Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
File: b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer (raw, json)
Hash identifier: W0hqjah3jRByBMhqLWEH+ue57Ghc5FUKHZTgqgxPYuQ=
Subject key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584D09D99860C811153E18190F8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 02 Mar 2026 20:42:17 +0000
Certificate not after: Sat 18 Sep 2027 00:45:37 +0000
Subordinate resources: AS: 10532
AS: 12200
AS: 19994
AS: 22720
AS: 27357
AS: 33070
AS: 33439
AS: 36248
AS: 54636
AS: 397485
IP: 23.253.0.0/16
IP: 50.56.0.0 -- 50.56.147.255
IP: 50.56.152.0 -- 50.57.239.255
IP: 64.39.0.0/19
IP: 64.49.192.0/18
IP: 65.61.128.0/18
IP: 66.216.64.0/18
IP: 67.23.0.0 -- 67.23.47.255
IP: 67.192.0.0/16
IP: 67.207.128.0/19
IP: 69.20.0.0/17
IP: 72.3.128.0/17
IP: 72.4.112.0/20
IP: 72.32.0.0/16
IP: 74.205.0.0/17
IP: 98.129.0.0 -- 98.129.228.255
IP: 98.129.230.0 -- 98.129.255.255
IP: 104.130.0.0/16
IP: 104.239.128.0/17
IP: 108.166.0.0/17
IP: 108.171.160.0/19
IP: 146.20.0.0/16
IP: 148.62.0.0/16
IP: 159.135.64.0/18
IP: 159.135.160.0 -- 159.135.223.255
IP: 159.135.240.0/20
IP: 161.47.0.0/16
IP: 162.209.0.0/17
IP: 162.242.128.0/17
IP: 166.78.0.0/16
IP: 166.86.0.0/16
IP: 172.99.64.0/18
IP: 173.45.224.0/19
IP: 173.203.0.0/16
IP: 174.143.0.0/16
IP: 184.106.0.0 -- 184.106.54.255
IP: 184.106.56.0 -- 184.106.255.255
IP: 192.237.128.0/17
IP: 198.61.128.0/17
IP: 198.101.128.0/17
IP: 199.182.60.0/22
IP: 204.232.128.0/17
IP: 207.97.192.0/18
IP: 208.78.96.0/21
IP: 209.20.64.0/19
IP: 209.61.128.0/18
IP: 209.114.32.0/19
IP: 2001:4800::/29
IP: 2620:13f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:d9:98:60:c8:11:15:3e:18:19:0f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Mar 2 20:42:17 2026 GMT
Not After : Sep 18 00:45:37 2027 GMT
Subject: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:73:f4:9b:dc:7a:ec:85:79:52:b2:b0:
be:bb:b1:fd:75:ae:7b:e7:69:72:aa:2f:c4:18:e6:
2c:6c:a4:58:52:d1:09:0e:72:1e:64:27:15:7f:79:
0a:95:ff:ac:67:fd:2a:c3:61:dc:95:92:ed:73:bd:
10:93:fe:cb:d2:36:a2:34:e1:63:ee:ac:fe:56:9d:
72:f7:fd:e3:28:cf:6d:f6:e7:c5:03:2c:f6:9e:7c:
47:2e:33:d1:40:1e:3e:96:7f:c3:28:90:17:0e:34:
70:7a:dd:a9:de:92:71:c1:b9:57:c9:e6:a1:95:06:
d4:70:29:e5:91:71:74:5c:d1:4f:27:1a:a9:13:58:
0b:9d:a3:07:15:01:70:90:45:9f:c9:b9:01:a7:fa:
8d:80:a0:d3:0c:df:04:d9:2b:dc:c4:ba:a2:0a:da:
e5:fc:fe:cc:4f:fc:ca:26:ac:c1:01:d7:c5:d5:28:
0f:26:fb:96:87:3e:87:fe:6d:2f:7b:ad:f3:47:8c:
56:62:37:75:8a:29:3a:5a:3c:9f:b7:c8:cf:5e:c6:
81:d7:85:a9:6b:67:5c:5b:cf:13:00:cc:7b:13:f8:
af:26:57:12:d3:94:34:63:2b:68:14:f8:13:cb:c0:
c2:c1:c9:2b:9c:16:79:05:ec:21:3b:4f:4d:15:f2:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.253.0.0/16
50.56.0.0-50.56.147.255
50.56.152.0-50.57.239.255
64.39.0.0/19
64.49.192.0/18
65.61.128.0/18
66.216.64.0/18
67.23.0.0-67.23.47.255
67.192.0.0/16
67.207.128.0/19
69.20.0.0/17
72.3.128.0/17
72.4.112.0/20
72.32.0.0/16
74.205.0.0/17
98.129.0.0-98.129.228.255
98.129.230.0-98.129.255.255
104.130.0.0/16
104.239.128.0/17
108.166.0.0/17
108.171.160.0/19
146.20.0.0/16
148.62.0.0/16
159.135.64.0/18
159.135.160.0-159.135.223.255
159.135.240.0/20
161.47.0.0/16
162.209.0.0/17
162.242.128.0/17
166.78.0.0/16
166.86.0.0/16
172.99.64.0/18
173.45.224.0/19
173.203.0.0/16
174.143.0.0/16
184.106.0.0-184.106.54.255
184.106.56.0-184.106.255.255
192.237.128.0/17
198.61.128.0/17
198.101.128.0/17
199.182.60.0/22
204.232.128.0/17
207.97.192.0/18
208.78.96.0/21
209.20.64.0/19
209.61.128.0/18
209.114.32.0/19
IPv6:
2001:4800::/29
2620:13f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10532
12200
19994
22720
27357
33070
33439
36248
54636
397485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8d:a0:3c:1d:d9:56:77:22:f4:06:5a:74:5c:89:de:ad:fe:
9c:59:b7:ff:31:5e:f6:c8:5a:19:1b:df:39:e7:01:c6:9f:0f:
33:3d:07:23:bd:b8:b1:52:ea:00:cc:7d:49:f0:83:85:4f:ab:
71:77:62:f7:84:68:e6:26:cd:49:96:42:07:79:31:d7:19:5f:
83:4e:63:5f:c8:a9:79:5c:e1:98:c6:a5:db:c7:25:3b:51:b4:
a3:94:bf:4a:02:0b:92:ec:43:22:0e:f3:11:b9:3d:4a:5c:19:
5a:13:7e:61:7e:63:52:ad:66:90:60:13:65:fd:53:0a:10:c8:
50:a9:72:33:f7:6c:86:00:1f:14:b7:96:5e:76:ef:df:ca:9a:
71:9b:dc:4a:db:cc:d6:3c:69:8f:47:2b:6a:33:4c:50:1a:f4:
49:dd:c5:32:c3:2c:89:80:63:ad:d2:22:ba:6b:45:27:76:15:
87:f6:af:85:59:24:a3:20:21:35:79:4c:48:e9:b8:e2:7e:7b:
b4:ed:2a:f4:ad:4a:dc:c0:7e:2f:c9:2c:38:1b:ba:47:a9:9b:
56:9b:98:26:f2:90:6b:a2:52:53:f0:e0:78:79:96:63:0f:e8:
87:cf:9d:92:af:a3:05:a4:57:b0:b0:c9:09:23:4e:fa:f6:ab:
c6:43:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:26 2026 by rpki-client