Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
File: b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer (raw, json)
Hash identifier: vqMhOSBDy8D2SSxNMRbBou2coUwAPNW5xtnhYZVNtb8=
Subject key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584A31ADD4F2D6F1CF289ADF7EC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 15 Jun 2025 00:45:37 +0000
Certificate not after: Sat 18 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 10532
AS: 12200
AS: 19994
AS: 22720
AS: 27357
AS: 33070
AS: 33439
AS: 36248
AS: 54636
AS: 397485
IP: 23.253.0.0/16
IP: 50.56.0.0 -- 50.56.147.255
IP: 50.56.152.0 -- 50.57.239.255
IP: 64.39.0.0/19
IP: 64.49.192.0/18
IP: 65.61.128.0/18
IP: 66.216.64.0/18
IP: 67.23.0.0 -- 67.23.47.255
IP: 67.192.0.0/16
IP: 67.207.128.0/19
IP: 69.20.0.0/17
IP: 72.3.128.0/17
IP: 72.4.112.0/20
IP: 72.32.0.0/16
IP: 74.205.0.0/17
IP: 98.129.0.0 -- 98.129.228.255
IP: 98.129.230.0 -- 98.129.255.255
IP: 104.130.0.0/16
IP: 104.239.128.0/17
IP: 108.166.0.0/17
IP: 108.171.160.0/19
IP: 146.20.0.0/16
IP: 148.62.0.0/16
IP: 155.183.0.0/16
IP: 159.135.64.0/18
IP: 159.135.160.0 -- 159.135.223.255
IP: 159.135.240.0/20
IP: 161.47.0.0/16
IP: 162.209.0.0/17
IP: 162.242.128.0/17
IP: 166.78.0.0/16
IP: 166.86.0.0/16
IP: 172.99.64.0/18
IP: 173.45.224.0/19
IP: 173.203.0.0/16
IP: 174.143.0.0/16
IP: 184.106.0.0 -- 184.106.54.255
IP: 184.106.56.0 -- 184.106.255.255
IP: 192.237.128.0/17
IP: 198.61.128.0/17
IP: 198.101.128.0/17
IP: 199.182.60.0/22
IP: 204.232.128.0/17
IP: 207.97.192.0/18
IP: 208.78.96.0/21
IP: 209.20.64.0/19
IP: 209.61.128.0/18
IP: 209.114.32.0/19
IP: 2001:4800::/29
IP: 2620:13f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 03 Jul 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:31:ad:d4:f2:d6:f1:cf:28:9a:df:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jun 15 00:45:37 2025 GMT
Not After : Sep 18 00:45:37 2027 GMT
Subject: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:73:f4:9b:dc:7a:ec:85:79:52:b2:b0:
be:bb:b1:fd:75:ae:7b:e7:69:72:aa:2f:c4:18:e6:
2c:6c:a4:58:52:d1:09:0e:72:1e:64:27:15:7f:79:
0a:95:ff:ac:67:fd:2a:c3:61:dc:95:92:ed:73:bd:
10:93:fe:cb:d2:36:a2:34:e1:63:ee:ac:fe:56:9d:
72:f7:fd:e3:28:cf:6d:f6:e7:c5:03:2c:f6:9e:7c:
47:2e:33:d1:40:1e:3e:96:7f:c3:28:90:17:0e:34:
70:7a:dd:a9:de:92:71:c1:b9:57:c9:e6:a1:95:06:
d4:70:29:e5:91:71:74:5c:d1:4f:27:1a:a9:13:58:
0b:9d:a3:07:15:01:70:90:45:9f:c9:b9:01:a7:fa:
8d:80:a0:d3:0c:df:04:d9:2b:dc:c4:ba:a2:0a:da:
e5:fc:fe:cc:4f:fc:ca:26:ac:c1:01:d7:c5:d5:28:
0f:26:fb:96:87:3e:87:fe:6d:2f:7b:ad:f3:47:8c:
56:62:37:75:8a:29:3a:5a:3c:9f:b7:c8:cf:5e:c6:
81:d7:85:a9:6b:67:5c:5b:cf:13:00:cc:7b:13:f8:
af:26:57:12:d3:94:34:63:2b:68:14:f8:13:cb:c0:
c2:c1:c9:2b:9c:16:79:05:ec:21:3b:4f:4d:15:f2:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.253.0.0/16
50.56.0.0-50.56.147.255
50.56.152.0-50.57.239.255
64.39.0.0/19
64.49.192.0/18
65.61.128.0/18
66.216.64.0/18
67.23.0.0-67.23.47.255
67.192.0.0/16
67.207.128.0/19
69.20.0.0/17
72.3.128.0/17
72.4.112.0/20
72.32.0.0/16
74.205.0.0/17
98.129.0.0-98.129.228.255
98.129.230.0-98.129.255.255
104.130.0.0/16
104.239.128.0/17
108.166.0.0/17
108.171.160.0/19
146.20.0.0/16
148.62.0.0/16
155.183.0.0/16
159.135.64.0/18
159.135.160.0-159.135.223.255
159.135.240.0/20
161.47.0.0/16
162.209.0.0/17
162.242.128.0/17
166.78.0.0/16
166.86.0.0/16
172.99.64.0/18
173.45.224.0/19
173.203.0.0/16
174.143.0.0/16
184.106.0.0-184.106.54.255
184.106.56.0-184.106.255.255
192.237.128.0/17
198.61.128.0/17
198.101.128.0/17
199.182.60.0/22
204.232.128.0/17
207.97.192.0/18
208.78.96.0/21
209.20.64.0/19
209.61.128.0/18
209.114.32.0/19
IPv6:
2001:4800::/29
2620:13f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10532
12200
19994
22720
27357
33070
33439
36248
54636
397485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:19:f9:eb:a0:bc:d1:9f:22:31:c6:60:f3:e0:88:72:a3:ba:
c1:29:53:82:c2:66:78:0d:98:53:dd:af:35:1e:f1:12:46:6c:
39:20:b4:2c:02:8b:59:96:67:5f:de:81:95:e3:f3:4c:e6:ef:
45:a1:38:ef:a6:ea:40:00:04:b9:f4:f3:1d:3d:b5:4c:af:fb:
b0:e1:6e:44:6e:1e:0f:51:f8:b7:ac:b1:11:48:9e:b7:aa:eb:
61:f3:56:aa:31:e8:09:59:8d:a3:d0:48:f8:0f:48:02:b0:71:
5e:37:d1:61:20:67:82:00:5d:8d:4b:ca:99:21:fd:a4:22:c0:
28:9b:2e:36:70:13:13:38:ba:6a:b7:7f:eb:8d:3b:74:af:86:
87:cf:e5:2f:4d:2d:5a:b5:83:78:64:61:a7:8b:09:12:87:06:
9c:96:ca:d5:d8:20:8b:31:8f:67:4d:f5:82:95:f7:1e:e7:ca:
2a:ed:a4:6f:d2:a2:d0:16:b1:ca:30:c8:77:d4:31:ec:2e:a9:
85:9c:c1:c3:0b:fe:be:42:d1:a9:b8:42:9e:63:bb:6a:56:69:
e3:ff:5b:9b:75:08:b5:0c:b1:d9:93:46:63:e1:bc:8e:72:1b:
bc:c5:25:0b:9c:2a:0b:30:40:f7:f2:37:a2:c2:08:af:86:c3:
f9:97:eb:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:29:16 2025 by rpki-client