Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
File: b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer (raw, json)
Hash identifier: vJrpgkPE77CIJQWMtmWEFha3Nf4sD1KEB26UNC5Az6Y=
Subject key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584EFF6FF144F278EE648B39A980
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sat 29 Aug 2026 12:45:11 +0000
Certificate not after: Fri 01 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 55286
IP: 23.227.128.0/19
IP: 23.229.0.0/17
IP: 23.236.128.0/17
IP: 67.220.176.0/20
IP: 68.209.0.0/18
IP: 69.4.80.0/20
IP: 69.58.0.0/20
IP: 72.57.64.0/18
IP: 107.151.0.0/19
IP: 108.175.160.0/20
IP: 152.232.0.0/16
IP: 192.119.8.0/21
IP: 192.157.48.0/20
IP: 192.186.128.0/18
IP: 192.198.96.0/19
IP: 192.241.64.0/18
IP: 198.20.160.0/19
IP: 198.147.24.0/21
IP: 198.154.80.0/20
IP: 198.245.64.0/20
IP: 209.127.0.0 -- 209.127.48.255
IP: 209.127.50.0 -- 209.127.62.255
IP: 209.127.72.0/21
IP: 209.127.96.0/22
IP: 209.127.104.0 -- 209.127.127.255
IP: 209.127.136.0 -- 209.127.138.255
IP: 209.127.142.0 -- 209.127.151.255
IP: 209.127.176.0 -- 209.127.189.255
IP: 209.127.191.0 -- 209.127.192.255
IP: 209.127.194.0/24
IP: 209.127.196.0/24
IP: 209.127.198.0/24
IP: 209.127.223.0/24
IP: 209.127.228.0/23
IP: 209.127.242.0 -- 209.127.245.255
IP: 209.127.252.0/23
IP: 209.205.192.0/19
IP: 2607:4300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ff:6f:f1:44:f2:78:ee:64:8b:39:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Aug 29 12:45:11 2026 GMT
Not After : Dec 1 13:45:11 2028 GMT
Subject: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:cc:a4:59:00:d5:ea:a9:b4:1c:f0:35:6e:
b3:9e:44:43:1f:8c:aa:13:d2:7a:d1:1e:65:c7:a5:
6a:bb:4e:bf:25:9a:45:fa:b3:f3:72:cf:80:12:3c:
49:7d:e0:9c:99:a9:b5:b5:f8:29:d3:a7:91:ab:17:
cd:f7:3e:ae:36:3c:8c:64:cd:59:62:5e:0c:cf:bb:
db:9e:59:09:40:a8:7d:c1:af:39:2f:14:4d:6c:6c:
d8:3e:c7:93:f5:e7:3a:7e:7a:a6:be:a8:32:7c:bd:
3b:ab:28:f7:4b:80:30:3a:03:7f:75:64:3b:b3:8a:
bf:9c:dc:bb:9d:c3:2b:f4:57:59:51:0f:34:24:ae:
37:d9:c7:03:1a:28:23:6a:84:c4:6d:17:7f:73:2c:
dc:7f:d8:08:a9:18:94:37:21:88:12:56:8d:5d:4b:
ac:c2:f5:be:92:38:3b:14:63:12:f0:48:9f:fe:2b:
13:d1:fd:8c:e1:a5:f9:bf:fe:22:40:10:bf:29:7c:
d8:e5:3e:3e:3c:d5:4c:14:81:3f:80:9b:9b:dc:12:
50:76:cd:15:16:36:45:9b:65:a5:f4:ce:b8:69:44:
c6:de:6a:c5:b2:a8:b1:a6:85:b1:eb:48:d4:91:c8:
d1:33:41:31:ef:fc:d8:04:ee:ae:61:83:2b:5e:ce:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.128.0/19
23.229.0.0/17
23.236.128.0/17
67.220.176.0/20
68.209.0.0/18
69.4.80.0/20
69.58.0.0/20
72.57.64.0/18
107.151.0.0/19
108.175.160.0/20
152.232.0.0/16
192.119.8.0/21
192.157.48.0/20
192.186.128.0/18
192.198.96.0/19
192.241.64.0/18
198.20.160.0/19
198.147.24.0/21
198.154.80.0/20
198.245.64.0/20
209.127.0.0-209.127.48.255
209.127.50.0-209.127.62.255
209.127.72.0/21
209.127.96.0/22
209.127.104.0-209.127.127.255
209.127.136.0-209.127.138.255
209.127.142.0-209.127.151.255
209.127.176.0-209.127.189.255
209.127.191.0-209.127.192.255
209.127.194.0/24
209.127.196.0/24
209.127.198.0/24
209.127.223.0/24
209.127.228.0/23
209.127.242.0-209.127.245.255
209.127.252.0/23
209.205.192.0/19
IPv6:
2607:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55286
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:39:2e:53:ab:1a:9b:7d:a4:b3:35:f6:48:60:dd:d3:6a:03:
45:f0:e4:8d:7f:7d:0d:05:30:9e:c0:6c:f0:a0:56:bb:64:86:
22:80:51:bc:d9:26:45:a9:e4:1e:d5:21:8d:36:5d:14:fe:6b:
63:24:71:08:fc:dd:87:54:42:c3:e2:7b:bb:a2:a4:84:23:ae:
3f:48:32:6a:0c:30:72:1f:38:61:48:d1:8d:c2:4a:87:6f:c4:
26:ad:1c:41:c7:0b:c1:c7:ef:23:bd:0f:33:68:ff:79:94:73:
14:42:de:2b:38:d9:22:56:3f:83:bd:54:19:8d:2b:8e:c0:af:
0e:4b:27:e2:c8:fb:80:51:65:32:9f:9e:0a:c3:01:7d:01:38:
2b:3f:94:d2:90:3e:63:fb:1a:c7:55:2d:2d:08:2f:a4:24:31:
45:46:75:c2:21:ad:19:5c:a5:f0:00:49:11:1d:94:64:45:aa:
9c:6c:76:36:50:14:16:78:ce:db:1d:0f:db:0a:9e:4a:22:ac:
30:46:36:9c:1f:2a:93:5f:b2:72:28:e0:1e:32:c8:96:9d:5a:
d8:dd:e6:56:b6:32:41:16:74:be:b2:57:a3:7f:2e:12:28:de:
06:42:38:bd:77:54:85:2d:95:36:08:59:2e:4a:6c:57:97:52:
fe:a6:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:49:40 2026 by rpki-client