Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
File: c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer (raw, json)
Hash identifier: XGqHAk79rfn9KyRnEBwBde/yPfmZP66ayMbnG4RlFyw=
Subject key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial: 010D0C9F4328584B4344C592A817B25B1217A900
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 21 Sep 2025 00:45:25 +0000
Certificate not after: Sat 25 Dec 2027 01:45:25 +0000
Subordinate resources: AS: 20172
AS: 20362
AS: 20431
AS: 22547
AS: 26415
AS: 27544
AS: 29966
AS: 32409
AS: 32651
AS: 36616 -- 36632
AS: 40647
AS: 40717
AS: 396539 -- 396828
AS: 397193 -- 397212
IP: 64.6.66.0 -- 64.6.95.255
IP: 192.5.6.0/24
IP: 192.12.94.0/24
IP: 192.26.92.0/24
IP: 192.30.45.0 -- 192.30.49.255
IP: 192.31.80.0/24
IP: 192.33.14.0/24
IP: 192.34.234.0 -- 192.34.238.255
IP: 192.35.51.0/24
IP: 192.41.162.0/24
IP: 192.42.93.0/24
IP: 192.42.173.0 -- 192.42.178.255
IP: 192.43.172.0/24
IP: 192.48.79.0/24
IP: 192.52.178.0/24
IP: 192.54.112.0/24
IP: 192.55.83.0/24
IP: 192.58.128.0/24
IP: 192.68.126.0 -- 192.68.130.255
IP: 192.81.185.0 -- 192.81.189.255
IP: 192.82.133.0 -- 192.82.138.255
IP: 192.153.247.0/24
IP: 198.17.208.0/24
IP: 199.7.48.0/20
IP: 199.7.71.0 -- 199.7.76.255
IP: 199.7.78.0 -- 199.7.80.255
IP: 199.16.80.0/20
IP: 209.131.128.0/18
IP: 2001:500:120::/43
IP: 2001:500:3e5::/48
IP: 2001:500:30ff::/48
IP: 2001:500:4431::/48
IP: 2001:500:7967::/48
IP: 2001:500:856e::/48
IP: 2001:500:d937::/48
IP: 2001:500:ed30::/48
IP: 2001:501:8a29::/48
IP: 2001:501:b1f9::/48
IP: 2001:502:8cc::/48
IP: 2001:502:1ca1::/48
IP: 2001:502:7094::/48
IP: 2001:502:8c25::/48
IP: 2001:502:be98::/48
IP: 2001:502:cbe4::/48
IP: 2001:503:c27::/48
IP: 2001:503:d2d::/48
IP: 2001:503:231d::/48
IP: 2001:503:3227::/48
IP: 2001:503:39c1::/48
IP: 2001:503:4872::/48
IP: 2001:503:5419::/48
IP: 2001:503:5ae2::/48
IP: 2001:503:6810::/48
IP: 2001:503:7bbf::/48
IP: 2001:503:83eb::/48
IP: 2001:503:91ef::/48
IP: 2001:503:a83e::/48
IP: 2001:503:ba3e::/48
IP: 2001:503:bfb0::/48
IP: 2001:503:cc2c::/48
IP: 2001:503:d414::/48
IP: 2001:503:e8ef::/48
IP: 2001:503:eea3::/48
IP: 2001:503:f189::/48
IP: 2001:503:f261::/48
IP: 2001:503:f3da::/48
IP: 2001:503:ff39::/48
IP: 2620:0:5050::/48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Oct 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:43:44:c5:92:a8:17:b2:5b:12:17:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Validity
Not Before: Sep 21 00:45:25 2025 GMT
Not After : Dec 25 01:45:25 2027 GMT
Subject: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:9c:50:31:70:af:83:4c:00:c6:7b:22:5d:
a7:ac:e9:fc:e8:21:98:b3:32:5e:93:0b:c2:ac:bc:
09:8c:36:27:9b:cc:ef:b3:5d:5d:d1:dc:b6:53:38:
7b:fb:a6:d7:e2:7d:5e:58:d5:c0:44:1f:6b:cb:f4:
7f:d4:70:90:dc:1c:80:22:ba:2a:3d:1f:72:05:9a:
b8:6f:d0:55:ba:94:10:95:36:fa:84:a2:e8:7c:81:
cf:6a:1a:0d:e3:c8:7d:ae:f2:25:a5:ec:89:ef:1c:
09:fe:d2:4c:14:f0:61:7b:86:77:e1:07:9c:1d:12:
e7:a8:f6:37:2d:63:d5:97:17:24:12:6e:dd:c8:d7:
a9:57:6e:d6:f1:22:9d:76:25:ef:4b:c3:d9:cc:49:
49:84:1e:45:fc:36:3b:47:0d:24:d3:ab:c1:21:7a:
c4:34:82:55:7b:b6:8d:9f:5c:d4:f0:56:d0:6e:3c:
d5:b9:17:d1:75:dd:4a:b4:f6:59:b1:43:46:2c:b1:
a1:84:60:54:ab:1f:21:93:93:0d:1c:d6:bc:db:45:
75:4f:e0:c9:9b:4b:1f:08:f1:e7:80:22:86:f5:85:
6e:f0:ec:db:90:72:a1:23:ee:ce:73:39:4e:70:6c:
0f:c4:93:d5:60:d0:cb:fa:b4:e9:92:ef:6f:64:a2:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
X509v3 Authority Key Identifier:
keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.66.0-64.6.95.255
192.5.6.0/24
192.12.94.0/24
192.26.92.0/24
192.30.45.0-192.30.49.255
192.31.80.0/24
192.33.14.0/24
192.34.234.0-192.34.238.255
192.35.51.0/24
192.41.162.0/24
192.42.93.0/24
192.42.173.0-192.42.178.255
192.43.172.0/24
192.48.79.0/24
192.52.178.0/24
192.54.112.0/24
192.55.83.0/24
192.58.128.0/24
192.68.126.0-192.68.130.255
192.81.185.0-192.81.189.255
192.82.133.0-192.82.138.255
192.153.247.0/24
198.17.208.0/24
199.7.48.0/20
199.7.71.0-199.7.76.255
199.7.78.0-199.7.80.255
199.16.80.0/20
209.131.128.0/18
IPv6:
2001:500:120::/43
2001:500:3e5::/48
2001:500:30ff::/48
2001:500:4431::/48
2001:500:7967::/48
2001:500:856e::/48
2001:500:d937::/48
2001:500:ed30::/48
2001:501:8a29::/48
2001:501:b1f9::/48
2001:502:8cc::/48
2001:502:1ca1::/48
2001:502:7094::/48
2001:502:8c25::/48
2001:502:be98::/48
2001:502:cbe4::/48
2001:503:c27::/48
2001:503:d2d::/48
2001:503:231d::/48
2001:503:3227::/48
2001:503:39c1::/48
2001:503:4872::/48
2001:503:5419::/48
2001:503:5ae2::/48
2001:503:6810::/48
2001:503:7bbf::/48
2001:503:83eb::/48
2001:503:91ef::/48
2001:503:a83e::/48
2001:503:ba3e::/48
2001:503:bfb0::/48
2001:503:cc2c::/48
2001:503:d414::/48
2001:503:e8ef::/48
2001:503:eea3::/48
2001:503:f189::/48
2001:503:f261::/48
2001:503:f3da::/48
2001:503:ff39::/48
2620:0:5050::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20172
20362
20431
22547
26415
27544
29966
32409
32651
36616-36632
40647
40717
396539-396828
397193-397212
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:48:e1:d8:0b:28:38:eb:f3:14:16:a9:76:85:4c:6f:45:7b:
d4:45:30:84:d5:2f:55:23:52:f1:22:eb:61:7c:aa:c1:55:f2:
a9:4d:45:ce:f2:94:1e:f2:0a:1a:ca:ee:91:28:49:31:ad:b8:
7a:af:f6:47:ba:14:1b:80:8d:94:20:3e:2c:ba:88:54:29:19:
87:b7:7e:d2:cd:8a:d6:7c:bb:1c:1d:eb:e6:0e:84:48:ac:8e:
9e:4b:e4:7d:c0:3c:97:79:d5:73:ef:05:2b:b2:f1:70:d2:f7:
e9:7f:77:1d:9b:67:29:f9:fc:48:f8:08:3c:14:7b:62:c0:90:
a4:03:fa:8c:64:cf:23:91:12:99:4c:a0:4c:cf:a9:86:15:07:
65:c3:47:96:0a:8e:b9:5f:2a:83:9b:68:fb:a2:bf:48:c9:1c:
ed:2d:b1:ae:ce:4f:13:1c:a3:3a:ae:9c:b5:fb:e5:26:1f:04:
83:47:7b:8e:d1:7c:18:76:ea:77:e3:c2:ea:e1:8d:b7:c2:76:
00:66:8e:c8:92:2e:b6:82:92:d4:17:8e:6b:22:63:32:17:fb:
38:0f:88:9c:86:2b:1a:bc:e0:c6:44:37:c7:d6:5e:bc:a0:9a:
2b:90:f4:97:73:28:19:b0:cd:64:e7:7e:83:ad:a3:47:80:95:
2c:b6:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:44:01 2025 by rpki-client