
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer
File: 4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer (raw, json)
Hash identifier: dLd2sGKUb+34usXq9kvp3vO/8yx1hfn3AX5aQhHfEOg=
Subject key identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584E98DA4F2626A15BC3ABFA4380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 23 Jul 2026 18:51:15 +0000
Certificate not after: Mon 28 Feb 2028 00:21:34 +0000
Subordinate resources: AS: 397562
AS: 399463
IP: 23.169.16.0/24
IP: 69.28.218.0/24
IP: 69.90.230.0/24
IP: 216.98.172.0/24
IP: 2602:fd99::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:98:da:4f:26:26:a1:5b:c3:ab:fa:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Jul 23 18:51:15 2026 GMT
Not After : Feb 28 00:21:34 2028 GMT
Subject: CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:ab:2c:82:aa:5a:5a:d2:76:22:6e:21:c0:
5e:86:f8:31:98:a3:94:23:3c:1d:86:40:a3:4a:68:
40:a7:de:30:28:1f:40:f6:06:1c:0a:91:7c:a1:e3:
ae:45:5c:1c:86:f4:40:3d:98:27:d6:f8:34:9b:a5:
1a:18:03:7a:d7:b3:e3:53:8b:6f:d6:04:ed:8c:d7:
73:f7:b2:4e:d2:4b:68:8c:80:5b:ee:ec:6d:eb:d1:
b4:e3:4e:3b:d7:9e:f0:1c:41:c2:80:26:41:fd:b8:
86:b9:de:c0:0c:08:8a:a9:18:e7:53:88:50:fe:79:
28:6e:9b:55:bb:ab:74:f1:2d:57:f6:1b:f4:be:a3:
de:07:55:e1:04:24:75:88:f2:73:dc:34:fc:ef:fd:
47:ab:28:e2:1e:82:3a:2c:32:a4:76:25:b0:c5:59:
bd:50:ce:c5:96:69:03:58:6f:1c:70:8f:03:14:83:
1c:b2:16:e7:44:4e:18:b5:d1:a9:68:37:e3:97:60:
a0:56:5a:0d:dc:42:33:e7:74:55:c3:2d:d6:75:9c:
6c:9d:83:99:76:6c:6e:43:59:ea:68:e7:4a:e2:80:
cf:70:d8:d3:d0:a9:b0:8f:ad:d2:27:59:fe:84:20:
44:9a:a1:37:94:e8:0a:e0:4b:1c:f3:dd:f4:70:b6:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.16.0/24
69.28.218.0/24
69.90.230.0/24
216.98.172.0/24
IPv6:
2602:fd99::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
397562
399463
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:92:93:6d:b1:fe:a0:91:6b:ec:7c:f5:f7:a4:13:e2:d9:85:
39:8b:fa:9a:89:64:44:2c:a1:59:b0:bb:46:f8:3f:46:1e:1f:
61:57:11:7c:14:aa:6d:6d:c6:7f:06:a0:2b:ae:21:7a:37:ba:
c2:14:2f:2f:e4:a0:cb:68:66:1b:23:6f:85:cc:f6:b5:8f:10:
e4:c2:f0:c8:c5:bc:99:aa:e6:bb:bf:1c:30:a1:c6:d4:b4:88:
2d:6f:2c:e9:ef:90:62:6b:5f:8b:11:4d:29:eb:e4:e1:28:6d:
17:1b:80:44:ef:57:51:31:b4:23:93:c6:e7:c5:38:b3:e8:de:
82:87:e6:c3:06:b7:ad:87:2c:23:11:86:eb:ef:01:f2:1e:3a:
98:dd:df:ce:79:49:8b:49:e9:d2:ae:bc:e1:74:26:0b:74:3b:
74:82:9a:e3:bb:e0:46:11:94:e0:9b:ab:3a:cc:c8:1d:50:06:
d5:9f:7c:98:a9:de:ee:0f:ce:17:49:f9:e8:9b:aa:2c:b6:48:
a3:01:5a:28:2c:68:c4:a2:3b:10:0a:86:52:9e:35:e8:da:98:
b4:e4:0d:7b:01:df:0b:aa:3c:61:8f:87:2e:e8:35:30:e9:0a:
c0:2f:21:73:04:1b:4a:8a:83:3e:28:23:c8:95:bc:80:86:7e:
0c:44:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:06:42 2026 by rpki-client