Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
File: 4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer (raw, json)
Hash identifier: NQopHavx7iTCD0pdyQE4dkS4tnl93GU/SP6WU7x+yDw=
Subject key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584F3FBA8994244FF6CBCB740740
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 21 Sep 2026 13:27:14 +0000
Certificate not after: Wed 02 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 163
AS: 547
AS: 1747
AS: 1786
AS: 1956
AS: 1997
AS: 2538
AS: 3082
AS: 3383
IP: 9.0.0.0 -- 9.9.8.255
IP: 9.9.10.0 -- 9.127.255.255
IP: 9.147.0.0/16
IP: 9.150.0.0/16
IP: 9.172.0.0/16
IP: 9.180.0.0 -- 9.184.255.255
IP: 9.186.0.0/16
IP: 9.189.0.0/16
IP: 9.194.0.0/16
IP: 9.197.0.0/16
IP: 9.201.0.0 -- 9.203.255.255
IP: 9.207.0.0 -- 9.209.255.255
IP: 9.213.0.0 -- 9.219.255.255
IP: 9.221.0.0 -- 9.222.255.255
IP: 9.224.0.0/14
IP: 9.230.0.0/16
IP: 9.238.0.0/15
IP: 9.242.0.0/15
IP: 9.252.0.0/14
IP: 129.33.241.0 -- 129.33.242.255
IP: 129.34.0.0/16
IP: 129.41.0.0 -- 129.41.35.255
IP: 129.41.42.0/24
IP: 129.41.44.0/24
IP: 129.41.46.0/23
IP: 129.41.53.0 -- 129.41.61.255
IP: 129.41.64.0/21
IP: 129.41.84.0/22
IP: 129.41.91.0 -- 129.41.93.255
IP: 129.41.95.0 -- 129.41.111.255
IP: 129.41.160.0 -- 129.41.165.255
IP: 129.41.177.0 -- 129.41.187.255
IP: 129.41.190.0/23
IP: 129.41.210.0 -- 129.41.215.255
IP: 129.41.217.0 -- 129.41.219.255
IP: 129.41.224.0/19
IP: 137.42.0.0/16
IP: 146.84.128.0/17
IP: 149.131.152.0 -- 149.131.255.255
IP: 170.224.128.0/19
IP: 170.224.192.0/18
IP: 170.225.32.0 -- 170.225.95.255
IP: 170.225.112.0/20
IP: 170.225.144.0 -- 170.225.226.255
IP: 170.225.229.0 -- 170.225.231.255
IP: 170.225.234.0 -- 170.225.241.255
IP: 170.225.243.0 -- 170.225.251.255
IP: 170.226.0.0 -- 170.226.57.255
IP: 170.226.60.0/22
IP: 192.35.231.0 -- 192.35.232.255
IP: 192.35.234.0 -- 192.35.239.255
IP: 192.41.137.0/24
IP: 192.41.205.0/24
IP: 192.83.206.0/24
IP: 192.86.29.0 -- 192.86.65.255
IP: 192.91.192.0 -- 192.91.197.255
IP: 192.124.113.0/24
IP: 192.147.13.0/24
IP: 192.148.0.0 -- 192.148.32.255
IP: 192.150.122.0/24
IP: 192.156.133.0/24
IP: 192.157.175.0/24
IP: 192.195.29.0/24
IP: 192.207.88.0/24
IP: 192.229.32.0/19
IP: 192.231.8.0/24
IP: 192.231.10.0/24
IP: 192.231.12.0 -- 192.231.14.255
IP: 198.17.57.0/24
IP: 198.17.202.0 -- 198.17.204.255
IP: 198.49.195.0 -- 198.49.196.255
IP: 198.151.0.0/21
IP: 198.180.207.0/24
IP: 198.182.248.0/24
IP: 198.187.219.0/24
IP: 198.206.218.0/24
IP: 198.232.134.0/24
IP: 199.103.69.0 -- 199.103.72.255
IP: 199.164.149.0/24
IP: 199.181.149.0/24
IP: 199.201.254.0/24
IP: 199.242.142.0/24
IP: 204.79.144.0/23
IP: 204.79.175.0/24
IP: 204.79.184.0/24
IP: 204.107.195.0/24
IP: 204.231.227.0/24
IP: 204.231.239.0/24
IP: 205.210.232.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3f:ba:89:94:24:4f:f6:cb:cb:74:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 21 13:27:14 2026 GMT
Not After : Aug 2 12:45:17 2028 GMT
Subject: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:01:eb:bf:b6:65:5a:e0:90:d2:fb:cc:88:
15:ac:42:62:c1:38:c5:0a:53:2b:98:ff:80:77:b4:
87:b4:d2:62:80:3d:51:d8:79:27:33:61:59:d1:36:
d6:a8:eb:90:38:c0:51:93:2d:74:90:a5:81:d1:fd:
0b:ea:38:77:19:2c:5f:3a:27:2e:a7:49:08:ac:f7:
bf:91:ed:9f:2a:71:ba:4d:8d:ae:b0:85:b5:66:19:
f0:e3:42:38:8a:b0:05:e7:66:95:0d:3f:5b:5f:d2:
b6:5c:96:11:fc:80:9e:7b:0f:d4:2e:d1:8e:30:87:
f4:45:55:4f:5c:3f:0d:0d:1e:23:37:0d:94:71:ed:
cd:a5:6d:bc:8c:0d:96:90:fa:48:3d:55:ba:23:3e:
f4:80:41:0d:e1:3d:b6:cd:03:6d:c9:df:53:a1:5c:
2d:f6:2d:fc:4f:45:38:73:89:d8:3a:de:04:37:5e:
12:d1:c3:63:dd:b9:31:89:5f:93:25:37:43:da:1d:
74:40:9b:dd:b1:82:a6:27:98:38:cb:50:58:f4:1e:
1c:ba:d2:55:c3:b1:16:f9:8d:ca:f7:a4:9f:be:d8:
84:8d:8b:4a:82:1c:c5:39:70:87:92:84:f0:eb:a5:
e8:e9:8a:e7:2b:57:cc:b5:e3:1c:aa:98:e2:3d:69:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
9.0.0.0-9.9.8.255
9.9.10.0-9.127.255.255
9.147.0.0/16
9.150.0.0/16
9.172.0.0/16
9.180.0.0-9.184.255.255
9.186.0.0/16
9.189.0.0/16
9.194.0.0/16
9.197.0.0/16
9.201.0.0-9.203.255.255
9.207.0.0-9.209.255.255
9.213.0.0-9.219.255.255
9.221.0.0-9.222.255.255
9.224.0.0/14
9.230.0.0/16
9.238.0.0/15
9.242.0.0/15
9.252.0.0/14
129.33.241.0-129.33.242.255
129.34.0.0/16
129.41.0.0-129.41.35.255
129.41.42.0/24
129.41.44.0/24
129.41.46.0/23
129.41.53.0-129.41.61.255
129.41.64.0/21
129.41.84.0/22
129.41.91.0-129.41.93.255
129.41.95.0-129.41.111.255
129.41.160.0-129.41.165.255
129.41.177.0-129.41.187.255
129.41.190.0/23
129.41.210.0-129.41.215.255
129.41.217.0-129.41.219.255
129.41.224.0/19
137.42.0.0/16
146.84.128.0/17
149.131.152.0-149.131.255.255
170.224.128.0/19
170.224.192.0/18
170.225.32.0-170.225.95.255
170.225.112.0/20
170.225.144.0-170.225.226.255
170.225.229.0-170.225.231.255
170.225.234.0-170.225.241.255
170.225.243.0-170.225.251.255
170.226.0.0-170.226.57.255
170.226.60.0/22
192.35.231.0-192.35.232.255
192.35.234.0-192.35.239.255
192.41.137.0/24
192.41.205.0/24
192.83.206.0/24
192.86.29.0-192.86.65.255
192.91.192.0-192.91.197.255
192.124.113.0/24
192.147.13.0/24
192.148.0.0-192.148.32.255
192.150.122.0/24
192.156.133.0/24
192.157.175.0/24
192.195.29.0/24
192.207.88.0/24
192.229.32.0/19
192.231.8.0/24
192.231.10.0/24
192.231.12.0-192.231.14.255
198.17.57.0/24
198.17.202.0-198.17.204.255
198.49.195.0-198.49.196.255
198.151.0.0/21
198.180.207.0/24
198.182.248.0/24
198.187.219.0/24
198.206.218.0/24
198.232.134.0/24
199.103.69.0-199.103.72.255
199.164.149.0/24
199.181.149.0/24
199.201.254.0/24
199.242.142.0/24
204.79.144.0/23
204.79.175.0/24
204.79.184.0/24
204.107.195.0/24
204.231.227.0/24
204.231.239.0/24
205.210.232.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
163
547
1747
1786
1956
1997
2538
3082
3383
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:9f:ef:a4:85:76:c3:6f:a3:d5:e6:f2:ea:7f:42:74:b2:32:
03:35:07:39:a6:1b:56:89:d6:24:d1:80:cc:59:a9:91:53:a8:
bf:3b:3a:d3:30:9c:be:ba:04:4c:7a:3c:b7:fb:47:45:c5:c6:
f7:a5:43:b0:0d:5c:ab:06:0f:a0:65:21:a0:ba:95:e9:55:a4:
a0:82:0b:da:cc:93:ac:a7:22:d1:11:b0:83:ae:dc:ef:3e:ac:
6e:50:96:84:28:85:da:fa:83:b5:f4:e1:19:51:de:f9:2b:b4:
1d:80:40:79:c2:0e:68:0b:63:5c:7b:12:4f:dc:4a:8b:99:9a:
35:27:3a:75:b5:c5:88:7f:ef:ac:c1:63:c7:3e:3d:cd:15:ac:
33:5a:f0:56:4b:f2:af:e0:ae:b5:43:5e:d2:c7:eb:8d:00:c4:
cd:0d:65:62:32:93:5b:a7:78:4d:df:f7:ad:a1:6b:6d:61:b9:
ba:00:55:e4:5b:27:eb:a5:0f:6f:87:b4:3d:e2:04:9c:9f:4f:
d8:c4:59:a1:eb:25:92:30:3b:ef:34:1c:a8:e2:ed:87:c8:ff:
7a:a6:0f:2e:e4:6e:8c:22:f4:cd:58:04:28:c1:b5:b3:a6:5a:
0b:c0:eb:48:5f:af:5a:88:74:78:7b:00:cf:11:6b:60:b7:de:
4f:66:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:10:23 2026 by rpki-client