Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
File: b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer (raw, json)
Hash identifier: FhVEytFd8Noa8J8qu3NPOfPGtxdN9F1KcIAopqdIdyM=
Subject key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584A2A99BB0FEFBE84E69731BC40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 12 Jun 2025 11:54:28 +0000
Certificate not after: Sun 29 Aug 2027 00:45:37 +0000
Subordinate resources: AS: 55286
IP: 23.227.128.0/19
IP: 23.229.0.0/17
IP: 23.236.128.0/17
IP: 67.220.176.0/20
IP: 69.4.80.0/20
IP: 69.58.0.0/20
IP: 107.151.0.0/19
IP: 152.232.0.0/16
IP: 192.119.8.0/21
IP: 192.157.48.0/20
IP: 192.186.128.0/18
IP: 192.198.96.0/19
IP: 192.241.64.0/18
IP: 198.20.160.0/19
IP: 198.147.24.0/21
IP: 198.154.80.0/20
IP: 198.245.64.0/20
IP: 209.127.0.0 -- 209.127.48.255
IP: 209.127.50.0 -- 209.127.62.255
IP: 209.127.72.0/21
IP: 209.127.96.0/22
IP: 209.127.104.0 -- 209.127.127.255
IP: 209.127.136.0 -- 209.127.138.255
IP: 209.127.142.0 -- 209.127.151.255
IP: 209.127.176.0 -- 209.127.189.255
IP: 209.127.191.0 -- 209.127.192.255
IP: 209.127.194.0/24
IP: 209.127.196.0/24
IP: 209.127.198.0/24
IP: 209.127.223.0/24
IP: 209.127.228.0/23
IP: 209.127.242.0 -- 209.127.245.255
IP: 209.127.252.0/23
IP: 209.205.192.0/19
IP: 2607:4300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Jun 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:2a:99:bb:0f:ef:be:84:e6:97:31:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Jun 12 11:54:28 2025 GMT
Not After : Aug 29 00:45:37 2027 GMT
Subject: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:cc:a4:59:00:d5:ea:a9:b4:1c:f0:35:6e:
b3:9e:44:43:1f:8c:aa:13:d2:7a:d1:1e:65:c7:a5:
6a:bb:4e:bf:25:9a:45:fa:b3:f3:72:cf:80:12:3c:
49:7d:e0:9c:99:a9:b5:b5:f8:29:d3:a7:91:ab:17:
cd:f7:3e:ae:36:3c:8c:64:cd:59:62:5e:0c:cf:bb:
db:9e:59:09:40:a8:7d:c1:af:39:2f:14:4d:6c:6c:
d8:3e:c7:93:f5:e7:3a:7e:7a:a6:be:a8:32:7c:bd:
3b:ab:28:f7:4b:80:30:3a:03:7f:75:64:3b:b3:8a:
bf:9c:dc:bb:9d:c3:2b:f4:57:59:51:0f:34:24:ae:
37:d9:c7:03:1a:28:23:6a:84:c4:6d:17:7f:73:2c:
dc:7f:d8:08:a9:18:94:37:21:88:12:56:8d:5d:4b:
ac:c2:f5:be:92:38:3b:14:63:12:f0:48:9f:fe:2b:
13:d1:fd:8c:e1:a5:f9:bf:fe:22:40:10:bf:29:7c:
d8:e5:3e:3e:3c:d5:4c:14:81:3f:80:9b:9b:dc:12:
50:76:cd:15:16:36:45:9b:65:a5:f4:ce:b8:69:44:
c6:de:6a:c5:b2:a8:b1:a6:85:b1:eb:48:d4:91:c8:
d1:33:41:31:ef:fc:d8:04:ee:ae:61:83:2b:5e:ce:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.128.0/19
23.229.0.0/17
23.236.128.0/17
67.220.176.0/20
69.4.80.0/20
69.58.0.0/20
107.151.0.0/19
152.232.0.0/16
192.119.8.0/21
192.157.48.0/20
192.186.128.0/18
192.198.96.0/19
192.241.64.0/18
198.20.160.0/19
198.147.24.0/21
198.154.80.0/20
198.245.64.0/20
209.127.0.0-209.127.48.255
209.127.50.0-209.127.62.255
209.127.72.0/21
209.127.96.0/22
209.127.104.0-209.127.127.255
209.127.136.0-209.127.138.255
209.127.142.0-209.127.151.255
209.127.176.0-209.127.189.255
209.127.191.0-209.127.192.255
209.127.194.0/24
209.127.196.0/24
209.127.198.0/24
209.127.223.0/24
209.127.228.0/23
209.127.242.0-209.127.245.255
209.127.252.0/23
209.205.192.0/19
IPv6:
2607:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55286
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c6:e7:11:ee:40:2e:f9:fc:08:48:2a:91:1e:2c:24:59:b0:
f5:d1:9c:d5:37:4d:41:44:01:59:2f:e3:9d:e0:23:24:d0:4b:
47:dc:4f:13:c4:90:fe:ec:24:0a:99:c1:ef:46:39:3b:93:66:
45:a1:c3:10:4a:83:65:75:6b:25:22:6f:ba:28:b0:1a:4c:b3:
58:10:41:dd:46:a0:ff:23:0b:dd:bd:b0:dc:cd:a7:5e:91:cd:
5c:7d:d1:95:07:d8:11:02:07:19:df:f7:b4:79:01:8b:e8:e4:
81:72:33:1c:ab:0e:23:af:a7:fe:d3:ba:9e:69:69:37:02:75:
62:94:eb:da:07:c2:59:19:fb:8b:f0:b0:99:3d:db:92:6d:14:
b8:a6:75:c3:f1:c7:d8:4a:61:1f:bf:65:87:48:59:95:d7:af:
15:26:83:4f:10:b1:68:dd:e4:ac:06:44:58:67:d9:2c:c9:20:
15:48:31:41:a1:7a:c2:b0:c8:9c:9b:d4:07:e5:b8:6f:23:02:
c3:9f:2a:41:c7:0e:d5:73:61:57:67:00:1f:54:3f:41:3e:e5:
f4:3a:75:2b:f4:5c:5a:44:b7:97:9b:d9:1d:10:5f:18:a7:2d:
3b:3c:35:47:6b:ea:34:75:a1:d0:81:db:e6:35:23:e1:14:15:
21:3d:69:e9
-----BEGIN CERTIFICATE-----
MIIIJjCCBw6gAwIBAgIUAQ0Mn0MoWEoqmbsP776E5pcxvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MDYxMjExNTQyOFoXDTI3MDgyOTAwNDUzN1owLzEtMCsGA1UEAxMk
YjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0NWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HPMpFkA1eqptBzwNW6znkRDH4yqE9J60R5l
x6Vqu06/JZpF+rPzcs+AEjxJfeCcmam1tfgp06eRqxfN9z6uNjyMZM1ZYl4Mz7vb
nlkJQKh9wa85LxRNbGzYPseT9ec6fnqmvqgyfL07qyj3S4AwOgN/dWQ7s4q/nNy7
ncMr9FdZUQ80JK432ccDGigjaoTEbRd/cyzcf9gIqRiUNyGIElaNXUuswvW+kjg7
FGMS8Eif/isT0f2M4aX5v/4iQBC/KXzY5T4+PNVMFIE/gJub3BJQds0VFjZFm2Wl
9M64aUTG3mrFsqixpoWx60jUkcjRM0Ex7/zYBO6uYYMrXs52XQIDAQABo4IFODCC
BTQwHQYDVR0OBBYEFIQJDEKg2Z/q2qj9w20zpfiL4iA9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i
NWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I1ZWRmMDIxLTAyOTgtNGE4MS05
N2Q1LTFjODVhMmViNDVmNS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJl
YjQ1ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggE6BggrBgEF
BQcBBwEB/wSCASkwggElMIIBEgQCAAEwggEKAwQFF+OAAwQHF+UAAwQHF+yAAwQE
Q9ywAwQERQRQAwQERToAAwQFa5cAAwMAmOgDBAPAdwgDBATAnTADBAbAuoADBAXA
xmADBAbA8UADBAXGFKADBAPGkxgDBATGmlADBATG9UAwCwMDANF/AwQA0X8wMAwD
BAHRfzIDBADRfz4DBAPRf0gDBALRf2AwDAMEA9F/aAMEB9F/ADAMAwQD0X+IAwQA
0X+KMAwDBAHRf44DBAPRf5AwDAMEBNF/sAMEAdF/vDAMAwQA0X+/AwQA0X/AAwQA
0X/CAwQA0X/EAwQA0X/GAwQA0X/fAwQB0X/kMAwDBAHRf/IDBAHRf/QDBAHRf/wD
BAXRzcAwDQQCAAIwBwMFACYHQwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANf2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIjG5xHuQC75/AhIKpEeLCRZsPXRnNU3TUFEAVkv453gIyTQS0fc
TxPEkP7sJAqZwe9GOTuTZkWhwxBKg2V1ayUib7oosBpMs1gQQd1GoP8jC929sNzN
p16RzVx90ZUH2BECBxnf97R5AYvo5IFyMxyrDiOvp/7Tup5paTcCdWKU69oHwlkZ
+4vwsJk925JtFLimdcPxx9hKYR+/ZYdIWZXXrxUmg08QsWjd5KwGRFhn2SzJIBVI
MUGhesKwyJyb1AfluG8jAsOfKkHHDtVzYVdnAB9UP0E+5fQ6dSv0XFpEt5eb2R0Q
XxinLTs8NUdr6jR1odCB2+Y1I+EUFSE9aek=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:59:51 2025 by rpki-client