Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
File: b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer (raw, json)
Hash identifier: dCZsTemM9LY+fM3B6/tRVpReelwON/bRVsmmHLoICYo=
Subject key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial: 010D0C9F4328584B88737F0E9A5936344D47A720
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 15 Oct 2025 19:30:21 +0000
Certificate not after: Sun 29 Aug 2027 00:45:37 +0000
Subordinate resources: AS: 55286
IP: 23.227.128.0/19
IP: 23.229.0.0/17
IP: 23.236.128.0/17
IP: 67.220.176.0/20
IP: 68.209.0.0/18
IP: 69.4.80.0/20
IP: 69.58.0.0/20
IP: 72.57.64.0/18
IP: 107.151.0.0/19
IP: 108.175.160.0/20
IP: 152.232.0.0/16
IP: 192.119.8.0/21
IP: 192.157.48.0/20
IP: 192.186.128.0/18
IP: 192.198.96.0/19
IP: 192.241.64.0/18
IP: 198.20.160.0/19
IP: 198.147.24.0/21
IP: 198.154.80.0/20
IP: 198.245.64.0/20
IP: 209.127.0.0 -- 209.127.48.255
IP: 209.127.50.0 -- 209.127.62.255
IP: 209.127.72.0/21
IP: 209.127.96.0/22
IP: 209.127.104.0 -- 209.127.127.255
IP: 209.127.136.0 -- 209.127.138.255
IP: 209.127.142.0 -- 209.127.151.255
IP: 209.127.176.0 -- 209.127.189.255
IP: 209.127.191.0 -- 209.127.192.255
IP: 209.127.194.0/24
IP: 209.127.196.0/24
IP: 209.127.198.0/24
IP: 209.127.223.0/24
IP: 209.127.228.0/23
IP: 209.127.242.0 -- 209.127.245.255
IP: 209.127.252.0/23
IP: 209.205.192.0/19
IP: 2607:4300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Oct 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:88:73:7f:0e:9a:59:36:34:4d:47:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Validity
Not Before: Oct 15 19:30:21 2025 GMT
Not After : Aug 29 00:45:37 2027 GMT
Subject: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:cc:a4:59:00:d5:ea:a9:b4:1c:f0:35:6e:
b3:9e:44:43:1f:8c:aa:13:d2:7a:d1:1e:65:c7:a5:
6a:bb:4e:bf:25:9a:45:fa:b3:f3:72:cf:80:12:3c:
49:7d:e0:9c:99:a9:b5:b5:f8:29:d3:a7:91:ab:17:
cd:f7:3e:ae:36:3c:8c:64:cd:59:62:5e:0c:cf:bb:
db:9e:59:09:40:a8:7d:c1:af:39:2f:14:4d:6c:6c:
d8:3e:c7:93:f5:e7:3a:7e:7a:a6:be:a8:32:7c:bd:
3b:ab:28:f7:4b:80:30:3a:03:7f:75:64:3b:b3:8a:
bf:9c:dc:bb:9d:c3:2b:f4:57:59:51:0f:34:24:ae:
37:d9:c7:03:1a:28:23:6a:84:c4:6d:17:7f:73:2c:
dc:7f:d8:08:a9:18:94:37:21:88:12:56:8d:5d:4b:
ac:c2:f5:be:92:38:3b:14:63:12:f0:48:9f:fe:2b:
13:d1:fd:8c:e1:a5:f9:bf:fe:22:40:10:bf:29:7c:
d8:e5:3e:3e:3c:d5:4c:14:81:3f:80:9b:9b:dc:12:
50:76:cd:15:16:36:45:9b:65:a5:f4:ce:b8:69:44:
c6:de:6a:c5:b2:a8:b1:a6:85:b1:eb:48:d4:91:c8:
d1:33:41:31:ef:fc:d8:04:ee:ae:61:83:2b:5e:ce:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
X509v3 Authority Key Identifier:
keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.128.0/19
23.229.0.0/17
23.236.128.0/17
67.220.176.0/20
68.209.0.0/18
69.4.80.0/20
69.58.0.0/20
72.57.64.0/18
107.151.0.0/19
108.175.160.0/20
152.232.0.0/16
192.119.8.0/21
192.157.48.0/20
192.186.128.0/18
192.198.96.0/19
192.241.64.0/18
198.20.160.0/19
198.147.24.0/21
198.154.80.0/20
198.245.64.0/20
209.127.0.0-209.127.48.255
209.127.50.0-209.127.62.255
209.127.72.0/21
209.127.96.0/22
209.127.104.0-209.127.127.255
209.127.136.0-209.127.138.255
209.127.142.0-209.127.151.255
209.127.176.0-209.127.189.255
209.127.191.0-209.127.192.255
209.127.194.0/24
209.127.196.0/24
209.127.198.0/24
209.127.223.0/24
209.127.228.0/23
209.127.242.0-209.127.245.255
209.127.252.0/23
209.205.192.0/19
IPv6:
2607:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55286
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:bb:32:ab:94:50:6a:66:70:d3:f8:97:fd:02:d5:b1:3d:c4:
c1:54:1c:7f:4b:ce:16:14:57:fd:73:ac:1d:18:f9:82:f3:72:
2a:c6:e7:33:bc:cb:46:bc:41:b7:15:c8:84:07:91:6b:c1:44:
75:66:6c:66:f6:d2:00:0b:72:50:3f:a2:06:d8:05:71:ca:b8:
bd:82:27:a9:32:dd:16:05:c8:86:57:99:c5:c0:d1:73:52:c8:
97:4e:0d:e3:39:45:2b:6e:10:3b:5d:64:1b:59:b2:3b:cb:1a:
eb:50:7d:96:c7:79:23:a2:62:e4:f7:95:d7:b9:2c:7b:6b:6a:
97:38:d5:45:16:9b:68:ef:f4:ef:58:a6:55:3e:56:43:9c:7c:
a6:3c:fc:3d:49:a6:f9:a5:b4:9b:5d:c8:90:cf:7d:b9:65:82:
ff:6c:7a:a5:53:5d:0d:87:3c:52:1c:fa:41:d3:33:97:80:5d:
cf:cc:28:34:05:91:9c:8f:2e:32:cc:b6:1f:d6:ba:8c:54:0a:
72:7a:de:5e:77:64:f0:48:3a:5c:6e:9f:80:6a:07:6d:d9:19:
ee:3d:15:41:51:e1:f4:1e:ca:af:73:6e:ab:6c:3a:c7:d0:89:
ed:e2:4b:ac:97:9b:85:54:3c:0c:5b:fc:88:b3:10:67:15:5a:
9c:a6:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:58:39 2025 by rpki-client