Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
File: 249140ca-277e-4871-a100-451d066d1c5b.cer (raw, json)
Hash identifier: VtpCmuk58Zs9Z2cxoGv2PMElfKAsbuZYvhRA7Yk8TNs=
Subject key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584B8A487E42D423DD433E5ED280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 16 Oct 2025 11:15:19 +0000
Certificate not after: Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 6391
AS: 11478
AS: 21513
AS: 21548
AS: 21949
AS: 23498
AS: 40191
AS: 53364
AS: 395570
AS: 397177
AS: 397778
IP: 45.42.8.0 -- 45.42.14.255
IP: 50.21.16.0/21
IP: 50.21.64.0/21
IP: 64.18.64.0/19
IP: 64.137.128.0/19
IP: 64.254.224.0/19
IP: 65.97.32.0/20
IP: 66.11.32.0/20
IP: 66.23.0.0/17
IP: 66.171.160.0/20
IP: 66.199.32.0/20
IP: 66.207.192.0/19
IP: 66.234.32.0/19
IP: 66.241.128.0/20
IP: 67.22.224.0/20
IP: 67.213.71.0/24
IP: 67.213.80.0/23
IP: 67.213.87.0/24
IP: 67.213.92.0/24
IP: 69.9.172.0/23
IP: 69.77.160.0/19
IP: 70.35.160.0/20
IP: 72.15.48.0/20
IP: 74.114.100.0/22
IP: 74.123.92.0/22
IP: 74.213.160.0/19
IP: 75.98.192.0/20
IP: 76.9.192.0/19
IP: 96.45.192.0/20
IP: 97.107.176.0/20
IP: 104.192.44.0/22
IP: 104.193.52.0/22
IP: 134.128.192.0/19
IP: 134.231.32.0/19
IP: 142.59.160.0/20
IP: 149.248.176.0/20
IP: 158.106.64.0/18
IP: 162.249.160.0/22
IP: 162.250.170.0 -- 162.250.174.255
IP: 172.85.124.0/22
IP: 173.231.160.0/20
IP: 173.243.192.0/20
IP: 173.246.64.0/19
IP: 192.69.1.0/24
IP: 198.22.225.0/24
IP: 198.98.96.0/19
IP: 199.7.144.0/22
IP: 199.33.112.0/22
IP: 199.45.144.0/21
IP: 199.45.164.0/23
IP: 199.68.120.0/21
IP: 199.167.152.0/21
IP: 199.247.192.0/21
IP: 204.9.80.0/22
IP: 204.11.218.0/24
IP: 205.175.212.0/22
IP: 206.55.80.0/20
IP: 206.214.240.0/20
IP: 206.223.160.0/19
IP: 206.253.136.0/21
IP: 207.22.0.0/19
IP: 207.66.120.0/22
IP: 207.115.96.0/20
IP: 208.71.8.0/22
IP: 208.85.112.0/22
IP: 208.122.24.0/22
IP: 209.195.248.0/21
IP: 216.46.0.0/19
IP: 216.81.48.0/20
IP: 216.120.194.0/23
IP: 2605:8c80::/32
IP: 2606:880::/32
IP: 2607:5e00::/32
IP: 2607:f0c8::/32
IP: 2607:f3d8::/32
IP: 2610:98::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8a:48:7e:42:d4:23:dd:43:3e:5e:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Oct 16 11:15:19 2025 GMT
Not After : Dec 23 01:45:26 2026 GMT
Subject: CN=249140ca-277e-4871-a100-451d066d1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:8b:da:bc:64:fd:ae:65:dc:41:67:61:35:
7f:84:0a:9b:57:69:9d:70:a4:32:d1:6a:74:78:ff:
4a:18:94:af:bd:07:a7:54:0a:c6:c0:1f:40:24:4e:
29:ac:f2:62:0a:fb:f0:64:45:19:38:10:f3:be:9b:
1d:77:75:d9:1b:4b:9e:9e:b5:9c:c2:20:68:18:f5:
cd:cd:ac:57:d7:fa:79:c4:2b:86:68:6a:6d:48:64:
36:ab:f2:36:40:1f:49:e3:ba:37:d5:e4:db:92:23:
34:81:a0:1e:e1:ae:1c:1b:58:66:e1:d5:25:08:63:
e3:d4:12:3e:ae:56:a5:e3:b6:e0:53:1f:47:46:1a:
1b:84:a8:b6:95:6f:3c:0c:7d:d4:af:97:51:99:63:
a0:90:26:c6:86:e0:03:67:e4:51:b1:12:ea:d3:ff:
3a:a1:09:4b:f6:47:f2:fc:2a:14:3d:f0:93:de:49:
9b:82:53:1f:5d:11:b3:2f:04:ea:83:e4:50:5b:63:
ac:ab:a4:5e:72:fe:e3:9f:21:41:ee:f8:1f:60:8b:
39:3b:73:81:64:92:1c:a6:fc:db:cd:91:a4:65:4b:
90:27:34:47:c6:a3:81:e6:14:d4:eb:e1:ba:b0:ad:
69:5e:e8:90:63:ab:c1:77:44:aa:02:48:98:66:06:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.8.0-45.42.14.255
50.21.16.0/21
50.21.64.0/21
64.18.64.0/19
64.137.128.0/19
64.254.224.0/19
65.97.32.0/20
66.11.32.0/20
66.23.0.0/17
66.171.160.0/20
66.199.32.0/20
66.207.192.0/19
66.234.32.0/19
66.241.128.0/20
67.22.224.0/20
67.213.71.0/24
67.213.80.0/23
67.213.87.0/24
67.213.92.0/24
69.9.172.0/23
69.77.160.0/19
70.35.160.0/20
72.15.48.0/20
74.114.100.0/22
74.123.92.0/22
74.213.160.0/19
75.98.192.0/20
76.9.192.0/19
96.45.192.0/20
97.107.176.0/20
104.192.44.0/22
104.193.52.0/22
134.128.192.0/19
134.231.32.0/19
142.59.160.0/20
149.248.176.0/20
158.106.64.0/18
162.249.160.0/22
162.250.170.0-162.250.174.255
172.85.124.0/22
173.231.160.0/20
173.243.192.0/20
173.246.64.0/19
192.69.1.0/24
198.22.225.0/24
198.98.96.0/19
199.7.144.0/22
199.33.112.0/22
199.45.144.0/21
199.45.164.0/23
199.68.120.0/21
199.167.152.0/21
199.247.192.0/21
204.9.80.0/22
204.11.218.0/24
205.175.212.0/22
206.55.80.0/20
206.214.240.0/20
206.223.160.0/19
206.253.136.0/21
207.22.0.0/19
207.66.120.0/22
207.115.96.0/20
208.71.8.0/22
208.85.112.0/22
208.122.24.0/22
209.195.248.0/21
216.46.0.0/19
216.81.48.0/20
216.120.194.0/23
IPv6:
2605:8c80::/32
2606:880::/32
2607:5e00::/32
2607:f0c8::/32
2607:f3d8::/32
2610:98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6391
11478
21513
21548
21949
23498
40191
53364
395570
397177
397778
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:b3:9a:73:64:2e:f1:e8:4c:99:ce:44:67:56:d4:b7:c9:c1:
4d:75:12:c9:1d:e9:f6:6f:11:08:f7:71:d9:37:dd:45:26:4b:
89:13:7e:20:75:e8:dc:d5:f9:c3:3e:37:0b:9b:cf:c7:d5:a6:
85:21:c9:55:a8:39:1e:e7:7c:3d:3b:d5:74:e4:9e:84:1e:28:
99:78:67:d6:79:ae:65:98:57:fe:3d:7d:6d:ac:39:6d:fc:4d:
93:ca:58:f6:2b:cc:b7:a1:b4:69:89:0d:0e:24:21:0e:b6:98:
20:24:50:f7:49:fc:62:1d:cc:ce:5a:55:82:17:32:da:fa:96:
d4:98:2e:8b:69:d4:d3:6e:5f:ca:8c:7b:f1:41:23:5b:88:34:
4b:75:47:a1:0a:12:bb:b7:4f:e9:53:d6:fb:c0:24:7c:76:b1:
cc:c2:37:d9:c7:db:c2:bc:ac:de:68:d0:4b:ee:33:8e:ae:34:
ba:ab:0e:78:a5:0d:4d:50:0b:ee:14:99:59:46:5b:84:3a:ce:
86:7e:d4:91:5a:3a:f3:7d:04:51:f1:2a:9a:24:b3:72:aa:66:
f8:58:1f:03:38:11:36:02:26:52:2b:01:95:da:df:f9:42:c7:
3d:fc:9a:f0:46:63:b2:61:98:23:2d:11:c7:99:d3:e0:7f:31:
0b:06:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:41:18 2025 by rpki-client