Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
File: 0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer (raw, json)
Hash identifier: gFlvX6h1i/lBOAyaX2cUfsEhG9eiItVMH4PKWRSWUHM=
Subject key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584A2C1874202B7153CDB1E7FC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 13 Jun 2025 00:45:36 +0000
Certificate not after: Thu 16 Sep 2027 00:45:36 +0000
Subordinate resources: AS: 4229
AS: 13442
AS: 21859
AS: 29752
AS: 62610
AS: 393502
AS: 393884
IP: 23.91.96.0/20
IP: 23.236.96.0/19
IP: 23.248.160.0/19
IP: 23.251.96.0/19
IP: 45.40.48.0/20
IP: 45.43.32.0/19
IP: 65.255.32.0/20
IP: 69.28.48.0/20
IP: 98.96.192.0/18
IP: 98.98.0.0/16
IP: 104.218.160.0/21
IP: 104.254.112.0/21
IP: 107.150.96.0/19
IP: 107.151.128.0/18
IP: 107.155.0.0/18
IP: 128.1.0.0/16
IP: 128.14.0.0/16
IP: 162.221.4.0/22
IP: 162.221.192.0/21
IP: 169.197.96.0/19
IP: 172.81.120.0/21
IP: 172.96.112.0/20
IP: 192.254.80.0/20
IP: 199.91.72.0/22
IP: 199.190.44.0/22
IP: 199.245.56.0/21
IP: 208.81.200.0/22
IP: 209.177.80.0/20
IP: 2602:ffe4::/36
IP: 2604:980::/32
IP: 2606:1080::/32
IP: 2606:4980::/32
IP: 2607:a400::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 03 Jul 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:2c:18:74:20:2b:71:53:cd:b1:e7:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jun 13 00:45:36 2025 GMT
Not After : Sep 16 00:45:36 2027 GMT
Subject: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:3f:3d:f5:1d:11:ea:e7:b8:1e:f4:01:d2:
2f:d0:67:71:78:37:18:1e:8b:da:dd:3d:c0:1a:0a:
18:af:46:85:1e:93:2a:8a:56:08:2f:89:d6:bc:71:
3e:45:82:bf:fd:74:49:67:15:34:52:18:e7:84:c8:
a0:67:3b:ce:81:02:46:5d:31:a9:1e:fa:06:5e:58:
65:64:da:69:23:33:4e:f3:71:ac:65:e3:a0:07:53:
ee:71:e6:32:18:54:8f:0a:21:6f:d3:34:26:1d:dd:
32:b0:12:a2:87:fd:c6:e1:a2:bf:d5:bd:07:d6:cf:
81:c0:b7:5d:8d:98:47:b6:0f:01:f5:22:7f:af:65:
36:2e:02:ba:6d:89:03:69:13:e6:b8:08:d1:8d:b2:
9f:8b:ac:8e:79:80:34:b1:28:6a:1e:8a:fb:f9:7c:
db:d5:9f:9f:ce:2c:5b:c0:5c:25:27:fb:30:fc:64:
f7:ab:59:ea:17:d3:b6:ef:19:a1:a6:05:6d:9a:74:
28:3a:23:f3:bc:34:d7:be:09:72:f5:ef:27:03:58:
5d:29:01:dd:c7:6b:9e:c8:a3:4d:06:f7:ee:77:04:
f2:e0:ba:5b:73:30:d1:3f:71:66:60:d8:16:00:3b:
09:bc:0d:bc:4b:08:86:24:c2:a1:dc:84:f3:e1:b2:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.96.0/20
23.236.96.0/19
23.248.160.0/19
23.251.96.0/19
45.40.48.0/20
45.43.32.0/19
65.255.32.0/20
69.28.48.0/20
98.96.192.0/18
98.98.0.0/16
104.218.160.0/21
104.254.112.0/21
107.150.96.0/19
107.151.128.0/18
107.155.0.0/18
128.1.0.0/16
128.14.0.0/16
162.221.4.0/22
162.221.192.0/21
169.197.96.0/19
172.81.120.0/21
172.96.112.0/20
192.254.80.0/20
199.91.72.0/22
199.190.44.0/22
199.245.56.0/21
208.81.200.0/22
209.177.80.0/20
IPv6:
2602:ffe4::/36
2604:980::/32
2606:1080::/32
2606:4980::/32
2607:a400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
4229
13442
21859
29752
62610
393502
393884
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:dd:ca:7e:ed:6d:41:6d:14:15:97:7b:c5:11:b4:ac:ab:0f:
6e:7f:08:84:9b:66:af:c8:8a:5e:39:47:be:08:f8:07:ad:0f:
56:8e:cd:c6:f3:74:31:2b:75:a3:34:ab:0f:6f:3e:0d:aa:5e:
ae:27:ef:73:44:a1:06:d2:dc:87:88:12:7c:ea:96:a7:d9:29:
88:09:74:7e:63:18:e6:fb:e7:8b:ae:6d:3f:30:76:95:11:5f:
a3:30:25:2f:ee:ad:f2:84:7b:08:8a:c6:7a:e2:69:c6:4e:22:
81:8b:e5:3d:b6:99:1f:50:6d:0d:78:54:7a:be:75:fa:c3:c1:
1b:b7:96:40:ac:50:a9:36:ce:fc:4a:a1:52:43:7e:f9:fa:c9:
c4:d3:68:d7:d8:84:17:6b:f8:47:05:21:7d:a3:99:15:d1:e4:
23:d1:e0:3d:1c:c0:00:03:30:6b:50:63:14:6e:98:a0:59:0b:
83:0f:8e:40:56:f6:bd:fe:c0:92:b5:aa:35:d7:67:7d:19:fd:
3f:3a:10:3f:49:ca:44:18:fa:89:1d:45:54:ae:aa:e2:07:4c:
95:e7:45:4e:43:f3:6b:98:b1:3c:7c:3b:1a:ea:08:ef:30:3a:
57:f1:eb:56:de:1f:37:53:ea:59:65:f0:d8:99:df:7e:b6:dc:
8d:85:63:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:59:07 2025 by rpki-client