Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
File: 28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer (raw, json)
Hash identifier: 3DpGiNaHzx2ZrCTxChoeKRp8lapynKsH4PTZQQlv6tM=
Subject key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584A962E75457FEEF50C22F78B00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 21 Jul 2025 00:45:37 +0000
Certificate not after: Sun 24 Oct 2027 00:45:37 +0000
Subordinate resources: AS: 4925
AS: 5797
AS: 6318
AS: 10390
AS: 11121
AS: 11273
AS: 12172
AS: 13542
AS: 13808
AS: 17405
AS: 18509
AS: 19363
AS: 21530
AS: 22142
AS: 22983
AS: 26144
AS: 26789
AS: 27160
AS: 29712
AS: 30037
AS: 32813
AS: 39992
AS: 40466
AS: 46219
AS: 55035
AS: 55085
AS: 398144
IP: 66.55.96.0/20
IP: 69.51.32.0/19
IP: 166.73.0.0/16
IP: 167.16.0.0/16
IP: 170.186.0.0/16
IP: 192.131.45.0 -- 192.131.55.255
IP: 192.131.64.0 -- 192.131.76.255
IP: 192.150.245.0/24
IP: 198.62.137.0 -- 198.62.138.255
IP: 198.137.32.0/19
IP: 198.167.0.0/24
IP: 198.184.0.0/21
IP: 198.185.237.0/24
IP: 198.202.177.0/24
IP: 198.202.182.0/24
IP: 198.246.154.0/24
IP: 198.246.217.0 -- 198.246.218.255
IP: 199.47.152.0/21
IP: 199.187.0.0/21
IP: 204.68.215.0/24
IP: 204.124.84.0 -- 204.124.86.255
IP: 204.126.72.0/24
IP: 204.128.188.0/24
IP: 204.194.120.0 -- 204.194.143.255
IP: 204.238.181.0/24
IP: 205.167.140.0/23
IP: 206.201.48.0/20
IP: 208.66.20.0/22
IP: 208.67.132.0/22
IP: 208.68.228.0/22
IP: 208.72.248.0/21
IP: 208.74.12.0/24
IP: 208.93.24.0/21
IP: 216.66.208.0/20
IP: 216.151.33.0/24
IP: 2604:5f40::/32
IP: 2620:1d:4000::/48
IP: 2620:88::/48
IP: 2620:a6::/48
IP: 2620:10f:4000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 Aug 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:96:2e:75:45:7f:ee:f5:0c:22:f7:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jul 21 00:45:37 2025 GMT
Not After : Oct 24 00:45:37 2027 GMT
Subject: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:13:f6:b3:77:5b:e4:05:a7:90:52:34:28:
d3:f8:e5:07:3b:c6:ca:a1:d1:dc:4a:61:75:4f:a4:
9d:1c:15:10:3e:15:4e:e0:e3:7b:13:d6:78:56:25:
04:bd:8b:85:ad:36:89:fe:fc:1f:1f:12:c7:48:d1:
87:85:30:fd:cb:cd:74:ea:99:bd:4a:aa:f9:ea:6e:
d1:3c:c0:76:6e:8e:8a:0d:1c:c1:ba:ed:a0:20:24:
05:4d:8e:74:39:ee:91:5b:1f:fb:10:6e:22:9f:88:
91:fe:12:fa:46:b9:25:5b:00:0e:a7:20:bc:27:de:
40:97:07:1a:46:07:ea:6a:62:d0:20:71:a4:9e:d8:
25:0a:b9:44:f4:b4:cf:e4:29:92:1d:25:a6:ff:c7:
4f:44:4e:50:67:16:a1:7a:88:82:c2:8e:c3:a5:13:
92:66:0d:76:83:01:12:fc:e3:a2:e1:9c:f9:9e:ab:
a8:cc:b8:bd:90:50:32:5e:57:d3:c7:bb:4d:17:fa:
ba:64:aa:a8:de:d3:01:16:2c:13:bb:d3:3b:c6:e6:
9d:cb:66:e3:5d:63:ee:43:f9:dc:bd:5f:68:e2:ad:
cf:71:c3:51:bf:05:c3:6b:ad:d3:bb:f7:77:a8:d0:
42:3e:17:d8:98:98:28:21:fa:5e:51:28:d1:1b:0a:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.96.0/20
69.51.32.0/19
166.73.0.0/16
167.16.0.0/16
170.186.0.0/16
192.131.45.0-192.131.55.255
192.131.64.0-192.131.76.255
192.150.245.0/24
198.62.137.0-198.62.138.255
198.137.32.0/19
198.167.0.0/24
198.184.0.0/21
198.185.237.0/24
198.202.177.0/24
198.202.182.0/24
198.246.154.0/24
198.246.217.0-198.246.218.255
199.47.152.0/21
199.187.0.0/21
204.68.215.0/24
204.124.84.0-204.124.86.255
204.126.72.0/24
204.128.188.0/24
204.194.120.0-204.194.143.255
204.238.181.0/24
205.167.140.0/23
206.201.48.0/20
208.66.20.0/22
208.67.132.0/22
208.68.228.0/22
208.72.248.0/21
208.74.12.0/24
208.93.24.0/21
216.66.208.0/20
216.151.33.0/24
IPv6:
2604:5f40::/32
2620:1d:4000::/48
2620:88::/48
2620:a6::/48
2620:10f:4000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4925
5797
6318
10390
11121
11273
12172
13542
13808
17405
18509
19363
21530
22142
22983
26144
26789
27160
29712
30037
32813
39992
40466
46219
55035
55085
398144
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a8:04:d2:d3:ec:16:e6:97:c5:db:48:f8:6f:90:ae:4f:df:
ce:9b:3c:4b:77:47:e6:45:a1:5e:ed:74:5e:e1:75:62:f3:77:
23:e6:63:b7:2a:47:4a:00:8b:c7:ac:fd:4b:4d:8d:5a:90:7b:
c4:a0:e8:a6:75:44:b3:ea:4b:2c:2f:a3:19:cb:6b:f0:4a:8f:
47:94:87:e4:5c:13:f9:a0:a0:24:18:04:f0:1e:7b:b5:8f:09:
7a:4c:cd:68:7e:9d:a0:b8:00:6c:fc:6b:c7:ba:f4:28:1a:e1:
58:6b:3b:5f:ea:d7:ec:a7:e9:46:c6:9e:4d:dd:da:e0:e0:3e:
8f:1e:25:f7:af:23:56:f5:8a:64:84:4f:d5:14:b6:3f:4c:30:
da:e5:0e:78:a7:94:a9:1d:ed:5e:3b:cd:05:c8:10:4a:58:87:
1e:32:99:2c:cc:9a:aa:a2:0b:8e:93:5b:7a:1b:1d:83:53:3c:
da:99:0b:62:34:2a:b3:96:e8:6f:30:c9:19:f8:ec:cf:3a:b9:
48:b1:dd:11:c3:10:e8:69:a4:4f:5d:d4:ce:28:9f:30:4b:27:
ee:fb:73:81:9a:f0:cf:7e:a5:a7:48:7c:6d:31:3f:a1:87:74:
fa:33:43:bb:b8:55:57:7a:0f:f7:df:61:00:9a:d2:13:f0:dc:
55:f0:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:17 2025 by rpki-client