
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6.cer
File: 5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6.cer (raw, json)
Hash identifier: GmBIWOWFPHnBtlipPHWBcRadQpjpYXA1GjHKGojgC4o=
Subject key identifier: 3D:FE:A6:86:E8:72:10:7C:24:9E:3E:C8:33:AD:AE:66:5E:EB:05:99
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial: 010D0C9F4328584D1D5A33AEF66B465411AE5B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 09 Mar 2026 20:21:46 +0000
Certificate not after: Sun 11 Jun 2028 20:21:46 +0000
Subordinate resources: AS: 17393
IP: 206.109.77.0/24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:5a:33:ae:f6:6b:46:54:11:ae:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Validity
Not Before: Mar 9 20:21:46 2026 GMT
Not After : Jun 11 20:21:46 2028 GMT
Subject: CN=5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:38:b3:b0:56:eb:40:ed:56:dd:d6:10:db:
68:6b:35:62:b9:27:2d:07:39:d6:a8:f7:0d:20:4c:
79:1f:7b:a2:3c:19:9d:67:f1:84:40:51:53:d0:0f:
6a:88:77:8f:1c:f0:01:6f:30:16:03:de:e2:d3:d6:
fa:bf:f2:56:26:90:6d:94:a8:2c:7b:a8:21:2c:8e:
45:44:61:d7:2b:de:9b:a6:82:65:1f:cb:aa:7d:41:
89:67:61:3b:80:c4:c0:61:5d:af:9c:fa:3e:4d:36:
22:5d:85:07:a8:ea:ad:ef:c3:09:3f:e6:29:2d:e9:
03:be:ec:25:8d:49:d7:21:36:09:5b:c2:ea:39:2f:
10:ef:76:e3:c3:fb:af:30:3c:37:12:26:02:9d:5c:
bd:87:9c:6f:ff:14:2a:e0:75:20:3c:d7:a5:4c:68:
1f:66:dd:1b:d9:b7:44:73:c2:06:76:f1:2c:80:52:
fe:4f:64:96:e6:df:c0:23:ed:52:09:14:0b:b3:c3:
f6:15:ff:51:71:9f:bd:08:a0:f5:f1:d0:6f:7b:ee:
e6:25:83:7a:50:e3:8f:a6:74:25:c2:13:70:0d:46:
ee:ad:73:0e:f9:4b:00:74:a8:71:be:e9:db:67:ba:
38:d1:c2:71:33:c5:8c:17:8b:dd:86:48:03:4e:a2:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:A6:86:E8:72:10:7C:24:9E:3E:C8:33:AD:AE:66:5E:EB:05:99
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6/5e1d50ec-6c9c-4166-92b2-d5c97cebe7d6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
X509v3 Authority Key Identifier:
keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.109.77.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17393
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:8f:ee:e7:8b:57:66:2d:9f:eb:69:a9:84:46:ce:ca:98:19:
4d:dd:c9:db:66:07:4e:e8:94:6a:b5:c8:e7:07:47:73:da:cf:
71:8c:b6:7b:c7:0b:9d:ef:09:01:bd:eb:7e:9e:22:05:97:65:
b1:93:14:4b:cf:57:db:bb:f3:1f:4e:32:c7:b8:91:48:57:bb:
7e:86:c8:ed:1a:0c:42:fe:2c:f2:4d:79:97:ff:04:97:29:20:
8b:9c:be:ad:76:77:a7:02:ce:18:80:3a:8b:76:a2:70:43:fc:
02:a4:c4:9e:80:4f:06:72:01:de:f9:58:b9:19:a8:9d:9e:fb:
ba:2a:75:3f:9b:38:0e:a7:5f:9c:5c:a7:b7:07:20:92:51:95:
f4:6b:5d:0e:4d:90:85:5f:c4:0a:e6:7e:a2:2a:5d:4d:77:22:
7a:ed:db:d5:0d:5a:9c:65:7e:30:db:81:7f:f0:cf:56:6f:8d:
8f:66:52:c9:1c:08:99:99:db:37:00:35:62:d7:9b:19:23:a0:
60:b7:2c:9a:06:0d:d4:c5:93:1e:f3:56:63:3e:1f:0e:d1:66:
9a:e0:08:6a:e4:a1:e0:a7:81:83:e7:88:ba:f1:38:6a:52:15:
e4:a4:72:9d:48:c4:12:e9:c7:ef:cd:2c:3f:ab:b1:11:4c:f0:
fa:24:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:13 2026 by rpki-client