Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
File: d370c49e-f70c-46fb-a30f-df2475852cc2.cer (raw, json)
Hash identifier: KvzWGt9b7TTtfqtUcB0H7rfKFbw241XUykAqhYgF8IU=
Subject key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584A9363C2EB4C44C583B87F0040
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 20 Jul 2025 00:45:35 +0000
Certificate not after: Sat 23 Oct 2027 00:45:35 +0000
Subordinate resources: AS: 1239 -- 1240
AS: 1789 -- 1795
AS: 1799 -- 1808
AS: 2014
AS: 3643
AS: 4999
AS: 6174 -- 6177
AS: 7421
AS: 8106 -- 8110
IP: 144.223.0.0 -- 144.224.255.255
IP: 144.226.0.0/16
IP: 144.228.0.0 -- 144.230.255.255
IP: 144.232.0.0/16
IP: 192.157.38.0/24
IP: 198.67.0.0 -- 198.70.255.255
IP: 198.232.8.0/21
IP: 199.0.0.0/14
IP: 199.11.0.0 -- 199.14.255.255
IP: 199.160.0.0/14
IP: 204.94.0.0 -- 204.97.255.255
IP: 204.117.0.0 -- 204.120.255.255
IP: 204.180.0.0/14
IP: 204.204.0.0/14
IP: 204.212.0.0/14
IP: 204.248.0.0/14
IP: 205.160.0.0/14
IP: 205.240.0.0/13
IP: 206.61.0.0/16
IP: 206.104.0.0/14
IP: 206.158.0.0 -- 206.160.255.255
IP: 206.228.0.0/14
IP: 207.12.0.0/14
IP: 207.40.0.0/14
IP: 208.0.0.0 -- 208.35.255.255
IP: 209.120.0.0/17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:93:63:c2:eb:4c:44:c5:83:b8:7f:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jul 20 00:45:35 2025 GMT
Not After : Oct 23 00:45:35 2027 GMT
Subject: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:7a:bb:23:9f:20:88:6d:5b:c8:f2:70:4e:
1f:7d:23:dc:0d:4f:71:f2:64:85:16:e3:0a:68:fd:
d1:37:da:bf:9f:66:0a:ba:0f:5e:47:21:46:c9:2f:
5f:67:88:e4:3e:c1:7c:34:85:ff:27:71:a2:d6:d0:
5a:c3:8a:b2:8b:24:2b:02:d9:d7:98:41:6e:57:8b:
ae:72:76:3c:83:41:53:50:7e:1e:da:70:f1:14:c1:
3f:91:fe:5a:9b:d8:da:81:f4:08:04:fc:11:d8:eb:
ed:f3:c0:e9:84:9c:de:71:f9:64:17:ff:8e:9a:b1:
ca:b1:07:cd:e3:e6:01:34:78:b3:2d:38:19:f3:74:
8a:0b:c5:ce:a5:6e:e3:f0:30:f7:98:1c:f4:64:35:
9a:d5:91:2d:01:9f:0b:7d:30:4d:3e:78:7e:92:87:
58:11:09:f4:38:03:8d:29:ba:e6:04:ab:34:d8:46:
6f:99:5b:29:a7:7d:3b:d3:13:71:b3:78:25:54:11:
3a:fa:12:18:66:77:98:cd:4f:8a:e5:06:0c:ac:85:
85:e3:54:75:01:f5:2c:c1:b1:6d:31:29:0d:e1:68:
00:ea:26:8b:ce:6f:93:a4:8a:af:e4:6a:d1:19:4d:
b4:f6:41:ab:0f:c3:8f:eb:42:70:7c:13:90:2a:ef:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
144.223.0.0-144.224.255.255
144.226.0.0/16
144.228.0.0-144.230.255.255
144.232.0.0/16
192.157.38.0/24
198.67.0.0-198.70.255.255
198.232.8.0/21
199.0.0.0/14
199.11.0.0-199.14.255.255
199.160.0.0/14
204.94.0.0-204.97.255.255
204.117.0.0-204.120.255.255
204.180.0.0/14
204.204.0.0/14
204.212.0.0/14
204.248.0.0/14
205.160.0.0/14
205.240.0.0/13
206.61.0.0/16
206.104.0.0/14
206.158.0.0-206.160.255.255
206.228.0.0/14
207.12.0.0/14
207.40.0.0/14
208.0.0.0-208.35.255.255
209.120.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1239-1240
1789-1795
1799-1808
2014
3643
4999
6174-6177
7421
8106-8110
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:14:aa:66:05:85:12:49:f7:18:74:8a:15:af:cc:05:72:a8:
9b:7e:ca:6c:e2:7a:ee:95:24:91:92:ff:b7:23:63:49:ee:fc:
2d:b1:0c:2d:47:65:0d:3a:9e:64:ad:07:19:d7:5b:14:63:09:
4c:07:0a:d2:5a:ec:8b:e0:38:c1:9b:77:f3:5e:80:81:5a:5f:
a8:66:d7:e9:00:16:de:ff:a9:51:f6:30:16:cd:84:94:8c:67:
aa:f1:4e:35:58:1f:a9:79:12:c0:d0:b7:72:ed:44:45:e0:90:
46:84:57:dc:b9:96:a5:65:e0:df:17:20:9a:42:62:11:d7:ce:
8d:24:ba:2a:c2:90:bd:31:c6:1a:ab:6d:d1:b6:b5:b6:98:64:
61:62:98:8f:5d:13:6e:d1:bc:4d:06:df:35:a3:e3:a2:10:55:
f6:57:b8:e1:65:86:14:cb:ce:52:79:10:9a:3a:eb:e1:93:98:
c6:95:77:ff:57:49:a0:f1:96:de:82:4a:6d:04:2f:00:e1:ef:
07:30:f8:0c:82:4d:b6:c3:4f:b9:d3:3b:eb:9a:fd:85:e8:b7:
87:e6:a2:8d:e0:b9:46:d9:d4:c4:08:b5:f6:74:c1:8a:76:60:
86:09:37:ec:28:92:9c:f9:5a:79:fa:a3:a4:82:d4:3f:a6:af:
a1:f4:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:37 2025 by rpki-client