Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
File: 1f1cee84-663d-43bc-bc24-3b0050eff749.cer (raw, json)
Hash identifier: P2dL0DZ+vJG+pkCnrtRFvdEVxTy9EhbsCHy5P2sknf0=
Subject key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584B6E7B754125BA4EA32A1E9716
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 06 Oct 2025 12:15:22 +0000
Certificate not after: Tue 02 Mar 2027 01:45:33 +0000
Subordinate resources: AS: 13672 -- 13675
AS: 13977
AS: 14154
AS: 17093
AS: 22647
AS: 32645
IP: 64.222.64.0 -- 64.222.255.255
IP: 64.223.64.0 -- 64.223.255.255
IP: 66.243.192.0 -- 66.243.211.255
IP: 66.243.216.0 -- 66.243.222.255
IP: 66.243.224.0/24
IP: 66.243.227.0 -- 66.243.231.255
IP: 67.158.128.0/18
IP: 68.237.128.0/20
IP: 68.238.48.0/20
IP: 69.50.32.0/19
IP: 69.53.0.0/17
IP: 70.8.0.0/16
IP: 70.16.64.0/20
IP: 70.16.96.0/20
IP: 70.16.192.0/19
IP: 70.20.32.0/19
IP: 70.105.224.0/19
IP: 70.109.128.0/18
IP: 71.161.64.0 -- 71.161.75.255
IP: 71.161.80.0 -- 71.161.127.255
IP: 71.161.192.0/19
IP: 71.168.64.0/18
IP: 71.169.128.0/18
IP: 71.173.64.0/19
IP: 71.181.0.0/17
IP: 71.241.128.0/20
IP: 71.241.192.0/19
IP: 71.254.0.0/20
IP: 71.254.96.0/20
IP: 71.255.112.0 -- 71.255.159.255
IP: 72.64.0.0/20
IP: 72.65.96.0/19
IP: 72.71.192.0/18
IP: 72.73.64.0/18
IP: 72.87.48.0/20
IP: 72.92.128.0/19
IP: 72.95.80.0 -- 72.95.127.255
IP: 74.209.0.0/21
IP: 74.209.12.0 -- 74.209.51.255
IP: 74.209.56.0/21
IP: 163.252.0.0/16
IP: 209.105.128.0 -- 209.105.179.255
IP: 209.105.188.0/22
IP: 216.212.0.0/17
IP: 216.227.0.0 -- 216.227.5.255
IP: 216.227.8.0 -- 216.227.39.255
IP: 216.227.56.0 -- 216.227.99.255
IP: 216.227.118.0 -- 216.227.127.255
IP: 2604:6e00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Oct 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:6e:7b:75:41:25:ba:4e:a3:2a:1e:97:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Oct 6 12:15:22 2025 GMT
Not After : Mar 2 01:45:33 2027 GMT
Subject: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:10:b6:40:15:3b:4b:81:5e:4d:94:73:2d:
95:a9:ed:05:bf:92:34:28:bf:23:85:51:ec:f6:a0:
c9:ae:fd:38:9a:6e:de:79:f2:a7:41:b2:be:58:0f:
cc:b5:f1:de:58:80:f7:3c:f4:c0:ed:21:f0:49:72:
41:26:cf:6e:fb:43:05:8d:ec:3b:a0:63:df:bd:52:
04:3b:a5:41:25:bc:04:37:ee:2c:c9:1f:59:4f:e9:
8e:5b:2a:69:ca:62:7e:1d:1f:2f:1e:d0:7d:0d:23:
d9:db:b5:03:21:8b:79:55:bf:6d:21:d3:03:13:b4:
d7:78:57:77:18:c0:bb:0d:26:41:c6:68:a5:09:37:
aa:1a:b2:f9:e0:2a:e3:82:c4:09:88:53:3a:3b:00:
96:90:ec:52:86:6c:95:ac:dd:ff:22:92:19:bb:ae:
16:89:23:77:d2:45:e9:02:7a:7b:7c:4e:05:10:28:
d0:99:60:19:60:70:86:50:67:d4:66:fb:ec:11:07:
a7:34:f8:74:e0:66:71:57:2a:16:8d:f2:a6:f8:c6:
6c:5f:3c:c1:82:eb:07:5a:c2:3c:88:fe:4d:bf:43:
17:40:0f:51:cf:68:e0:1e:66:d4:02:41:4f:9e:25:
1e:2f:29:3f:29:a5:20:e3:cc:fa:cf:aa:0e:6e:c2:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.222.64.0-64.222.255.255
64.223.64.0-64.223.255.255
66.243.192.0-66.243.211.255
66.243.216.0-66.243.222.255
66.243.224.0/24
66.243.227.0-66.243.231.255
67.158.128.0/18
68.237.128.0/20
68.238.48.0/20
69.50.32.0/19
69.53.0.0/17
70.8.0.0/16
70.16.64.0/20
70.16.96.0/20
70.16.192.0/19
70.20.32.0/19
70.105.224.0/19
70.109.128.0/18
71.161.64.0-71.161.75.255
71.161.80.0-71.161.127.255
71.161.192.0/19
71.168.64.0/18
71.169.128.0/18
71.173.64.0/19
71.181.0.0/17
71.241.128.0/20
71.241.192.0/19
71.254.0.0/20
71.254.96.0/20
71.255.112.0-71.255.159.255
72.64.0.0/20
72.65.96.0/19
72.71.192.0/18
72.73.64.0/18
72.87.48.0/20
72.92.128.0/19
72.95.80.0-72.95.127.255
74.209.0.0/21
74.209.12.0-74.209.51.255
74.209.56.0/21
163.252.0.0/16
209.105.128.0-209.105.179.255
209.105.188.0/22
216.212.0.0/17
216.227.0.0-216.227.5.255
216.227.8.0-216.227.39.255
216.227.56.0-216.227.99.255
216.227.118.0-216.227.127.255
IPv6:
2604:6e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13672-13675
13977
14154
17093
22647
32645
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:3e:54:9c:f6:7a:ee:92:cb:cf:c4:16:49:0c:5c:65:94:71:
6f:c5:e3:c5:e1:f9:77:f7:f3:a6:a0:44:59:7a:b2:c8:59:42:
72:7b:ed:79:b6:06:ae:c2:0e:bb:1a:62:f3:ae:39:d0:43:65:
4b:93:32:88:2c:2e:90:5e:39:5e:1f:59:c2:5f:0f:cd:30:f3:
4d:2b:d9:9f:00:1f:02:27:df:3c:63:d2:8e:96:d0:8b:c3:21:
0e:15:53:d0:2a:1d:1b:ee:22:13:9b:93:d8:42:6a:e2:ee:07:
98:9f:8e:15:bf:b5:e9:62:af:c0:b3:de:c6:31:19:e4:35:36:
0c:5e:f5:94:92:6f:2b:6b:13:69:7c:45:3b:75:8e:f4:23:78:
e8:99:7a:a9:d4:3b:bd:aa:0d:19:e5:90:e3:17:0a:f8:bd:e7:
b2:d1:aa:c0:da:69:aa:16:32:b9:8c:de:ed:58:f1:9e:3e:80:
c2:d3:96:96:f6:4d:29:5e:56:83:7c:e8:0e:43:e1:a0:9d:92:
a4:49:38:3d:26:80:d9:ef:a9:3f:8c:53:2d:eb:5a:da:d2:59:
f4:94:34:fc:88:86:8e:02:36:3f:1c:da:41:cb:79:a4:3c:90:
cc:e3:b2:65:71:0b:d8:16:13:bd:41:d4:5c:3c:d2:3c:74:c9:
df:0a:e8:8b
-----BEGIN CERTIFICATE-----
MIIIyDCCB7CgAwIBAgIUAQ0Mn0MoWEtue3VBJbpOoyoelxYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI1MTAwNjEyMTUyMloXDTI3MDMwMjAxNDUzM1owLzEtMCsGA1UEAxMk
MWYxY2VlODQtNjYzZC00M2JjLWJjMjQtM2IwMDUwZWZmNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn20QtkAVO0uBXk2Ucy2Vqe0Fv5I0KL8jhVHs
9qDJrv04mm7eefKnQbK+WA/MtfHeWID3PPTA7SHwSXJBJs9u+0MFjew7oGPfvVIE
O6VBJbwEN+4syR9ZT+mOWyppymJ+HR8vHtB9DSPZ27UDIYt5Vb9tIdMDE7TXeFd3
GMC7DSZBxmilCTeqGrL54CrjgsQJiFM6OwCWkOxShmyVrN3/IpIZu64WiSN30kXp
Anp7fE4FECjQmWAZYHCGUGfUZvvsEQenNPh04GZxVyoWjfKm+MZsXzzBgusHWsI8
iP5Nv0MXQA9Rz2jgHmbUAkFPniUeLyk/KaUg48z6z6oObsIvqwIDAQABo4IF2jCC
BdYwHQYDVR0OBBYEFNj44D0VOaRUde7rEjcQ63sZusbaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
ZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBlZmY3NDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmMWNlZTg0LTY2M2QtNDNiYy1i
YzI0LTNiMDA1MGVmZjc0OS8xZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBl
ZmY3NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwggHDBggrBgEF
BQcBBwEB/wSCAbIwggGuMIIBmwQCAAEwggGTMAsDBAZA3kADAwBA3jALAwQGQN9A
AwMFQMAwDAMEBkLzwAMEAkLz0DAMAwQDQvPYAwQAQvPeAwQAQvPgMAwDBABC8+MD
BANC8+ADBAZDnoADBARE7YADBARE7jADBAVFMiADBAdFNQADAwBGCAMEBEYQQAME
BEYQYAMEBUYQwAMEBUYUIAMEBUZp4AMEBkZtgDAMAwQGR6FAAwQCR6FIMAwDBARH
oVADBAdHoQADBAVHocADBAZHqEADBAZHqYADBAVHrUADBAdHtQADBARH8YADBAVH
8cADBARH/gADBARH/mAwDAMEBEf/cAMEBUf/gAMEBEhAAAMEBUhBYAMEBkhHwAME
BkhJQAMEBEhXMAMEBUhcgDAMAwQESF9QAwQHSF8AAwQDStEAMAwDBAJK0QwDBAJK
0TADBANK0TgDAwCj/DAMAwQH0WmAAwQC0WmwAwQC0Wm8AwQH2NQAMAsDAwDY4wME
AdjjBDAMAwQD2OMIAwQD2OMgMAwDBAPY4zgDBALY42AwDAMEAdjjdgMEB9jjADAN
BAIAAjAHAwUAJgRuADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeMAgCAjVoAgI1awIC
NpkCAjdKAgJCxQICWHcCAn+FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGU+VJz2eu6Sy8/EFkkMXGWUcW/F
48Xh+Xf386agRFl6sshZQnJ77Xm2Bq7CDrsaYvOuOdBDZUuTMogsLpBeOV4fWcJf
D80w800r2Z8AHwIn3zxj0o6W0IvDIQ4VU9AqHRvuIhObk9hCauLuB5ifjhW/teli
r8Cz3sYxGeQ1Ngxe9ZSSbytrE2l8RTt1jvQjeOiZeqnUO72qDRnlkOMXCvi957LR
qsDaaaoWMrmM3u1Y8Z4+gMLTlpb2TSleVoN86A5D4aCdkqRJOD0mgNnvqT+MUy3r
WtrSWfSUNPyIho4CNj8c2kHLeaQ8kMzjsmVxC9gWE71B1Fw80jx0yd8K6Is=
-----END CERTIFICATE-----
Generated at Sat Oct 11 09:16:56 2025 by rpki-client