Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
File: 2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer (raw, json)
Hash identifier: 2Cyc5/gVZ/WRnoucEIkXkMGr6XFCXpIuYQw1OLNwJVc=
Subject key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F43285849C797D02B418F99546CBC9B48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 08 May 2025 00:45:34 +0000
Certificate not after: Wed 11 Aug 2027 00:45:34 +0000
Subordinate resources: AS: 14061
AS: 46652
AS: 62567
AS: 393406
AS: 394362
IP: 24.144.64.0/18
IP: 24.199.64.0/18
IP: 45.55.0.0/16
IP: 64.23.128.0/17
IP: 64.225.0.0/17
IP: 64.226.64.0/18
IP: 64.227.0.0 -- 64.227.191.255
IP: 67.205.128.0/18
IP: 67.207.64.0/19
IP: 68.183.0.0/16
IP: 69.55.48.0/20
IP: 104.131.0.0/16
IP: 104.236.0.0/16
IP: 104.248.0.0/16
IP: 107.170.0.0/16
IP: 129.212.128.0/17
IP: 134.122.0.0/17
IP: 134.199.128.0/17
IP: 134.209.0.0/16
IP: 137.184.0.0/16
IP: 138.68.0.0/16
IP: 138.197.0.0/16
IP: 142.93.0.0/16
IP: 143.110.128.0/17
IP: 143.198.0.0/16
IP: 143.244.128.0/17
IP: 144.126.192.0/18
IP: 146.190.0.0/16
IP: 147.182.128.0/17
IP: 152.42.128.0/17
IP: 157.230.0.0/16
IP: 157.245.0.0/16
IP: 159.65.0.0/16
IP: 159.89.0.0/16
IP: 159.203.0.0/16
IP: 159.223.0.0/16
IP: 161.35.0.0/16
IP: 162.243.0.0/16
IP: 164.90.128.0/17
IP: 164.92.64.0 -- 164.92.255.255
IP: 165.22.0.0/16
IP: 165.227.0.0/16
IP: 165.232.32.0 -- 165.232.191.255
IP: 165.245.128.0/17
IP: 167.71.0.0/16
IP: 167.99.0.0/16
IP: 168.144.0.0/16
IP: 170.64.128.0/17
IP: 174.138.0.0/17
IP: 192.34.56.0/21
IP: 192.81.208.0/20
IP: 192.241.128.0/17
IP: 198.199.64.0/18
IP: 198.211.96.0/19
IP: 198.232.147.0/24
IP: 199.4.223.0/24
IP: 204.48.16.0/20
IP: 206.81.0.0/19
IP: 206.189.0.0/16
IP: 207.154.192.0/18
IP: 208.68.36.0/22
IP: 209.38.0.0/16
IP: 209.97.128.0/18
IP: 2604:a880::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:c7:97:d0:2b:41:8f:99:54:6c:bc:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: May 8 00:45:34 2025 GMT
Not After : Aug 11 00:45:34 2027 GMT
Subject: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:b2:53:c6:53:a5:a0:17:19:00:69:67:bd:
7a:85:25:4b:8a:34:b6:19:47:0c:26:a8:11:bb:26:
49:f7:b3:5f:60:c7:64:44:b1:e6:f2:49:fb:b9:37:
ca:9b:6b:20:a4:ee:ee:10:4f:bd:bf:de:db:9b:30:
e6:8e:fd:c6:b7:9b:45:fa:5d:89:c2:82:1d:2c:8a:
5a:04:da:bc:f1:38:e5:e6:2c:b7:6f:60:d9:ea:b7:
cb:8f:3a:de:46:b6:23:c1:1e:82:8d:2e:36:b1:38:
aa:3f:ef:b5:f1:ed:7f:80:dd:a0:63:2b:89:36:b6:
5d:ca:2b:7f:1c:25:41:c4:f9:3c:dc:95:30:f5:57:
6a:d5:f8:e7:cc:d9:82:28:8e:6a:48:83:a2:98:40:
14:46:ed:56:c7:89:ca:f4:c0:f8:13:cd:ef:b1:de:
24:27:37:75:b0:1d:62:3f:af:66:12:c5:0f:0a:6a:
68:26:11:43:5e:ae:a1:41:c5:03:87:33:8e:20:9c:
af:4f:e6:e0:11:9a:a2:38:1b:61:50:8a:a6:e1:3f:
66:24:6e:f7:51:e4:46:e8:eb:87:56:d7:ff:8c:fe:
4c:d9:2c:bf:73:b0:86:94:96:7e:5f:94:3d:fc:75:
48:4c:5e:3c:bf:13:df:6d:fe:0a:46:f4:1e:33:7a:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.144.64.0/18
24.199.64.0/18
45.55.0.0/16
64.23.128.0/17
64.225.0.0/17
64.226.64.0/18
64.227.0.0-64.227.191.255
67.205.128.0/18
67.207.64.0/19
68.183.0.0/16
69.55.48.0/20
104.131.0.0/16
104.236.0.0/16
104.248.0.0/16
107.170.0.0/16
129.212.128.0/17
134.122.0.0/17
134.199.128.0/17
134.209.0.0/16
137.184.0.0/16
138.68.0.0/16
138.197.0.0/16
142.93.0.0/16
143.110.128.0/17
143.198.0.0/16
143.244.128.0/17
144.126.192.0/18
146.190.0.0/16
147.182.128.0/17
152.42.128.0/17
157.230.0.0/16
157.245.0.0/16
159.65.0.0/16
159.89.0.0/16
159.203.0.0/16
159.223.0.0/16
161.35.0.0/16
162.243.0.0/16
164.90.128.0/17
164.92.64.0-164.92.255.255
165.22.0.0/16
165.227.0.0/16
165.232.32.0-165.232.191.255
165.245.128.0/17
167.71.0.0/16
167.99.0.0/16
168.144.0.0/16
170.64.128.0/17
174.138.0.0/17
192.34.56.0/21
192.81.208.0/20
192.241.128.0/17
198.199.64.0/18
198.211.96.0/19
198.232.147.0/24
199.4.223.0/24
204.48.16.0/20
206.81.0.0/19
206.189.0.0/16
207.154.192.0/18
208.68.36.0/22
209.38.0.0/16
209.97.128.0/18
IPv6:
2604:a880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14061
46652
62567
393406
394362
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:3e:2d:09:42:22:87:1c:5b:23:e3:38:c1:60:8d:f3:e9:09:
f3:2c:14:85:d0:f7:1e:ff:53:0c:8b:9d:8f:8c:bf:f1:d5:d6:
68:cf:bb:67:ea:ef:b3:8e:22:17:ba:6f:95:2a:db:dc:fd:20:
93:65:aa:9b:b6:e7:11:05:8a:39:bd:7b:de:0e:3f:d4:3b:62:
0f:ee:d7:d6:a7:49:94:f0:15:e8:cf:ac:4c:e7:67:64:dc:26:
7c:ff:9a:7a:e4:28:ec:42:b9:7c:4a:2b:2a:74:31:20:fa:fa:
79:8a:33:ff:83:f2:0f:2f:f5:6e:23:50:fb:25:db:00:0b:db:
53:cb:e8:3b:69:10:eb:89:d2:8f:67:27:ef:41:b9:9e:66:2c:
11:48:84:35:61:50:9f:09:68:ab:b1:11:ef:d5:35:ae:08:36:
03:9c:e7:e5:6b:df:97:26:d3:58:3b:61:c5:d0:ad:f5:1b:a7:
3c:cc:46:b1:99:0e:a1:4e:66:23:69:90:6b:89:33:11:3b:f9:
28:a0:1e:e0:c9:dd:8b:50:2d:7d:2c:f7:d8:ae:01:f2:24:02:
d4:3f:1b:35:d7:19:bb:7c:73:50:51:64:d8:17:59:b7:ec:29:
76:c7:28:ec:33:5f:f4:69:6d:bf:22:0d:eb:9e:19:78:56:3a:
8c:d3:cf:22
-----BEGIN CERTIFICATE-----
MIIIozCCB4ugAwIBAgIUAQ0Mn0MoWEnHl9ArQY+ZVGy8m0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MDUwODAwNDUzNFoXDTI3MDgxMTAwNDUzNFowLzEtMCsGA1UEAxMk
MmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUyNjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ+yU8ZTpaAXGQBpZ716hSVLijS2GUcMJqgR
uyZJ97NfYMdkRLHm8kn7uTfKm2sgpO7uEE+9v97bmzDmjv3Gt5tF+l2JwoIdLIpa
BNq88Tjl5iy3b2DZ6rfLjzreRrYjwR6CjS42sTiqP++18e1/gN2gYyuJNrZdyit/
HCVBxPk83JUw9Vdq1fjnzNmCKI5qSIOimEAURu1Wx4nK9MD4E83vsd4kJzd1sB1i
P69mEsUPCmpoJhFDXq6hQcUDhzOOIJyvT+bgEZqiOBthUIqm4T9mJG73UeRG6OuH
Vtf/jP5M2Sy/c7CGlJZ+X5Q9/HVITF48vxPfbf4KRvQeM3r4wQIDAQABo4IFtTCC
BbEwHQYDVR0OBBYEFObh4owsrHnasN406zzyrts3QTMDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y
Yjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiODhkNGU1LTdhZGYtNDJjZS1i
YWU4LTcyNjdmNjJlMjY5OC8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYy
ZTI2OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggGkBggrBgEF
BQcBBwEB/wSCAZMwggGPMIIBfAQCAAEwggF0AwQGGJBAAwQGGMdAAwMALTcDBAdA
F4ADBAdA4QADBAZA4kAwCwMDAEDjAwQGQOOAAwQGQ82AAwQFQ89AAwMARLcDBARF
NzADAwBogwMDAGjsAwMAaPgDAwBrqgMEB4HUgAMEB4Z6AAMEB4bHgAMDAIbRAwMA
ibgDAwCKRAMDAIrFAwMAjl0DBAePboADAwCPxgMEB4/0gAMEBpB+wAMDAJK+AwQH
k7aAAwQHmCqAAwMAneYDAwCd9QMDAJ9BAwMAn1kDAwCfywMDAJ/fAwMAoSMDAwCi
8wMEB6RagDALAwQGpFxAAwMApFwDAwClFgMDAKXjMAwDBAWl6CADBAal6IADBAel
9YADAwCnRwMDAKdjAwMAqJADBAeqQIADBAeuigADBAPAIjgDBATAUdADBAfA8YAD
BAbGx0ADBAXG02ADBADG6JMDBADHBN8DBATMMBADBAXOUQADAwDOvQMEBs+awAME
AtBEJAMDANEmAwQG0WGAMA0EAgACMAcDBQAmBKiAMC0GCCsGAQUFBwEIAQH/BB4w
HKAaMBgCAjbtAgMAtjwCAwD0ZwIDBgC+AgMGBHowVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgT4tCUIihxxb
I+M4wWCN8+kJ8ywUhdD3Hv9TDIudj4y/8dXWaM+7Z+rvs44iF7pvlSrb3P0gk2Wq
m7bnEQWKOb173g4/1DtiD+7X1qdJlPAV6M+sTOdnZNwmfP+aeuQo7EK5fEorKnQx
IPr6eYoz/4PyDy/1biNQ+yXbAAvbU8voO2kQ64nSj2cn70G5nmYsEUiENWFQnwlo
q7ER79U1rgg2A5zn5WvflybTWDthxdCt9RunPMxGsZkOoU5mI2mQa4kzETv5KKAe
4Mndi1AtfSz32K4B8iQC1D8bNdcZu3xzUFFk2BdZt+wpdsco7DNf9GltvyIN654Z
eFY6jNPPIg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:46:17 2025 by rpki-client