Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
File: 0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer (raw, json)
Hash identifier: HVpl8HQyCNqwu+jIOzTkHQXWop5Rhq481iK3oEq7eUc=
Subject key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584A9CF37E13D078230EEC6D5400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 23 Jul 2025 10:57:28 +0000
Certificate not after: Thu 14 Oct 2027 00:45:37 +0000
Subordinate resources: AS: 10667
AS: 11583
AS: 14033
AS: 14375 -- 14376
AS: 15016
AS: 18434
AS: 22410
AS: 25685
AS: 26460
AS: 30680
AS: 32483
AS: 32944
AS: 32970
AS: 42172
AS: 46203
AS: 46372
AS: 53556
AS: 54586
AS: 397705
IP: 63.141.160.0/19
IP: 66.97.167.0/24
IP: 69.36.16.0/20
IP: 70.34.64.0/20
IP: 147.249.0.0/16
IP: 156.55.0.0/16
IP: 162.251.208.0/22
IP: 168.162.0.0/16
IP: 170.132.0.0/16
IP: 192.82.228.0/24
IP: 192.88.5.0/24
IP: 192.88.51.0 -- 192.88.79.255
IP: 192.112.217.0/24
IP: 192.225.28.0/22
IP: 195.110.224.0/19
IP: 198.62.209.0 -- 198.62.211.255
IP: 198.84.8.0 -- 198.84.12.255
IP: 199.38.140.0/24
IP: 199.74.216.0/22
IP: 199.181.218.0/24
IP: 199.200.16.0 -- 199.200.27.255
IP: 199.249.154.0/24
IP: 204.124.95.0/24
IP: 204.130.32.0/19
IP: 205.141.240.0/20
IP: 206.71.16.0/20
IP: 206.197.39.0/24
IP: 208.74.144.0/22
IP: 208.75.4.0/22
IP: 209.243.64.0/18
IP: 216.189.224.0/19
IP: 2607:7400::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:9c:f3:7e:13:d0:78:23:0e:ec:6d:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Jul 23 10:57:28 2025 GMT
Not After : Oct 14 00:45:37 2027 GMT
Subject: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:a0:df:3c:cb:88:5b:a6:ab:f5:02:79:95:
63:3e:61:25:77:c8:2d:2e:05:a2:56:97:49:ca:f2:
27:8e:61:bc:d8:92:7c:f6:f4:7e:01:19:1e:ae:b7:
cf:bc:06:16:ea:72:a7:f3:2c:0e:df:e9:ce:86:52:
39:73:b2:ee:e7:5b:66:ab:af:52:3f:94:a0:1b:42:
03:93:30:f3:3e:83:47:11:b5:cb:81:37:f4:99:36:
32:b9:6b:26:fe:77:39:ad:a8:d9:d0:20:ce:0f:dd:
a6:06:62:d2:f1:0f:5f:d3:68:d9:42:2f:07:d9:5f:
8f:35:9f:ec:1a:17:69:84:dc:6e:59:cd:2f:93:0e:
62:4b:bd:a5:86:5b:56:5e:10:e8:8a:9b:15:45:cf:
5b:09:4c:c0:d6:d0:04:90:ba:ef:cf:f2:a4:e5:8b:
9d:92:01:49:9e:de:93:47:b4:36:20:6d:5c:a1:28:
32:93:b0:96:38:be:5f:98:87:dc:a2:6b:a1:83:11:
3b:76:55:20:63:d7:23:e7:f6:9d:72:cb:bb:61:50:
93:0d:a1:79:7d:6b:3e:a9:70:e8:52:7b:95:f2:ad:
d6:7d:19:96:1d:86:60:98:d5:12:78:ea:48:20:c4:
8d:34:dd:b4:52:6a:73:5d:9a:a6:37:ac:81:57:5e:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
63.141.160.0/19
66.97.167.0/24
69.36.16.0/20
70.34.64.0/20
147.249.0.0/16
156.55.0.0/16
162.251.208.0/22
168.162.0.0/16
170.132.0.0/16
192.82.228.0/24
192.88.5.0/24
192.88.51.0-192.88.79.255
192.112.217.0/24
192.225.28.0/22
195.110.224.0/19
198.62.209.0-198.62.211.255
198.84.8.0-198.84.12.255
199.38.140.0/24
199.74.216.0/22
199.181.218.0/24
199.200.16.0-199.200.27.255
199.249.154.0/24
204.124.95.0/24
204.130.32.0/19
205.141.240.0/20
206.71.16.0/20
206.197.39.0/24
208.74.144.0/22
208.75.4.0/22
209.243.64.0/18
216.189.224.0/19
IPv6:
2607:7400::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10667
11583
14033
14375-14376
15016
18434
22410
25685
26460
30680
32483
32944
32970
42172
46203
46372
53556
54586
397705
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:73:2a:e2:41:eb:8c:e1:88:23:ab:41:5b:61:84:c2:37:54:
41:2d:8b:6c:df:e9:7f:a4:42:d1:49:e5:49:8c:49:84:77:a0:
56:04:93:a2:ff:68:ee:95:80:4f:9a:a1:87:48:fe:c1:2e:84:
6c:00:bd:ab:55:3d:68:c5:85:6d:6f:42:8d:45:04:e4:d0:97:
ca:f0:af:ce:45:35:d1:67:76:e3:5a:dd:42:f9:80:7a:1c:bc:
d7:b2:36:8a:64:ec:bc:3f:58:49:52:d4:7e:f7:2e:0c:02:74:
14:25:90:5e:f2:e4:d8:8c:c6:68:c6:87:e7:d8:d9:9b:1a:c3:
98:52:2d:bb:3b:3e:34:d3:4f:2c:f3:6c:d9:c0:bf:63:08:d5:
8b:85:9f:0e:6e:cd:7f:34:3e:d8:1c:37:b9:5c:ec:57:7a:1b:
51:43:71:a1:57:40:a5:82:e2:89:c0:bc:61:fc:39:fe:05:70:
9a:7a:16:a2:58:06:72:bd:66:5c:94:70:d7:c5:90:91:35:af:
17:4d:ed:12:f7:42:34:73:2d:e0:de:1a:f6:de:c4:98:74:47:
f8:1d:74:e2:94:88:ca:e1:44:6a:cc:91:92:00:08:5d:9b:fa:
52:37:56:c9:cf:a8:85:61:3b:95:70:72:c0:2e:b3:92:ec:9f:
34:7f:4c:c0
-----BEGIN CERTIFICATE-----
MIIIQzCCByugAwIBAgIUAQ0Mn0MoWEqc834T0HgjDuxtVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI1MDcyMzEwNTcyOFoXDTI3MTAxNDAwNDUzN1owLzEtMCsGA1UEAxMk
MGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTliOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzKg3zzLiFumq/UCeZVjPmEld8gtLgWiVpdJ
yvInjmG82JJ89vR+ARkerrfPvAYW6nKn8ywO3+nOhlI5c7Lu51tmq69SP5SgG0ID
kzDzPoNHEbXLgTf0mTYyuWsm/nc5rajZ0CDOD92mBmLS8Q9f02jZQi8H2V+PNZ/s
GhdphNxuWc0vkw5iS72lhltWXhDoipsVRc9bCUzA1tAEkLrvz/Kk5YudkgFJnt6T
R7Q2IG1coSgyk7CWOL5fmIfcomuhgxE7dlUgY9cj5/adcsu7YVCTDaF5fWs+qXDo
UnuV8q3WfRmWHYZgmNUSeOpIIMSNNN20UmpzXZqmN6yBV14L3wIDAQABo4IFVTCC
BVEwHQYDVR0OBBYEFFcapSfsF5F3jHF5A3NiccVTF2RmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w
ZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBkM2E1Njk5LTNlYjgtNGVjYi04
MGE1LWU4NzYxYTE5Yjk3MS8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWEx
OWI5NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggECBggrBgEF
BQcBBwEB/wSB8jCB7zCB3QQCAAEwgdYDBAU/jaADBABCYacDBARFJBADBARGIkAD
AwCT+QMDAJw3AwQCovvQAwMAqKIDAwCqhAMEAMBS5AMEAMBYBTAMAwQAwFgzAwQE
wFhAAwQAwHDZAwQCwOEcAwQFw27gMAwDBADGPtEDBALGPtAwDAMEA8ZUCAMEAMZU
DAMEAMcmjAMEAsdK2AMEAMe12jAMAwQEx8gQAwQCx8gYAwQAx/maAwQAzHxfAwQF
zIIgAwQEzY3wAwQEzkcQAwQAzsUnAwQC0EqQAwQC0EsEAwQG0fNAAwQF2L3gMA0E
AgACMAcDBQAmB3QAMG8GCCsGAQUFBwEIAQH/BGAwXqBcMFoCAimrAgItPwICNtEw
CAICOCcCAjgoAgI6qAICSAICAleKAgJkVQICZ1wCAnfYAgJ+4wIDAICwAgMAgMoC
AwCkvAIDALR7AgMAtSQCAwDRNAIDANU6AgMGEYkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlXMq4kHrjOGI
I6tBW2GEwjdUQS2LbN/pf6RC0UnlSYxJhHegVgSTov9o7pWAT5qhh0j+wS6EbAC9
q1U9aMWFbW9CjUUE5NCXyvCvzkU10Wd241rdQvmAehy817I2imTsvD9YSVLUfvcu
DAJ0FCWQXvLk2IzGaMaH59jZmxrDmFItuzs+NNNPLPNs2cC/YwjVi4WfDm7NfzQ+
2Bw3uVzsV3obUUNxoVdApYLiicC8Yfw5/gVwmnoWolgGcr1mXJRw18WQkTWvF03t
EvdCNHMt4N4a9t7EmHRH+B104pSIyuFEasyRkgAIXZv6UjdWyc+ohWE7lXBywC6z
kuyfNH9MwA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 10:28:54 2025 by rpki-client