Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer
File: b1b8e1e4-65a6-4ea6-b62d-2576458162ca.cer (raw, json)
Hash identifier: l8X+d+71qGanxJduYpsVUIAdaZ/qmziH/9D7tH9Gzg8=
Subject key identifier: 31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584F37459FD03162CD0237CA9500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 18 Sep 2026 12:45:11 +0000
Certificate not after: Thu 21 Dec 2028 13:45:11 +0000
Subordinate resources: AS: 10532
AS: 12200
AS: 19994
AS: 22720
AS: 27357
AS: 33070
AS: 33439
AS: 36248
AS: 54636
AS: 397485
IP: 23.253.0.0/16
IP: 50.56.0.0 -- 50.56.147.255
IP: 50.56.152.0 -- 50.57.239.255
IP: 64.39.0.0/19
IP: 64.49.192.0/18
IP: 65.61.128.0/18
IP: 66.216.64.0/18
IP: 67.23.0.0 -- 67.23.47.255
IP: 67.192.0.0/16
IP: 67.207.128.0/19
IP: 69.20.0.0/17
IP: 72.3.128.0/17
IP: 72.4.112.0/20
IP: 72.32.0.0/16
IP: 74.205.0.0/17
IP: 98.129.0.0 -- 98.129.228.255
IP: 98.129.230.0 -- 98.129.255.255
IP: 104.130.0.0/16
IP: 104.239.128.0/17
IP: 108.166.0.0/17
IP: 108.171.160.0/19
IP: 146.20.0.0/16
IP: 148.62.0.0/16
IP: 159.135.64.0/18
IP: 159.135.160.0 -- 159.135.223.255
IP: 159.135.240.0/20
IP: 161.47.0.0/16
IP: 162.209.0.0/17
IP: 162.242.128.0/17
IP: 166.78.0.0/16
IP: 166.86.0.0/16
IP: 172.99.64.0/18
IP: 173.45.224.0/19
IP: 173.203.0.0/16
IP: 174.143.0.0/16
IP: 184.106.0.0 -- 184.106.54.255
IP: 184.106.56.0 -- 184.106.255.255
IP: 192.237.128.0/17
IP: 198.61.128.0/17
IP: 198.101.128.0/17
IP: 199.182.60.0/22
IP: 204.232.128.0/17
IP: 207.97.192.0/18
IP: 208.78.96.0/21
IP: 209.20.64.0/19
IP: 209.61.128.0/18
IP: 209.114.32.0/19
IP: 2001:4800::/29
IP: 2620:13f::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:45:9f:d0:31:62:cd:02:37:ca:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Sep 18 12:45:11 2026 GMT
Not After : Dec 21 13:45:11 2028 GMT
Subject: CN=b1b8e1e4-65a6-4ea6-b62d-2576458162ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:73:f4:9b:dc:7a:ec:85:79:52:b2:b0:
be:bb:b1:fd:75:ae:7b:e7:69:72:aa:2f:c4:18:e6:
2c:6c:a4:58:52:d1:09:0e:72:1e:64:27:15:7f:79:
0a:95:ff:ac:67:fd:2a:c3:61:dc:95:92:ed:73:bd:
10:93:fe:cb:d2:36:a2:34:e1:63:ee:ac:fe:56:9d:
72:f7:fd:e3:28:cf:6d:f6:e7:c5:03:2c:f6:9e:7c:
47:2e:33:d1:40:1e:3e:96:7f:c3:28:90:17:0e:34:
70:7a:dd:a9:de:92:71:c1:b9:57:c9:e6:a1:95:06:
d4:70:29:e5:91:71:74:5c:d1:4f:27:1a:a9:13:58:
0b:9d:a3:07:15:01:70:90:45:9f:c9:b9:01:a7:fa:
8d:80:a0:d3:0c:df:04:d9:2b:dc:c4:ba:a2:0a:da:
e5:fc:fe:cc:4f:fc:ca:26:ac:c1:01:d7:c5:d5:28:
0f:26:fb:96:87:3e:87:fe:6d:2f:7b:ad:f3:47:8c:
56:62:37:75:8a:29:3a:5a:3c:9f:b7:c8:cf:5e:c6:
81:d7:85:a9:6b:67:5c:5b:cf:13:00:cc:7b:13:f8:
af:26:57:12:d3:94:34:63:2b:68:14:f8:13:cb:c0:
c2:c1:c9:2b:9c:16:79:05:ec:21:3b:4f:4d:15:f2:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:78:8F:17:38:74:9C:D4:80:2C:AD:F9:94:C9:F2:04:79:F3:AD
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b1b8e1e4-65a6-4ea6-b62d-2576458162ca/b1b8e1e4-65a6-4ea6-b62d-2576458162ca.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.253.0.0/16
50.56.0.0-50.56.147.255
50.56.152.0-50.57.239.255
64.39.0.0/19
64.49.192.0/18
65.61.128.0/18
66.216.64.0/18
67.23.0.0-67.23.47.255
67.192.0.0/16
67.207.128.0/19
69.20.0.0/17
72.3.128.0/17
72.4.112.0/20
72.32.0.0/16
74.205.0.0/17
98.129.0.0-98.129.228.255
98.129.230.0-98.129.255.255
104.130.0.0/16
104.239.128.0/17
108.166.0.0/17
108.171.160.0/19
146.20.0.0/16
148.62.0.0/16
159.135.64.0/18
159.135.160.0-159.135.223.255
159.135.240.0/20
161.47.0.0/16
162.209.0.0/17
162.242.128.0/17
166.78.0.0/16
166.86.0.0/16
172.99.64.0/18
173.45.224.0/19
173.203.0.0/16
174.143.0.0/16
184.106.0.0-184.106.54.255
184.106.56.0-184.106.255.255
192.237.128.0/17
198.61.128.0/17
198.101.128.0/17
199.182.60.0/22
204.232.128.0/17
207.97.192.0/18
208.78.96.0/21
209.20.64.0/19
209.61.128.0/18
209.114.32.0/19
IPv6:
2001:4800::/29
2620:13f::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10532
12200
19994
22720
27357
33070
33439
36248
54636
397485
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:57:a7:4a:25:09:4d:9c:73:2f:b3:5c:18:40:2d:6d:21:3f:
59:1d:9e:4c:b5:4e:5f:a8:f8:52:76:6b:21:96:fb:42:2b:c1:
03:09:50:13:7b:8c:f1:d3:60:48:5d:34:9e:ea:b4:64:1f:ac:
79:f7:0f:45:34:d4:20:01:4b:78:31:da:c7:29:52:2a:53:f1:
8f:89:7d:61:71:0b:a9:35:18:d5:78:79:f4:8c:65:dc:12:b5:
a2:68:80:6b:f9:32:20:9a:6b:9c:2a:66:15:d7:78:a1:28:14:
2f:77:46:e2:14:36:11:c2:e9:f7:cf:a0:17:2e:94:a4:aa:c7:
9b:83:9c:fa:b0:94:48:9d:b7:02:91:91:67:0d:31:14:2d:6f:
b4:9a:2b:4d:38:23:84:5c:03:13:a9:5e:72:34:d6:a1:53:72:
ed:fd:17:05:05:1e:93:d5:40:07:3e:a5:d1:7b:b5:07:69:d1:
75:77:98:bd:f2:3c:24:21:10:5e:c7:eb:cc:84:be:14:03:cb:
cf:72:af:16:06:fd:82:28:53:6a:44:b4:2c:9d:5f:4b:5b:fa:
4a:72:5a:ec:85:09:8f:72:e5:9e:55:a9:a5:aa:8a:bc:c2:e0:
2a:40:d2:f0:ff:d0:c7:eb:6e:f8:98:46:4d:ef:2b:a9:b6:32:
96:0d:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:42:30 2026 by rpki-client