
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer
File: 2085ad50-174f-4646-80aa-6de9c61a11a4.cer (raw, json)
Hash identifier: bpwfVyQqXEnktiAsbsU4js6i1vAO8D+WVvb6OhedfPM=
Subject key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584D40C29682590EADEED0075700
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 22 Mar 2026 12:45:22 +0000
Certificate not after: Sat 24 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 208188
IP: 23.142.208.0/24
IP: 104.167.195.0/24
IP: 158.51.106.0/24
IP: 2602:801:8000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:c2:96:82:59:0e:ad:ee:d0:07:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Mar 22 12:45:22 2026 GMT
Not After : Jun 24 12:45:22 2028 GMT
Subject: CN=2085ad50-174f-4646-80aa-6de9c61a11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:db:b9:d0:9a:d9:f6:86:cd:18:f5:fe:67:
e4:ae:02:be:99:82:e8:4e:b9:96:8f:74:44:f2:77:
a2:03:27:52:eb:8b:82:bc:5e:f4:c9:a8:37:0c:71:
61:a0:b4:1e:a5:30:a1:df:dc:68:70:60:96:d0:c7:
93:db:14:06:af:24:86:b4:95:04:7f:fc:1a:bb:7f:
98:e0:2b:37:6c:f6:35:12:82:b8:a0:42:ad:8e:10:
cf:9a:dc:6b:95:8f:0d:0a:aa:22:e9:ac:1f:77:be:
3b:c8:24:9b:e9:8d:14:1a:4b:5a:de:10:5d:9f:b1:
51:07:26:81:96:88:da:5b:db:2c:ed:4a:63:ff:35:
63:d6:9f:9d:e8:78:90:05:90:98:b4:15:3a:5a:6c:
92:52:69:f1:e3:5d:31:ba:34:58:5b:7b:e0:73:9e:
ab:86:78:cb:c7:eb:0e:44:bc:c5:8f:f9:06:0b:e4:
69:ab:d6:ae:a2:b4:38:0c:08:f0:0d:16:d4:4b:e0:
a9:c6:d6:73:63:78:f1:9e:8a:fd:e2:09:43:77:28:
07:c7:53:fe:91:f1:47:df:25:39:2a:30:b7:cf:1e:
2c:b4:11:4f:2c:2a:c4:aa:0a:2f:73:39:52:7d:76:
c5:ab:6c:5f:c3:24:5f:79:f4:83:2c:6e:c6:b6:c9:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.208.0/24
104.167.195.0/24
158.51.106.0/24
IPv6:
2602:801:8000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208188
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:97:8e:11:9c:b1:df:e4:ca:b2:de:f5:e7:6b:be:d3:38:30:
97:b1:8b:90:99:0b:e8:09:88:5f:da:60:7f:6f:56:e4:75:8e:
43:a5:08:13:29:3d:36:84:17:94:ab:20:40:f8:f1:1f:a0:42:
82:cd:39:e0:cc:03:91:a8:28:22:de:29:1c:72:d4:c9:94:3f:
1f:f5:db:f8:59:5c:e3:8e:22:96:5f:94:de:d2:b7:0d:37:af:
a3:74:2a:47:c6:76:48:6d:94:83:5e:b7:a7:55:0f:29:73:34:
32:e0:86:5d:d1:fe:a7:12:98:fc:0a:6e:06:fd:98:e2:ca:99:
ab:75:8e:8b:42:36:26:6e:9b:9a:84:b2:6a:01:9c:e3:15:90:
e5:3e:f5:07:76:f2:8e:97:8b:71:d4:cb:9b:17:0b:25:44:82:
eb:98:ee:20:72:bb:51:3f:92:d8:30:c9:96:0f:df:3a:90:e4:
c2:3f:25:bc:94:ee:95:6a:07:54:26:ac:39:84:6e:2a:10:4b:
12:e3:99:04:92:a0:af:7c:6e:6f:1f:5a:3f:d1:91:4d:48:93:
8d:09:91:cd:86:92:d5:72:44:b7:be:cd:d5:52:78:10:ad:12:
39:8f:1d:d5:4f:26:89:82:68:16:30:d9:ad:9a:5d:5a:df:01:
2e:5b:b8:61
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWE1AwpaCWQ6t7tAHVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MDMyMjEyNDUyMloXDTI4MDYyNDEyNDUyMlowLzEtMCsGA1UEAxMk
MjA4NWFkNTAtMTc0Zi00NjQ2LTgwYWEtNmRlOWM2MWExMWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O7budCa2faGzRj1/mfkrgK+mYLoTrmWj3RE
8neiAydS64uCvF70yag3DHFhoLQepTCh39xocGCW0MeT2xQGrySGtJUEf/wau3+Y
4Cs3bPY1EoK4oEKtjhDPmtxrlY8NCqoi6awfd747yCSb6Y0UGkta3hBdn7FRByaB
lojaW9ss7Upj/zVj1p+d6HiQBZCYtBU6WmySUmnx410xujRYW3vgc56rhnjLx+sO
RLzFj/kGC+Rpq9auorQ4DAjwDRbUS+CpxtZzY3jxnor94glDdygHx1P+kfFH3yU5
KjC3zx4stBFPLCrEqgovczlSfXbFq2xfwyRfefSDLG7Gtsmb+wIDAQABo4IEODCC
BDQwHQYDVR0OBBYEFDeGGWA7YdOi80PaQg+zMi6OKS9MMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y
MDg1YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5YzYxYTExYTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwODVhZDUwLTE3NGYtNDY0Ni04
MGFhLTZkZTljNjFhMTFhNC8yMDg1YWQ1MC0xNzRmLTQ2NDYtODBhYS02ZGU5YzYx
YTExYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPAYIKwYBBQUH
AQcBAf8ELTArMBgEAgABMBIDBAAXjtADBABop8MDBACeM2owDwQCAAIwCQMHBCYC
CAGAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLTwwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALZeOEZyx
3+TKst7152u+0zgwl7GLkJkL6AmIX9pgf29W5HWOQ6UIEyk9NoQXlKsgQPjxH6BC
gs054MwDkagoIt4pHHLUyZQ/H/Xb+Flc444ill+U3tK3DTevo3QqR8Z2SG2Ug163
p1UPKXM0MuCGXdH+pxKY/ApuBv2Y4sqZq3WOi0I2Jm6bmoSyagGc4xWQ5T71B3by
jpeLcdTLmxcLJUSC65juIHK7UT+S2DDJlg/fOpDkwj8lvJTulWoHVCasOYRuKhBL
EuOZBJKgr3xubx9aP9GRTUiTjQmRzYaS1XJEt77N1VJ4EK0SOY8d1U8miYJoFjDZ
rZpdWt8BLlu4YQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:56 2026 by rpki-client