Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
File: 4e95a28e-27fe-479a-b086-2cc9809d54f6.cer (raw, json)
Hash identifier: al4Ra5qiyp1GM7HrDletNccHqMrRHCBjBSMCAmIGdl0=
Subject key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584B513A2F8A4812C49445E0B400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Sep 2025 00:45:25 +0000
Certificate not after: Thu 30 Dec 2027 01:45:25 +0000
Subordinate resources: AS: 6161
AS: 7015 -- 7016
AS: 7725
AS: 7757
AS: 7853
AS: 7922
AS: 11025
AS: 13367
AS: 13385
AS: 14668
AS: 16748
AS: 20214
AS: 21508
AS: 22258
AS: 22909
AS: 23253
AS: 23266
AS: 33287
AS: 33351
AS: 33489 -- 33491
AS: 33542
AS: 33650 -- 33668
AS: 36196
AS: 36377
AS: 36732 -- 36733
AS: 53297
AS: 393232
AS: 395974
AS: 395976
AS: 395980
AS: 396017
AS: 396019
AS: 396021
AS: 396415
IP: 23.24.0.0/15
IP: 23.30.0.0/15
IP: 23.68.0.0/14
IP: 24.0.0.0 -- 24.23.255.255
IP: 24.30.0.0/17
IP: 24.34.0.0/16
IP: 24.40.0.0 -- 24.40.79.255
IP: 24.60.0.0/14
IP: 24.91.0.0/16
IP: 24.98.0.0/15
IP: 24.104.0.0 -- 24.104.159.255
IP: 24.118.0.0/16
IP: 24.124.128.0 -- 24.129.127.255
IP: 24.130.0.0/15
IP: 24.147.0.0/16
IP: 24.149.128.0/17
IP: 24.153.64.0/19
IP: 24.218.0.0/16
IP: 24.245.0.0/18
IP: 50.73.0.0/16
IP: 50.76.0.0/14
IP: 50.128.0.0/9
IP: 64.56.32.0/19
IP: 64.78.64.0/18
IP: 64.139.64.0/19
IP: 64.235.160.0/19
IP: 65.34.128.0/17
IP: 65.96.0.0 -- 65.97.31.255
IP: 66.30.0.0/15
IP: 66.41.0.0/16
IP: 66.56.0.0/18
IP: 66.176.0.0/15
IP: 66.208.192.0/18
IP: 66.229.0.0/16
IP: 66.240.0.0/18
IP: 67.160.0.0/11
IP: 68.32.0.0/11
IP: 68.80.0.0/13
IP: 69.136.0.0/13
IP: 69.180.0.0/15
IP: 69.240.0.0/12
IP: 70.88.0.0/14
IP: 71.24.0.0/14
IP: 71.56.0.0/13
IP: 71.192.0.0/12
IP: 71.224.0.0/12
IP: 72.55.0.0/17
IP: 73.0.0.0/8
IP: 74.16.0.0/12
IP: 74.81.128.0/19
IP: 74.92.0.0/14
IP: 75.64.0.0 -- 75.75.191.255
IP: 75.144.0.0/13
IP: 76.16.0.0/12
IP: 76.96.0.0 -- 76.159.255.255
IP: 96.64.0.0 -- 96.124.255.255
IP: 96.128.0.0 -- 96.223.255.255
IP: 98.32.0.0/11
IP: 98.192.0.0/10
IP: 107.0.0.0 -- 107.5.255.255
IP: 108.171.224.0/20
IP: 162.17.0.0/16
IP: 162.148.0.0/14
IP: 169.152.0.0/16
IP: 172.244.0.0/16
IP: 173.8.0.0/13
IP: 173.160.0.0/13
IP: 174.48.0.0/12
IP: 174.160.0.0/11
IP: 184.108.0.0 -- 184.127.255.255
IP: 198.0.0.0/16
IP: 198.137.252.0/23
IP: 199.182.100.0/22
IP: 204.11.116.0/22
IP: 207.223.0.0/20
IP: 208.39.128.0/18
IP: 208.110.192.0/19
IP: 209.23.192.0/18
IP: 216.45.128.0/17
IP: 2001:558::/29
IP: 2601::/20
IP: 2603:2000:: -- 2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
IP: 2604:6a00::/32
IP: 2620:fd:8000::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:51:3a:2f:8a:48:12:c4:94:45:e0:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Sep 26 00:45:25 2025 GMT
Not After : Dec 30 01:45:25 2027 GMT
Subject: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:8c:51:3c:d3:13:61:77:7f:4c:f9:9f:74:
1f:32:cf:0a:89:fa:5c:a0:ad:59:ab:4a:02:8d:45:
03:03:f4:98:3a:19:1e:a0:06:7b:16:8a:28:f0:00:
11:71:10:87:3e:78:50:6d:f8:54:1f:a1:02:b4:33:
e1:43:64:4e:0c:5c:94:53:d6:14:b0:bb:a9:2e:f6:
95:1d:12:54:76:26:1c:90:01:00:2f:df:ed:7f:0a:
68:bb:e5:e9:dc:c6:41:92:a1:85:67:46:47:a9:ef:
b0:cb:1e:a4:77:be:d5:d4:13:41:be:63:67:c6:76:
9f:bf:11:df:75:58:9f:93:00:0e:07:7c:99:e8:ba:
22:6d:00:62:47:fa:fa:92:21:5e:9f:e0:23:4b:15:
a5:14:21:92:ba:a7:d4:a9:f8:7e:d5:0f:1b:31:4f:
a5:ca:d6:6e:75:97:ff:e5:0d:e7:a2:c6:9c:1d:70:
05:9e:47:ac:18:eb:23:23:31:4f:e9:5c:f2:10:1d:
e0:f6:26:cc:86:e4:44:90:ed:89:89:68:e0:0c:04:
f7:80:d2:96:17:2b:c9:08:a3:4e:d3:9d:4a:87:bb:
68:3a:35:2e:e5:f9:9d:b9:8b:46:a6:fe:3d:bd:d3:
73:4f:dc:ec:93:92:dc:a5:d1:8c:a8:66:79:7c:b9:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.24.0.0/15
23.30.0.0/15
23.68.0.0/14
24.0.0.0-24.23.255.255
24.30.0.0/17
24.34.0.0/16
24.40.0.0-24.40.79.255
24.60.0.0/14
24.91.0.0/16
24.98.0.0/15
24.104.0.0-24.104.159.255
24.118.0.0/16
24.124.128.0-24.129.127.255
24.130.0.0/15
24.147.0.0/16
24.149.128.0/17
24.153.64.0/19
24.218.0.0/16
24.245.0.0/18
50.73.0.0/16
50.76.0.0/14
50.128.0.0/9
64.56.32.0/19
64.78.64.0/18
64.139.64.0/19
64.235.160.0/19
65.34.128.0/17
65.96.0.0-65.97.31.255
66.30.0.0/15
66.41.0.0/16
66.56.0.0/18
66.176.0.0/15
66.208.192.0/18
66.229.0.0/16
66.240.0.0/18
67.160.0.0/11
68.32.0.0/11
68.80.0.0/13
69.136.0.0/13
69.180.0.0/15
69.240.0.0/12
70.88.0.0/14
71.24.0.0/14
71.56.0.0/13
71.192.0.0/12
71.224.0.0/12
72.55.0.0/17
73.0.0.0/8
74.16.0.0/12
74.81.128.0/19
74.92.0.0/14
75.64.0.0-75.75.191.255
75.144.0.0/13
76.16.0.0/12
76.96.0.0-76.159.255.255
96.64.0.0-96.124.255.255
96.128.0.0-96.223.255.255
98.32.0.0/11
98.192.0.0/10
107.0.0.0-107.5.255.255
108.171.224.0/20
162.17.0.0/16
162.148.0.0/14
169.152.0.0/16
172.244.0.0/16
173.8.0.0/13
173.160.0.0/13
174.48.0.0/12
174.160.0.0/11
184.108.0.0-184.127.255.255
198.0.0.0/16
198.137.252.0/23
199.182.100.0/22
204.11.116.0/22
207.223.0.0/20
208.39.128.0/18
208.110.192.0/19
209.23.192.0/18
216.45.128.0/17
IPv6:
2001:558::/29
2601::/20
2603:2000::-2603:30ff:ffff:ffff:ffff:ffff:ffff:ffff
2604:6a00::/32
2620:fd:8000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6161
7015-7016
7725
7757
7853
7922
11025
13367
13385
14668
16748
20214
21508
22258
22909
23253
23266
33287
33351
33489-33491
33542
33650-33668
36196
36377
36732-36733
53297
393232
395974
395976
395980
396017
396019
396021
396415
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:45:4c:45:07:51:9a:f7:a6:b4:e2:13:31:40:3e:fe:a4:4d:
93:67:44:e4:d1:93:0d:61:fc:9e:74:27:bf:47:1e:cd:1a:40:
77:ce:c8:46:b7:56:06:96:40:a1:dd:78:23:97:25:48:27:98:
17:3c:df:40:b0:7b:56:b4:fa:89:88:7b:67:88:65:74:89:f1:
69:8f:14:43:39:b3:f5:32:7d:23:ea:8f:e0:ec:c5:41:10:3d:
d3:ef:bf:04:b3:02:10:68:b9:d6:14:f5:03:f8:32:19:1d:ac:
48:f6:bf:ce:92:69:ee:26:37:b6:a7:6f:d9:7c:f9:b5:96:ca:
f7:39:2f:52:06:82:92:08:97:05:0c:ad:0b:e9:18:d4:c5:96:
f0:fb:ef:b1:31:77:22:ad:c0:81:96:ea:a0:7a:68:c7:2c:f3:
f2:2b:2e:e6:71:7f:dc:07:af:4c:5d:f1:1f:59:29:9d:1b:a6:
88:36:2f:13:db:20:67:2e:5a:ff:70:96:f8:4c:db:23:1f:2d:
e5:25:aa:60:10:76:2d:05:6e:9b:01:c4:cd:62:21:74:1e:3c:
23:3a:f7:d2:99:42:a3:77:06:71:07:e1:82:5e:c2:9b:05:4d:
b4:95:5e:f0:e0:f0:10:d0:bc:7d:5f:73:3c:88:5f:9a:0e:1a:
67:d9:bf:a5
-----BEGIN CERTIFICATE-----
MIIJ5jCCCM6gAwIBAgIUAQ0Mn0MoWEtROi+KSBLElEXgtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI1MDkyNjAwNDUyNVoXDTI3MTIzMDAxNDUyNVowLzEtMCsGA1UEAxMk
NGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1NGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lGMUTzTE2F3f0z5n3QfMs8KifpcoK1Zq0oC
jUUDA/SYOhkeoAZ7Fooo8AARcRCHPnhQbfhUH6ECtDPhQ2RODFyUU9YUsLupLvaV
HRJUdiYckAEAL9/tfwpou+Xp3MZBkqGFZ0ZHqe+wyx6kd77V1BNBvmNnxnafvxHf
dVifkwAOB3yZ6LoibQBiR/r6kiFen+AjSxWlFCGSuqfUqfh+1Q8bMU+lytZudZf/
5Q3nosacHXAFnkesGOsjIzFP6VzyEB3g9ibMhuREkO2JiWjgDAT3gNKWFyvJCKNO
051Kh7toOjUu5fmduYtGpv49vdNzT9zsk5LcpdGMqGZ5fLmO2QIDAQABo4IG+DCC
BvQwHQYDVR0OBBYEFFVDKDErohHpDGMqa8F+DdaSdj5hMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80
ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlOTVhMjhlLTI3ZmUtNDc5YS1i
MDg2LTJjYzk4MDlkNTRmNi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5
ZDU0ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwggJGBggrBgEF
BQcBBwEB/wSCAjUwggIxMIIB+gQCAAEwggHyAwMBFxgDAwEXHgMDAhdEMAkDAgMY
AwMDGBADBAcYHgADAwAYIjALAwMDGCgDBAQYKEADAwIYPAMDABhbAwMBGGIwCwMD
AxhoAwQFGGiAAwMAGHYwDAMEBxh8gAMEBxiBAAMDARiCAwMAGJMDBAcYlYADBAUY
mUADAwAY2gMEBhj1AAMDADJJAwMCMkwDAwcygAMEBUA4IAMEBkBOQAMEBUCLQAME
BUDroAMEB0EigDALAwMFQWADBAVBYQADAwFCHgMDAEIpAwQGQjgAAwMBQrADBAZC
0MADAwBC5QMEBkLwAAMDBUOgAwMFRCADAwNEUAMDA0WIAwMBRbQDAwRF8AMDAkZY
AwMCRxgDAwNHOAMDBEfAAwMER+ADBAdINwADAgBJAwMEShADBAVKUYADAwJKXDAL
AwMGS0ADBAZLS4ADAwNLkAMDBEwQMAoDAwVMYAMDBUyAMAoDAwZgQAMDAGB8MAoD
AwdggAMDBWDAAwMFYiADAwZiwDAJAwIAawMDAWsEAwQEbKvgAwMAohEDAwKilAMD
AKmYAwMArPQDAwOtCAMDA62gAwMErjADAwWuoDAKAwMCuGwDAwe4AAMDAMYAAwQB
xon8AwQCx7ZkAwQCzAt0AwQEz98AAwQG0CeAAwQF0G7AAwQG0RfAAwQH2C2AMDEE
AgACMCsDBQMgAQVYAwQEJgEAMAwDBAUmAyADBAAmAzADBQAmBGoAAwcAJiAA/YAA
MIHNBggrBgEFBQcBCAEB/wSBvTCBuqCBtzCBtAICGBEwCAICG2cCAhtoAgIeLQIC
Hk0CAh6tAgIe8gICKxECAjQ3AgI0SQICOUwCAkFsAgJO9gICVAQCAlbyAgJZfQIC
WtUCAlriAgMAggcCAwCCRzAKAgMAgtECAwCC0wIDAIMGMAoCAwCDcgIDAIOEAgMA
jWQCAwCOGTAKAgMAj3wCAwCPfQIDANAxAgMGABACAwYKxgIDBgrIAgMGCswCAwYK
8QIDBgrzAgMGCvUCAwYMfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCORUxFB1Ga96a04hMxQD7+pE2TZ0Tk
0ZMNYfyedCe/Rx7NGkB3zshGt1YGlkCh3XgjlyVIJ5gXPN9AsHtWtPqJiHtniGV0
ifFpjxRDObP1Mn0j6o/g7MVBED3T778EswIQaLnWFPUD+DIZHaxI9r/OkmnuJje2
p2/ZfPm1lsr3OS9SBoKSCJcFDK0L6RjUxZbw+++xMXcircCBluqgemjHLPPyKy7m
cX/cB69MXfEfWSmdG6aINi8T2yBnLlr/cJb4TNsjHy3lJapgEHYtBW6bAcTNYiF0
HjwjOvfSmUKjdwZxB+GCXsKbBU20lV7w4PAQ0Lx9X3M8iF+aDhpn2b+l
-----END CERTIFICATE-----
Generated at Thu Oct 9 11:44:05 2025 by rpki-client