Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
File: 69686900-f201-4b2c-a1c7-afb725abe47f.cer (raw, json)
Hash identifier: CxA5SWwuunkoAdG3MDdzWASIiKuDxd/IMujQbOLkAiE=
Subject key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial: 010D0C9F4328584B56CF8DB86A425EE0B9C9DDC8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 28 Sep 2025 00:45:24 +0000
Certificate not after: Sat 01 Jan 2028 01:45:24 +0000
Subordinate resources: AS: 6502
AS: 7385
AS: 7395
AS: 7845
AS: 12003
AS: 14342
AS: 22936
AS: 29983
AS: 32016
IP: 63.135.192.0/19
IP: 64.16.0.0/18
IP: 64.42.0.0/17
IP: 64.62.0.0/17
IP: 64.65.128.0/18
IP: 64.122.0.0 -- 64.122.36.255
IP: 64.122.38.0 -- 64.122.127.255
IP: 64.122.129.0 -- 64.122.255.255
IP: 66.182.0.0/18
IP: 66.213.192.0/18
IP: 66.224.0.0/16
IP: 67.50.0.0 -- 67.50.129.255
IP: 67.50.132.0 -- 67.51.255.255
IP: 67.136.0.0/14
IP: 68.178.0.0/17
IP: 69.2.224.0/19
IP: 69.88.64.0/18
IP: 69.164.160.0/20
IP: 70.96.0.0 -- 70.96.203.255
IP: 70.96.208.0 -- 70.96.219.255
IP: 70.96.224.0 -- 70.97.85.255
IP: 70.97.88.0 -- 70.97.133.255
IP: 70.97.136.0 -- 70.97.175.255
IP: 70.98.0.0/21
IP: 70.98.16.0 -- 70.98.99.255
IP: 70.98.102.0 -- 70.98.108.255
IP: 70.98.110.0 -- 70.98.159.255
IP: 70.98.161.0 -- 70.98.220.255
IP: 70.98.223.0 -- 70.99.71.255
IP: 70.99.80.0 -- 70.99.103.255
IP: 70.99.112.0 -- 70.99.250.255
IP: 70.99.252.0/22
IP: 70.102.0.0/15
IP: 72.11.64.0/18
IP: 72.25.128.0/18
IP: 76.164.0.0 -- 76.164.10.255
IP: 76.164.12.0 -- 76.164.14.255
IP: 76.164.16.0 -- 76.164.47.255
IP: 76.164.50.0/24
IP: 76.164.54.0/23
IP: 76.164.58.0/24
IP: 76.164.62.0/24
IP: 162.211.20.0/22
IP: 192.195.24.0/22
IP: 199.48.48.0/22
IP: 204.11.200.0/21
IP: 204.130.255.0/24
IP: 207.173.0.0/16
IP: 207.190.128.0/19
IP: 208.79.144.0/21
IP: 208.186.0.0 -- 208.186.203.255
IP: 208.186.206.0 -- 208.187.43.255
IP: 208.187.46.0 -- 208.187.115.255
IP: 208.187.118.0/23
IP: 208.187.124.0 -- 208.187.255.255
IP: 209.63.0.0/16
IP: 209.150.192.0/19
IP: 209.210.0.0/16
IP: 216.104.64.0/20
IP: 216.173.192.0/19
IP: 216.174.192.0/18
IP: 216.185.160.0/19
IP: 216.187.128.0/18
IP: 216.190.0.0/16
IP: 216.210.128.0/17
IP: 2607:f0d8::/29
IP: 2607:fbf8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 12 Oct 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:56:cf:8d:b8:6a:42:5e:e0:b9:c9:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Validity
Not Before: Sep 28 00:45:24 2025 GMT
Not After : Jan 1 01:45:24 2028 GMT
Subject: CN=69686900-f201-4b2c-a1c7-afb725abe47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e8:8b:17:ec:5f:e5:35:25:2b:e3:0d:8d:31:
96:7f:cf:e2:1a:6e:b6:0a:51:1b:b1:cd:04:f3:7d:
50:3f:b6:ab:c0:fc:05:c6:5a:1f:e9:6d:b7:98:ad:
a7:63:ff:8b:02:e0:c7:11:1b:ac:b3:1f:ce:07:40:
6b:f7:5b:08:00:07:1f:bf:6a:f5:e8:0f:9f:de:9b:
e3:af:b9:9c:72:8a:08:18:2a:94:5a:87:4d:84:0d:
97:32:16:5b:a1:93:4f:5e:dd:b5:c5:73:f5:89:90:
7d:d6:ff:bc:4c:fe:0f:c3:ca:45:00:39:b5:62:6c:
84:ad:61:a6:04:09:a6:fb:7b:34:16:8c:f9:3e:38:
00:c0:54:57:ea:ff:30:b9:2f:d7:e3:83:91:da:88:
50:6c:04:56:b8:14:ad:0c:db:5a:21:68:30:fc:33:
f7:cd:03:e2:58:e8:f0:96:ec:ff:5b:b7:ce:dd:d5:
64:b3:6a:6f:64:38:29:45:41:a5:fe:14:cd:2d:61:
a6:11:59:e6:92:00:c0:75:1c:4d:0b:cb:fe:08:4b:
65:b0:4b:e5:bd:26:47:7e:42:66:db:7f:d6:f8:02:
8c:57:09:92:b5:5c:1f:b1:4b:b7:2e:6c:04:5e:c8:
2b:38:41:15:da:ef:85:7b:80:29:0f:88:9f:2e:84:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
X509v3 Authority Key Identifier:
keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
sbgp-ipAddrBlock: critical
IPv4:
63.135.192.0/19
64.16.0.0/18
64.42.0.0/17
64.62.0.0/17
64.65.128.0/18
64.122.0.0-64.122.36.255
64.122.38.0-64.122.127.255
64.122.129.0-64.122.255.255
66.182.0.0/18
66.213.192.0/18
66.224.0.0/16
67.50.0.0-67.50.129.255
67.50.132.0-67.51.255.255
67.136.0.0/14
68.178.0.0/17
69.2.224.0/19
69.88.64.0/18
69.164.160.0/20
70.96.0.0-70.96.203.255
70.96.208.0-70.96.219.255
70.96.224.0-70.97.85.255
70.97.88.0-70.97.133.255
70.97.136.0-70.97.175.255
70.98.0.0/21
70.98.16.0-70.98.99.255
70.98.102.0-70.98.108.255
70.98.110.0-70.98.159.255
70.98.161.0-70.98.220.255
70.98.223.0-70.99.71.255
70.99.80.0-70.99.103.255
70.99.112.0-70.99.250.255
70.99.252.0/22
70.102.0.0/15
72.11.64.0/18
72.25.128.0/18
76.164.0.0-76.164.10.255
76.164.12.0-76.164.14.255
76.164.16.0-76.164.47.255
76.164.50.0/24
76.164.54.0/23
76.164.58.0/24
76.164.62.0/24
162.211.20.0/22
192.195.24.0/22
199.48.48.0/22
204.11.200.0/21
204.130.255.0/24
207.173.0.0/16
207.190.128.0/19
208.79.144.0/21
208.186.0.0-208.186.203.255
208.186.206.0-208.187.43.255
208.187.46.0-208.187.115.255
208.187.118.0/23
208.187.124.0-208.187.255.255
209.63.0.0/16
209.150.192.0/19
209.210.0.0/16
216.104.64.0/20
216.173.192.0/19
216.174.192.0/18
216.185.160.0/19
216.187.128.0/18
216.190.0.0/16
216.210.128.0/17
IPv6:
2607:f0d8::/29
2607:fbf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6502
7385
7395
7845
12003
14342
22936
29983
32016
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ac:1c:e3:01:d2:93:aa:3c:eb:8e:13:d9:06:34:df:49:da:
e0:55:e1:67:12:68:2b:24:8d:21:c0:d1:93:d6:d8:30:bc:dd:
98:8b:c5:71:9e:d0:6b:51:6b:c2:0a:35:1f:2e:2e:84:fa:0a:
4b:17:8a:53:1b:8d:87:ac:0a:a4:2e:cf:d0:6c:8c:a0:e0:3d:
c7:a5:33:c9:74:56:1d:08:71:1b:e1:b7:c9:32:c6:7e:05:69:
e5:34:db:a0:65:34:53:1a:df:12:aa:b2:6c:99:74:56:3d:e8:
01:86:60:38:36:eb:e5:80:a7:89:b9:99:52:d9:4b:b2:b2:ba:
b5:39:22:c5:85:3c:f4:37:da:12:d0:56:0b:9a:54:d7:db:23:
12:d6:b4:22:4a:b6:8a:5d:ee:4e:c7:b3:7a:c4:d1:1e:7c:ad:
ed:cd:c1:3b:8e:90:ac:c1:c6:8c:44:29:50:3a:d2:34:c0:8c:
a7:ee:fc:1f:eb:07:71:86:d3:f6:07:2f:94:9d:54:e3:01:6b:
d7:76:7f:47:d6:3d:fe:39:9a:25:e9:90:33:85:34:67:b1:5b:
c5:1a:47:d7:51:f6:41:83:59:f8:24:a2:d9:76:8e:18:ae:90:
78:38:2a:70:1b:15:5a:71:c4:ee:f0:af:7d:b2:f4:78:7f:69:
3b:53:32:3a
-----BEGIN CERTIFICATE-----
MIIJeTCCCGGgAwIBAgIUAQ0Mn0MoWEtWz424akJe4LnJ3cgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI1MDkyODAwNDUyNFoXDTI4MDEwMTAxNDUyNFowLzEtMCsGA1UEAxMk
Njk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJlNDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOiLF+xf5TUlK+MNjTGWf8/iGm62ClEbsc0E
831QP7arwPwFxlof6W23mK2nY/+LAuDHERussx/OB0Br91sIAAcfv2r16A+f3pvj
r7mccooIGCqUWodNhA2XMhZboZNPXt21xXP1iZB91v+8TP4Pw8pFADm1YmyErWGm
BAmm+3s0Foz5PjgAwFRX6v8wuS/X44OR2ohQbARWuBStDNtaIWgw/DP3zQPiWOjw
luz/W7fO3dVks2pvZDgpRUGl/hTNLWGmEVnmkgDAdRxNC8v+CEtlsEvlvSZHfkJm
23/W+AKMVwmStVwfsUu3LmwEXsgrOEEV2u+Fe4ApD4ifLoQZeQIDAQABo4IGizCC
BocwHQYDVR0OBBYEFEbNt+eHqSAyW+bjqlZYWcwAV4TyMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82
OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY5Njg2OTAwLWYyMDEtNGIyYy1h
MWM3LWFmYjcyNWFiZTQ3Zi82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVh
YmU0N2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwggJuBggrBgEF
BQcBBwEB/wSCAl0wggJZMIICPwQCAAEwggI3AwQFP4fAAwQGQBAAAwQHQCoAAwQH
QD4AAwQGQEGAMAsDAwFAegMEAEB6JDAMAwQBQHomAwQHQHoAMAsDBABAeoEDAwBA
egMEBkK2AAMEBkLVwAMDAELgMAsDAwFDMgMEAUMygDALAwQCQzKEAwMCQzADAwJD
iAMEB0SyAAMEBUUC4AMEBkVYQAMEBEWkoDALAwMFRmADBAJGYMgwDAMEBEZg0AME
AkZg2DAMAwQFRmDgAwQBRmFUMAwDBANGYVgDBAFGYYQwDAMEA0ZhiAMEBEZhoAME
A0ZiADAMAwQERmIQAwQCRmJgMAwDBAFGYmYDBABGYmwwDAMEAUZibgMEBUZigDAM
AwQARmKhAwQARmLcMAwDBABGYt8DBANGY0AwDAMEBEZjUAMEA0ZjYDAMAwQERmNw
AwQARmP6AwQCRmP8AwMBRmYDBAZIC0ADBAZIGYAwCwMDAkykAwQATKQKMAwDBAJM
pAwDBABMpA4wDAMEBEykEAMEBEykIAMEAEykMgMEAUykNgMEAEykOgMEAEykPgME
AqLTFAMEAsDDGAMEAscwMAMEA8wLyAMEAMyC/wMDAM+tAwQFz76AAwQD0E+QMAsD
AwHQugMEAtC6yDAMAwQB0LrOAwQC0LsoMAwDBAHQuy4DBALQu3ADBAHQu3YwCwME
AtC7fAMDAtC4AwMA0T8DBAXRlsADAwDR0gMEBNhoQAMEBditwAMEBtiuwAMEBdi5
oAMEBti7gAMDANi+AwQH2NKAMBQEAgACMA4DBQMmB/DYAwUAJgf7+DA5BggrBgEF
BQcBCAEB/wQqMCigJjAkAgIZZgICHNkCAhzjAgIepQICLuMCAjgGAgJZmAICdR8C
An0QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG2sHOMB0pOqPOuOE9kGNN9J2uBV4WcSaCskjSHA0ZPW2DC8
3ZiLxXGe0GtRa8IKNR8uLoT6CksXilMbjYesCqQuz9BsjKDgPcelM8l0Vh0IcRvh
t8kyxn4FaeU026BlNFMa3xKqsmyZdFY96AGGYDg26+WAp4m5mVLZS7KyurU5IsWF
PPQ32hLQVguaVNfbIxLWtCJKtopd7k7Hs3rE0R58re3NwTuOkKzBxoxEKVA60jTA
jKfu/B/rB3GG0/YHL5SdVOMBa9d2f0fWPf45miXpkDOFNGexW8UaR9dR9kGDWfgk
otl2jhiukHg4KnAbFVpxxO7wr32y9Hh/aTtTMjo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 15:26:26 2025 by rpki-client