
Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
File: ac65e460-1633-4b44-9dc5-be303c8b3f09.cer (raw, json)
Hash identifier: ok75RUM9RLcdSIxgUGdlxnaQaNhSCcuTIt3CNBqJRQY=
Subject key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584F5C2867CC3EC2C6B47C71640C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 01 Oct 2026 17:51:14 +0000
Certificate not after: Sat 19 Aug 2028 00:45:17 +0000
Subordinate resources: AS: 11867
AS: 46386
IP: 23.134.52.0/24
IP: 130.12.209.0/24
IP: 199.244.180.0/22
IP: 2602:f700::/40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5c:28:67:cc:3e:c2:c6:b4:7c:71:64:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Oct 1 17:51:14 2026 GMT
Not After : Aug 19 00:45:17 2028 GMT
Subject: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:95:86:b6:81:19:fa:cb:21:52:3f:65:ba:
14:9c:fe:be:c3:44:2d:da:5c:41:3a:d5:80:d0:bb:
f4:87:d9:47:a5:55:15:e8:e1:2b:9d:cb:a2:a6:ec:
49:4d:50:7d:c6:72:1a:e9:66:07:e3:51:a4:f1:9c:
02:fe:8a:07:a7:0c:49:ec:eb:06:5b:de:b2:61:1c:
d2:ed:e4:ac:11:a7:d5:fb:cd:0a:d2:6f:6c:72:2e:
b0:f6:47:57:37:88:c3:53:f2:5f:fd:0e:c4:3d:13:
ea:f7:2e:96:7f:60:cb:e3:4a:89:bf:5f:b2:b7:af:
d5:fe:6d:ae:06:ea:78:5e:42:85:cd:15:ba:66:e0:
ca:71:ec:00:48:4d:29:a2:78:a7:d2:b4:82:ab:63:
42:28:cb:12:35:91:d9:e7:c2:a0:42:84:d6:02:3a:
b8:71:1d:0d:64:4a:83:cb:e6:f3:5f:3b:b6:b8:2c:
68:ba:c5:8f:dd:a1:3a:75:fc:21:f4:e9:0d:20:0c:
ef:c6:1c:85:49:6a:20:f3:9a:45:72:ae:69:ac:09:
67:e4:a4:a0:d9:fb:d2:32:50:d9:0f:b9:f0:03:be:
f8:08:5e:67:ef:60:5c:d7:c2:97:45:4c:0a:28:f7:
60:22:39:9f:62:4a:7b:b7:b1:61:9e:3d:70:2c:76:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.52.0/24
130.12.209.0/24
199.244.180.0/22
IPv6:
2602:f700::/40
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11867
46386
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:35:a8:01:90:96:33:b2:f6:cc:66:a3:75:39:05:c1:bc:00:
c8:ca:b8:f7:ea:b7:1a:63:bf:36:df:7e:49:48:9b:d9:5f:06:
03:cc:f4:3c:be:31:5e:df:cc:ad:eb:7d:65:af:39:19:47:ee:
60:13:62:b2:ba:9a:0d:16:f6:c4:b3:23:6c:d2:c1:88:aa:d8:
8e:6f:a9:82:cb:3f:86:88:ac:a5:c2:27:19:79:8b:7b:7a:20:
b4:35:b7:a2:e5:c3:5e:60:0c:62:c8:f1:82:bb:f1:23:9b:7a:
54:7e:40:8a:c6:ed:bd:f6:39:53:e7:ad:8d:9b:df:1c:5b:05:
c5:ff:1d:a7:6d:5d:d9:95:c1:db:bf:31:e4:a2:04:df:a1:55:
b2:b0:0f:19:fd:fa:19:7c:53:0b:26:91:53:4a:72:f4:9d:1e:
62:29:a3:df:76:fd:69:bd:3e:61:c2:c8:0c:a8:9a:59:b8:df:
98:96:fc:60:89:50:5c:f4:cc:28:c0:b1:ef:d2:29:10:dd:43:
99:3c:35:b9:b7:73:20:87:3d:47:13:00:49:77:92:79:34:7e:
8c:fb:8d:4a:52:6c:b7:d7:6b:f3:7e:90:bd:0e:4e:35:31:34:
1b:7c:bc:fa:54:d0:f4:b3:74:79:bb:7a:07:1f:4a:79:58:84:
65:4b:62:1c
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWE9cKGfMPsLGtHxxZAwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MTAwMTE3NTExNFoXDTI4MDgxOTAwNDUxN1owLzEtMCsGA1UEAxMk
YWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIzZjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVyVhraBGfrLIVI/ZboUnP6+w0Qt2lxBOtWA
0Lv0h9lHpVUV6OErncuipuxJTVB9xnIa6WYH41Gk8ZwC/ooHpwxJ7OsGW96yYRzS
7eSsEafV+80K0m9sci6w9kdXN4jDU/Jf/Q7EPRPq9y6Wf2DL40qJv1+yt6/V/m2u
Bup4XkKFzRW6ZuDKcewASE0ponin0rSCq2NCKMsSNZHZ58KgQoTWAjq4cR0NZEqD
y+bzXzu2uCxousWP3aE6dfwh9OkNIAzvxhyFSWog85pFcq5prAln5KSg2fvSMlDZ
D7nwA774CF5n72Bc18KXRUwKKPdgIjmfYkp7t7Fhnj1wLHaiuQIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFCCgb+BALzcfWQMA3ZVnczKffswtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h
YzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2FjNjVlNDYwLTE2MzMtNGI0NC05
ZGM1LWJlMzAzYzhiM2YwOS9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4
YjNmMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXhjQDBACCDNEDBALH9LQwDgQCAAIwCAMGACYC
9wAAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAi5bAgMAtTIwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAojWo
AZCWM7L2zGajdTkFwbwAyMq49+q3GmO/Nt9+SUib2V8GA8z0PL4xXt/Mret9Za85
GUfuYBNisrqaDRb2xLMjbNLBiKrYjm+pgss/hoispcInGXmLe3ogtDW3ouXDXmAM
YsjxgrvxI5t6VH5AisbtvfY5U+etjZvfHFsFxf8dp21d2ZXB278x5KIE36FVsrAP
Gf36GXxTCyaRU0py9J0eYimj33b9ab0+YcLIDKiaWbjfmJb8YIlQXPTMKMCx79Ip
EN1DmTw1ubdzIIc9RxMASXeSeTR+jPuNSlJst9dr836QvQ5ONTE0G3y8+lTQ9LN0
ebt6Bx9KeViEZUtiHA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:21 2026 by rpki-client