
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a.cer
File: 85dd82c5-5f88-45b7-afc5-f84290d7414a.cer (raw, json)
Hash identifier: 4PykiSk7mPDG6bzpwTPyBVgX1xBYdtcTmEfxPLol0q8=
Subject key identifier: 9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E66D28CA8F9DCD84E9967BDE0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 05 Jul 2026 20:45:12 +0000
Certificate not after: Sat 07 Oct 2028 20:45:12 +0000
Subordinate resources: AS: 17119
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:d2:8c:a8:f9:dc:d8:4e:99:67:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 5 20:45:12 2026 GMT
Not After : Oct 7 20:45:12 2028 GMT
Subject: CN=85dd82c5-5f88-45b7-afc5-f84290d7414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:88:39:59:b9:c4:f6:14:b5:7d:29:4a:c5:
4e:56:84:0f:3b:a0:15:cb:6b:d2:86:74:50:86:e1:
e0:7a:c7:c1:75:c2:d2:01:7c:48:c4:ac:5f:d3:b9:
84:ca:49:70:57:19:e5:ae:b9:60:b3:a0:c7:64:e8:
f7:23:e2:28:82:e4:8c:c3:ca:9c:fd:c0:75:ee:4c:
c5:5d:40:3c:9d:ac:ee:96:43:fb:b3:f2:91:97:4f:
fa:4b:b2:5c:06:21:87:5e:ca:99:5f:ed:c2:2b:87:
88:5a:4e:20:7c:26:63:b1:9c:ea:55:09:da:38:fc:
b9:be:97:a9:7d:de:7e:c4:3e:46:13:62:60:9c:8b:
96:08:04:fd:25:40:72:14:4f:af:aa:66:fe:51:4e:
51:76:14:5e:e7:65:14:e3:ae:49:b2:19:c8:ae:64:
5e:c9:93:c8:79:70:14:9c:7e:82:92:d9:08:88:25:
15:8e:9e:e8:ff:13:04:8f:d4:b2:54:9a:e7:80:a3:
e6:dd:5e:24:4a:64:6f:dc:d7:f4:45:5f:86:a5:43:
67:83:7a:42:c2:94:4b:96:59:d5:e3:9c:84:21:41:
7e:b6:c6:f4:d2:05:e3:5c:f4:8d:f0:56:71:e6:70:
2a:68:1a:c9:68:73:b4:71:a2:31:f5:c1:36:ad:c0:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D0:CE:29:05:52:E4:E9:65:72:03:5C:34:6A:00:B6:BE:43:F3:4B
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85dd82c5-5f88-45b7-afc5-f84290d7414a/85dd82c5-5f88-45b7-afc5-f84290d7414a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17119
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c6:b9:3a:7e:32:8b:39:b9:04:9b:3a:8f:97:93:e2:7c:34:
f4:b8:25:2a:38:b3:b3:84:4a:df:c7:b8:eb:06:a3:cb:ae:c8:
72:22:00:6e:65:41:04:25:97:32:ca:90:fc:68:a8:d3:0d:64:
b8:b1:43:99:be:12:76:c1:71:61:3b:49:09:72:d0:6b:41:a1:
18:29:39:8c:3b:47:0f:14:c8:3c:c3:11:9c:ee:23:71:f1:15:
d0:56:06:76:fc:22:8a:2a:6d:72:ab:7d:2c:df:c8:0a:33:bf:
50:3c:0c:b8:a9:29:6b:4e:2a:8d:ff:b2:3d:dc:6a:2c:0a:a5:
fd:0a:e2:f7:06:d8:fe:0d:b5:c5:68:22:7b:b3:74:bc:dc:f6:
cc:22:60:be:71:f9:c2:9a:4f:fc:e2:e2:50:d4:70:1c:f9:6e:
20:74:6a:0e:03:e3:df:c6:4a:75:04:43:66:ea:4a:ad:f3:6b:
46:78:96:5e:c1:07:e5:3d:f2:05:be:25:cb:88:f8:26:ae:3e:
dd:52:a0:f8:84:93:38:fb:8c:3d:00:89:58:23:89:d6:3c:c0:
1c:b6:18:37:f3:06:6c:98:31:12:c9:2e:32:a0:73:f4:a9:f3:
9a:a6:85:c3:22:c4:3c:a8:d4:2c:f4:5a:5e:61:0f:9a:62:e8:
b6:f9:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:53 2026 by rpki-client