Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
File: fea95c9f-c5c1-4a36-a73f-df548116ba56.cer (raw, json)
Hash identifier: FlNTaqEPSXouCBGVHEkWkbHQ/8+MmmjAOo5ZfAvVgZ0=
Subject key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D3F5D3C75E9FFF09048FEBC80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 22 Mar 2026 00:45:21 +0000
Certificate not after: Sat 24 Jun 2028 00:45:21 +0000
Subordinate resources: AS: 806
AS: 810 -- 811
AS: 828
AS: 2651 -- 2682
AS: 12277
AS: 13966
AS: 21640
AS: 25689
IP: 64.87.128.0/17
IP: 131.235.0.0/16
IP: 132.156.0.0/16
IP: 142.42.0.0/16
IP: 142.78.0.0/16
IP: 142.97.0.0 -- 142.98.255.255
IP: 142.135.0.0/16
IP: 142.226.0.0/16
IP: 158.128.0.0/16
IP: 160.106.0.0/16
IP: 167.34.0.0 -- 167.55.255.255
IP: 192.67.45.0/24
IP: 192.75.17.0/24
IP: 192.75.99.0/24
IP: 192.139.6.0 -- 192.139.8.255
IP: 192.139.194.0/23
IP: 192.139.201.0 -- 192.139.204.255
IP: 192.139.209.0 -- 192.139.212.255
IP: 192.197.67.0 -- 192.197.70.255
IP: 192.197.76.0/24
IP: 192.197.83.0 -- 192.197.86.255
IP: 192.197.114.0/23
IP: 198.103.0.0/16
IP: 199.212.16.0 -- 199.212.21.255
IP: 199.212.47.0/24
IP: 205.189.8.0/22
IP: 205.192.0.0/14
IP: 205.211.132.0/22
IP: 206.130.255.0/24
IP: 2001:504:25::/48
IP: 2001:1920::/32
IP: 2604:8400::/32
IP: 2605:7400::/32
IP: 2620:fd::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 29 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:5d:3c:75:e9:ff:f0:90:48:fe:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Mar 22 00:45:21 2026 GMT
Not After : Jun 24 00:45:21 2028 GMT
Subject: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:c7:83:38:94:95:e3:50:aa:3b:1e:40:ad:
78:8b:11:9a:31:c9:c4:52:74:71:0a:d2:bb:2d:a7:
b3:f8:a1:13:08:3f:35:79:b9:6b:1c:4e:ba:5c:cd:
2f:3d:4a:55:8f:73:0e:28:41:41:13:6c:c6:58:ba:
ba:c8:48:37:a6:e0:8e:23:d8:d9:df:5c:f5:0e:b2:
1c:53:f0:21:d3:6e:58:5e:5e:c0:b5:c2:b8:ed:fc:
d0:e3:19:5d:78:70:41:71:6b:55:76:81:03:10:be:
0b:05:3e:17:e6:b2:0b:f9:48:c4:8e:08:30:ba:47:
d3:b5:f4:f7:5c:f2:2d:44:bd:64:b7:77:80:cb:7a:
bb:40:48:13:28:5f:27:ea:0c:3c:19:9b:7e:8e:aa:
a0:6f:ae:db:11:30:6d:44:78:41:a3:eb:83:34:96:
24:06:ed:bc:cb:91:cd:40:6b:99:d7:6b:a2:b4:8f:
44:93:0e:f7:6d:98:20:ae:90:fd:28:10:4a:d0:9f:
cd:af:68:84:1d:aa:75:68:a1:fa:47:cc:f5:51:5b:
24:f4:b4:f6:f6:3b:03:c8:25:d5:bc:b0:d8:7d:8f:
1f:3e:e5:d5:45:28:71:c6:d3:fe:c7:32:a9:85:4a:
54:87:a1:c7:39:1d:f4:c7:e0:25:03:91:b0:05:76:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.87.128.0/17
131.235.0.0/16
132.156.0.0/16
142.42.0.0/16
142.78.0.0/16
142.97.0.0-142.98.255.255
142.135.0.0/16
142.226.0.0/16
158.128.0.0/16
160.106.0.0/16
167.34.0.0-167.55.255.255
192.67.45.0/24
192.75.17.0/24
192.75.99.0/24
192.139.6.0-192.139.8.255
192.139.194.0/23
192.139.201.0-192.139.204.255
192.139.209.0-192.139.212.255
192.197.67.0-192.197.70.255
192.197.76.0/24
192.197.83.0-192.197.86.255
192.197.114.0/23
198.103.0.0/16
199.212.16.0-199.212.21.255
199.212.47.0/24
205.189.8.0/22
205.192.0.0/14
205.211.132.0/22
206.130.255.0/24
IPv6:
2001:504:25::/48
2001:1920::/32
2604:8400::/32
2605:7400::/32
2620:fd::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
806
810-811
828
2651-2682
12277
13966
21640
25689
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:e5:48:b8:b9:2a:8f:cd:70:b0:77:57:b4:50:43:9c:53:8e:
0e:22:6c:67:90:ac:98:6b:69:2e:0d:38:ff:d7:f4:d6:d9:4d:
49:72:aa:0d:76:0f:52:5e:36:a9:d9:e2:e7:fe:de:04:b7:f7:
6c:86:f7:bb:1a:04:70:70:35:12:97:2d:cd:b9:e4:33:2e:7c:
2b:8c:a1:d6:71:90:ce:21:ee:7e:ee:2f:23:85:c6:6e:b4:84:
43:be:a4:29:61:5e:a7:da:88:30:45:5e:2f:55:20:40:08:0b:
b3:7e:e0:58:3c:ab:54:7a:8f:a5:1f:cb:85:d0:03:21:a9:b1:
c8:a7:a2:dd:e3:ac:e9:a8:6f:62:01:97:40:c4:94:17:b0:a6:
58:e5:7a:0f:57:f4:e7:5d:35:23:7e:e5:76:5d:09:0a:4f:07:
db:4b:22:a1:73:4a:9c:c2:d3:54:74:e0:c9:bf:ca:a2:f1:7b:
bf:2e:69:4a:9d:31:d9:8f:50:71:e2:95:85:42:cc:33:6e:48:
06:2a:33:3e:c2:0e:2e:9c:4e:ae:6a:65:a7:27:26:2b:6d:0b:
fd:ef:22:ff:c8:29:79:c0:68:d3:ec:1b:e7:66:c1:99:a6:de:
bd:78:2e:b7:b8:c3:4c:3f:04:2e:12:e8:69:3d:15:18:e0:52:
e5:c7:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:30:28 2026 by rpki-client