Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File: baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier: zWjdxnX1jJljW341sZPhgbHBHNfxd5+RwgbUR5PRM2Q=
Subject key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial: 010D0C9F4328584A6C4E31B25182C6DB91EEC500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Sun 06 Jul 2025 00:45:36 +0000
Certificate not after: Sat 09 Oct 2027 00:45:36 +0000
Subordinate resources: AS: 11539
AS: 11858
AS: 16751
AS: 18442
AS: 19554
AS: 21563
AS: 22591
AS: 26547
AS: 26704
AS: 27495
AS: 27570
AS: 31917
AS: 32216
AS: 32263
AS: 33459
AS: 35888
AS: 46371
AS: 395509
AS: 395791
AS: 397717
AS: 398848
AS: 399973
IP: 66.159.106.0/23
IP: 67.202.160.0/20
IP: 74.112.144.0/21
IP: 137.236.0.0/16
IP: 142.75.0.0/16
IP: 150.105.0.0/16
IP: 162.252.12.0/22
IP: 173.243.48.0/20
IP: 192.67.53.0/24
IP: 192.80.54.0/24
IP: 192.138.191.0/24
IP: 199.71.120.0/24
IP: 199.85.101.0/24
IP: 199.87.216.0/22
IP: 199.182.176.0/21
IP: 199.231.96.0/22
IP: 204.107.28.0/22
IP: 204.138.115.0/24
IP: 205.141.236.0/22
IP: 205.211.178.0/24
IP: 206.197.31.0/24
IP: 206.253.128.0/21
IP: 207.195.160.0/19
IP: 2604:8b00::/32
IP: 2620:10c:f000::/40
IP: 2620:134:d000::/44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Jul 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:6c:4e:31:b2:51:82:c6:db:91:ee:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
Validity
Not Before: Jul 6 00:45:36 2025 GMT
Not After : Oct 9 00:45:36 2027 GMT
Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
X509v3 Authority Key Identifier:
keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.106.0/23
67.202.160.0/20
74.112.144.0/21
137.236.0.0/16
142.75.0.0/16
150.105.0.0/16
162.252.12.0/22
173.243.48.0/20
192.67.53.0/24
192.80.54.0/24
192.138.191.0/24
199.71.120.0/24
199.85.101.0/24
199.87.216.0/22
199.182.176.0/21
199.231.96.0/22
204.107.28.0/22
204.138.115.0/24
205.141.236.0/22
205.211.178.0/24
206.197.31.0/24
206.253.128.0/21
207.195.160.0/19
IPv6:
2604:8b00::/32
2620:10c:f000::/40
2620:134:d000::/44
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11539
11858
16751
18442
19554
21563
22591
26547
26704
27495
27570
31917
32216
32263
33459
35888
46371
395509
395791
397717
398848
399973
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:8e:4e:21:2f:ea:c2:5b:c5:01:5b:fc:d9:c2:38:2d:86:ed:
1b:11:cd:41:95:3b:6f:19:e7:ee:7e:49:79:b0:d6:5b:b7:20:
b4:27:e6:29:bb:35:b5:3b:ea:91:fc:f6:50:1a:37:24:f2:70:
09:9a:20:78:13:9f:e5:c4:62:e9:ae:25:fc:07:67:e8:a6:e7:
87:8b:c4:0f:7a:51:7b:7d:fe:73:45:87:e4:36:06:1b:9b:2b:
77:f3:97:f4:2c:72:aa:ad:94:91:54:0c:eb:df:94:30:99:a3:
29:0e:7f:2f:43:c5:d8:ae:a4:25:2f:e3:fa:69:15:0c:03:97:
a8:5c:6b:be:cd:e1:aa:46:e5:9c:5d:5f:98:1b:c8:0a:27:be:
c3:de:07:e3:9b:83:48:fb:02:9a:96:e2:2b:4f:6d:27:d6:0f:
99:66:db:26:fd:29:d7:a2:bd:01:63:10:4e:33:46:14:6e:1f:
9b:b9:5b:25:52:c4:87:ba:8a:cd:cd:e5:4b:d8:d6:c0:e8:07:
41:cb:40:be:6b:b7:69:68:d8:ab:b5:ba:19:2d:83:f2:60:18:
d1:40:1b:29:95:27:ff:47:48:f3:c4:4c:62:18:c8:58:e0:bf:
cb:93:6d:c1:3e:93:af:99:42:7b:f9:73:09:47:9b:d5:20:99:
70:24:aa:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:31:29 2025 by rpki-client