Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
File: b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer (raw, json)
Hash identifier: z1eAfW8rf9KaAp1eKTKghvTxp65q4G90I224K8C+5zM=
Subject key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B127291EFB2432F1A4D062940
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 03 Sep 2025 13:03:06 +0000
Certificate not after: Tue 07 Dec 2027 14:03:06 +0000
Subordinate resources: AS: 23127
AS: 33165
IP: 64.111.32.0 -- 64.111.34.255
IP: 64.111.36.0/24
IP: 64.111.40.0/24
IP: 64.111.46.0/24
IP: 64.111.48.0/21
IP: 64.111.57.0/24
IP: 64.111.62.0/24
IP: 65.255.131.0/24
IP: 65.255.139.0/24
IP: 65.255.141.0 -- 65.255.143.255
IP: 67.221.192.0/24
IP: 67.221.199.0/24
IP: 67.221.207.0/24
IP: 67.221.217.0/24
IP: 67.221.219.0 -- 67.221.223.255
IP: 69.27.196.0/24
IP: 69.27.198.0/24
IP: 69.27.201.0 -- 69.27.205.255
IP: 69.27.207.0/24
IP: 69.27.217.0 -- 69.27.223.255
IP: 69.55.128.0/19
IP: 104.192.156.0/22
IP: 104.255.109.0 -- 104.255.111.255
IP: 137.239.160.0/19
IP: 162.219.60.0/22
IP: 162.253.60.0 -- 162.253.62.255
IP: 170.52.48.0 -- 170.52.59.255
IP: 192.190.136.0/21
IP: 199.21.92.0/23
IP: 207.174.224.0/23
IP: 207.174.228.0 -- 207.174.233.255
IP: 209.152.131.0 -- 209.152.134.255
IP: 209.152.136.0/24
IP: 209.152.138.0 -- 209.152.141.255
IP: 209.152.144.0/24
IP: 209.152.146.0/23
IP: 209.152.149.0/24
IP: 209.152.151.0/24
IP: 209.152.158.0/23
IP: 216.145.136.0 -- 216.145.142.255
IP: 216.145.144.0/24
IP: 216.145.147.0/24
IP: 216.145.156.0/24
IP: 216.146.248.0/24
IP: 216.213.32.0/20
IP: 2604:2980::/32
IP: 2607:f4f8::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:12:72:91:ef:b2:43:2f:1a:4d:06:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Sep 3 13:03:06 2025 GMT
Not After : Dec 7 14:03:06 2027 GMT
Subject: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:98:1d:86:9d:13:cb:12:9a:2c:10:69:2f:
81:13:1c:53:a4:55:0f:3a:6e:45:e2:19:b8:ba:6f:
92:fa:b2:00:a5:e6:d7:f3:ae:e3:e9:76:d1:c2:6d:
85:a1:a4:74:c8:71:1c:9f:d6:58:07:24:c9:a4:06:
89:3a:66:56:7b:61:34:d7:3d:ea:5c:fa:4f:75:e0:
50:ea:08:5b:26:c8:c9:a8:c9:61:e8:86:a9:5f:13:
89:ca:e4:be:26:fa:71:fd:27:8a:44:07:41:f0:e2:
20:6c:ef:ed:bf:9a:63:e3:ba:4c:b7:44:81:69:6b:
82:ff:80:9e:2e:5c:74:2d:0c:82:42:7e:84:c4:59:
7f:6d:1d:35:54:88:49:97:16:fc:f1:8b:e6:8f:94:
11:4e:90:a2:8c:72:88:d9:36:fd:0c:30:8d:a5:ca:
5f:a8:e8:30:5d:06:76:2a:79:67:e1:53:e1:74:4d:
2e:42:08:70:00:28:b0:b3:fd:77:d3:26:9a:ce:93:
ae:e1:66:b4:ee:86:62:a9:e0:16:78:4f:5b:fe:7c:
fa:5d:aa:7c:3b:f7:67:e0:4f:77:37:b5:1e:1e:ce:
d3:14:75:01:08:e9:42:99:4d:4d:35:e8:d3:93:2c:
61:b2:ea:bf:3e:f6:30:1e:c3:ab:9b:87:4f:70:ee:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.111.32.0-64.111.34.255
64.111.36.0/24
64.111.40.0/24
64.111.46.0/24
64.111.48.0/21
64.111.57.0/24
64.111.62.0/24
65.255.131.0/24
65.255.139.0/24
65.255.141.0-65.255.143.255
67.221.192.0/24
67.221.199.0/24
67.221.207.0/24
67.221.217.0/24
67.221.219.0-67.221.223.255
69.27.196.0/24
69.27.198.0/24
69.27.201.0-69.27.205.255
69.27.207.0/24
69.27.217.0-69.27.223.255
69.55.128.0/19
104.192.156.0/22
104.255.109.0-104.255.111.255
137.239.160.0/19
162.219.60.0/22
162.253.60.0-162.253.62.255
170.52.48.0-170.52.59.255
192.190.136.0/21
199.21.92.0/23
207.174.224.0/23
207.174.228.0-207.174.233.255
209.152.131.0-209.152.134.255
209.152.136.0/24
209.152.138.0-209.152.141.255
209.152.144.0/24
209.152.146.0/23
209.152.149.0/24
209.152.151.0/24
209.152.158.0/23
216.145.136.0-216.145.142.255
216.145.144.0/24
216.145.147.0/24
216.145.156.0/24
216.146.248.0/24
216.213.32.0/20
IPv6:
2604:2980::/32
2607:f4f8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23127
33165
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:18:21:85:5b:0b:31:cc:0f:fe:07:9b:30:e7:5a:ba:18:4c:
ba:d7:50:d8:9c:c6:83:8d:f9:ad:36:4a:e1:94:e5:a8:a6:67:
84:33:51:f4:f2:d2:33:a4:11:fb:f0:6a:92:3b:fb:ad:bf:1b:
30:64:01:d3:41:ef:df:f5:77:82:2f:14:4b:59:bd:65:98:b2:
69:2e:d9:97:d2:a6:4c:e9:7e:44:60:08:52:8b:1a:03:e1:eb:
5b:96:4f:57:03:4d:0d:2a:da:60:5b:29:dd:e2:25:55:52:ea:
52:8a:c6:f7:37:0e:a8:28:65:bd:2a:9e:9e:12:6d:c5:3b:1b:
99:12:9f:53:dd:81:4c:72:87:e5:60:37:f1:8d:62:b2:04:16:
67:6d:ec:29:8f:a7:72:8a:f1:80:84:c1:e6:e2:c6:22:8f:53:
40:3a:70:a3:da:b1:a6:d5:f5:45:29:8e:17:42:ba:04:64:3f:
c4:75:64:5c:6b:6f:05:cc:5f:3b:82:e6:38:ec:ea:70:1c:a9:
f3:3e:d9:be:be:ed:02:81:57:57:8d:aa:9b:99:c7:cb:e2:65:
d1:23:c6:c0:0b:c6:8f:51:de:f2:ff:db:3e:82:cc:57:07:34:
c6:18:8b:91:0b:84:a8:fe:36:82:29:cc:c3:42:71:7f:80:b0:
b1:45:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:07 2025 by rpki-client