:6d:74:11:2c:fd:0b:e9:de:5c:0e:2d:d4:99:49:1d:
b2:98:ec:5e:d4:99:fd:0e:e2:5c:92:90:64:a5:db:91:f7:0d:
e6:63:bd:66:2d:a5:ce:f7:87:7f:03:81:45:3b:37:e6:f0:d3:
59:20:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 11:46:24 2026 by rpki-client