Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer
File: 5c9a7da0-3974-48c2-a2c5-fca1ec32848a.cer (raw, json)
Hash identifier: AI4M8wScjynGgpHyj/8lqsrFYHrq51HCOvWxMf85Bqk=
Subject key identifier: CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial: 010D0C9F4328584BB1A58D81310779FEB54AAD00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 30 Oct 2025 13:39:21 +0000
Certificate not after: Thu 28 Jan 2027 19:44:10 +0000
Subordinate resources: AS: 2044
AS: 6423
IP: 64.255.232.0/21
IP: 68.64.48.0/21
IP: 69.30.0.0/18
IP: 69.30.80.0/22
IP: 69.30.88.0/24
IP: 69.30.90.0/24
IP: 69.30.94.0 -- 69.30.127.255
IP: 69.46.32.0/20
IP: 74.209.160.0 -- 74.209.162.255
IP: 74.209.165.0 -- 74.209.169.255
IP: 74.209.176.0/21
IP: 198.145.0.0/19
IP: 198.145.35.0/24
IP: 198.145.37.0 -- 198.145.38.255
IP: 198.145.40.0/23
IP: 198.145.46.0/23
IP: 198.145.64.0/23
IP: 198.145.116.0/23
IP: 198.145.120.0/24
IP: 198.145.176.0 -- 198.145.223.255
IP: 198.145.240.0/20
IP: 209.20.152.0/23
IP: 209.162.192.0 -- 209.162.202.255
IP: 209.162.204.0 -- 209.162.223.255
IP: 2001:19d0::/32
IP: 2605:2400::/32
IP: 2607:f6a8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b1:a5:8d:81:31:07:79:fe:b5:4a:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Validity
Not Before: Oct 30 13:39:21 2025 GMT
Not After : Jan 28 19:44:10 2027 GMT
Subject: CN=5c9a7da0-3974-48c2-a2c5-fca1ec32848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:80:c2:1f:fb:81:03:44:13:c7:7a:3f:55:
da:71:4e:c0:67:43:ef:10:cd:eb:bf:1e:e2:c1:ff:
d0:a8:58:3c:2b:eb:63:c1:ac:75:e4:f5:46:60:9e:
37:5e:f5:a9:20:0a:5b:c5:d9:28:b2:29:c8:1b:c0:
ca:25:ba:0a:88:a5:2c:6d:d9:aa:db:d9:dd:d2:36:
81:c4:dc:a4:09:cf:1b:ee:70:43:f3:aa:ec:d4:c4:
bb:29:e4:d7:a9:3d:ec:70:48:92:61:db:40:db:be:
6b:fa:9a:de:12:87:ab:c5:9b:45:0f:b2:19:ba:43:
e9:11:d9:60:ce:92:14:51:84:e7:33:14:ff:f3:6c:
44:04:b3:57:00:10:df:3c:b0:55:60:33:b5:50:1a:
1b:68:6e:20:a7:bf:f9:b4:37:b9:b1:97:2d:06:56:
a4:a0:dc:32:5c:b5:9f:2f:00:73:5c:1b:ce:96:fc:
65:41:75:91:35:92:f4:d5:7c:76:92:47:62:03:7e:
34:e2:b5:47:58:0a:f3:dc:3f:99:1c:ef:17:62:9e:
ea:09:3a:63:6a:b6:eb:4e:07:a6:72:b1:36:39:b6:
9a:da:f7:cb:9b:bf:1b:20:63:c1:d2:8d:bd:7b:1a:
ff:5b:2b:bf:c4:dd:94:64:c1:01:36:7c:1a:4b:c4:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:E8:D0:CE:C6:C2:B5:5E:A4:23:E7:09:CE:01:8B:39:F2:5F:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c9a7da0-3974-48c2-a2c5-fca1ec32848a/5c9a7da0-3974-48c2-a2c5-fca1ec32848a.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
X509v3 Authority Key Identifier:
keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
sbgp-ipAddrBlock: critical
IPv4:
64.255.232.0/21
68.64.48.0/21
69.30.0.0/18
69.30.80.0/22
69.30.88.0/24
69.30.90.0/24
69.30.94.0-69.30.127.255
69.46.32.0/20
74.209.160.0-74.209.162.255
74.209.165.0-74.209.169.255
74.209.176.0/21
198.145.0.0/19
198.145.35.0/24
198.145.37.0-198.145.38.255
198.145.40.0/23
198.145.46.0/23
198.145.64.0/23
198.145.116.0/23
198.145.120.0/24
198.145.176.0-198.145.223.255
198.145.240.0/20
209.20.152.0/23
209.162.192.0-209.162.202.255
209.162.204.0-209.162.223.255
IPv6:
2001:19d0::/32
2605:2400::/32
2607:f6a8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2044
6423
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:38:13:89:2a:d9:38:16:9f:f7:92:82:35:db:63:a9:df:a8:
70:32:28:02:b1:4f:60:af:8b:f9:22:d7:14:61:e2:e7:4c:18:
da:da:b3:ee:8b:a5:9c:68:ab:dd:a5:b9:a6:ea:57:06:4d:93:
f1:10:5f:9d:bb:4a:bc:27:9f:ec:54:7c:d3:7b:93:10:7b:65:
22:c4:f3:56:3a:c7:bb:11:5d:31:a9:3b:fb:8d:0f:81:8e:f0:
55:e0:9b:a2:d2:db:54:c3:bf:8a:90:d9:38:f9:4f:f5:02:ef:
e0:71:a6:e7:b2:31:fd:05:69:b2:4d:33:50:00:b0:af:58:f5:
94:fa:e7:99:cc:cf:5a:81:4c:95:29:52:c1:e7:65:a8:d6:30:
1c:5d:a6:08:ed:c4:8b:c8:c5:01:21:0f:eb:a8:02:c4:a6:11:
f5:46:0c:c2:7e:8f:9f:0f:bb:48:c6:b1:ee:51:99:e7:b5:b3:
fc:5d:93:f6:f0:d3:fa:6f:11:44:05:89:f5:1c:df:dc:ec:6b:
a6:77:3c:dd:7e:db:4a:fe:45:7d:26:5c:98:2a:ba:90:dd:d0:
d2:93:0e:07:b7:3e:be:72:e8:ee:cd:64:2e:c6:a2:ad:e2:d7:
c9:53:e5:56:92:f6:60:f5:e6:d4:58:2f:ac:ad:c9:28:a4:a0:
47:6b:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:20:01 2025 by rpki-client