Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d.cer
File: b8e407d7-863a-439f-a4f2-335e5aac995d.cer (raw, json)
Hash identifier: UTaST7KxeqXXTygLi/nugmMfZGqPZHjGxBjC7Uqh+yc=
Subject key identifier: 10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial: 010D0C9F4328584B52B37286E5DDBF9953BC5000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 26 Sep 2025 13:25:33 +0000
Certificate not after: Thu 30 Dec 2027 14:25:33 +0000
Subordinate resources: AS: 54412
IP: 64.26.128.0/18
IP: 69.20.224.0/19
IP: 108.63.14.0 -- 108.63.17.255
IP: 108.63.22.0 -- 108.63.29.255
IP: 192.211.124.0/22
IP: 198.41.28.0/22
IP: 198.161.182.0/23
IP: 198.163.180.0/24
IP: 199.246.72.0 -- 199.246.74.255
IP: 204.225.88.0/21
IP: 204.225.103.0/24
IP: 206.51.248.0 -- 206.51.253.255
IP: 206.191.0.0 -- 206.191.27.255
IP: 206.191.29.0 -- 206.191.63.255
IP: 207.112.4.0/22
IP: 207.112.9.0 -- 207.112.15.255
IP: 207.112.46.0/24
IP: 207.112.70.0/24
IP: 209.90.136.0 -- 209.90.140.255
IP: 209.90.158.0/24
IP: 209.90.171.0/24
IP: 209.90.174.0 -- 209.90.176.255
IP: 209.90.188.0/23
IP: 209.183.12.0/24
IP: 209.183.20.0/24
IP: 209.216.137.0/24
IP: 209.217.64.0 -- 209.217.120.255
IP: 209.217.122.0 -- 209.217.127.255
IP: 216.129.192.0/23
IP: 216.129.195.0 -- 216.129.210.255
IP: 216.129.212.0 -- 216.129.223.255
IP: 216.138.192.0/23
IP: 216.138.196.0 -- 216.138.215.255
IP: 216.138.218.0/23
IP: 216.138.222.0 -- 216.138.228.255
IP: 216.138.234.0 -- 216.138.255.255
IP: 216.254.158.0/23
IP: 216.254.169.0/24
IP: 216.254.197.0/24
IP: 216.254.200.0/22
IP: 216.254.209.0/24
IP: 216.254.223.0/24
IP: 2604:1f80::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Oct 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:52:b3:72:86:e5:dd:bf:99:53:bc:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
Validity
Not Before: Sep 26 13:25:33 2025 GMT
Not After : Dec 30 14:25:33 2027 GMT
Subject: CN=b8e407d7-863a-439f-a4f2-335e5aac995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:31:70:83:d7:b6:f2:62:97:db:cd:fb:23:
eb:15:29:cc:f7:4a:14:93:09:e6:d5:cd:33:b7:9c:
55:53:04:32:49:92:f3:10:9e:de:6a:3f:7c:0e:9c:
d6:ea:ea:54:c9:77:d2:2e:63:c9:c3:e6:90:c5:23:
3c:01:ac:c8:b9:d1:47:58:1d:d2:01:30:40:9c:67:
c3:b6:6f:18:90:b6:ae:6c:c4:6c:b7:c8:ce:fe:cd:
2e:df:df:af:b3:87:1f:f7:76:9e:e8:0d:a9:17:6d:
83:37:c8:2b:03:ab:c8:c4:7c:89:5b:47:05:72:c0:
ed:6d:52:b3:60:e2:06:cf:53:6e:35:02:52:ef:a1:
04:2b:cc:eb:99:01:11:42:30:ab:8d:e8:b0:a7:39:
f8:27:bc:76:d9:ff:59:96:48:af:20:e8:a7:ab:77:
3f:6b:fc:c8:d0:fc:64:9b:5b:3a:b1:5a:2d:c9:99:
87:f5:4f:cf:a1:0d:42:8c:68:13:7c:0c:f1:fb:3f:
af:40:44:cd:13:72:4f:e1:8a:66:ba:ba:fd:58:7c:
95:c6:c3:67:cf:7c:ce:7f:5f:90:87:3f:f3:76:f8:
21:f7:e8:cc:c6:c1:75:04:19:e7:b7:44:8d:cf:63:
51:ca:f4:eb:7f:1c:09:c8:73:e3:80:28:60:3b:62:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:1A:9E:BD:00:1C:6C:73:FE:20:B5:CC:D2:6C:BB:26:D4:06:0C
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b8e407d7-863a-439f-a4f2-335e5aac995d/b8e407d7-863a-439f-a4f2-335e5aac995d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
X509v3 Authority Key Identifier:
keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.26.128.0/18
69.20.224.0/19
108.63.14.0-108.63.17.255
108.63.22.0-108.63.29.255
192.211.124.0/22
198.41.28.0/22
198.161.182.0/23
198.163.180.0/24
199.246.72.0-199.246.74.255
204.225.88.0/21
204.225.103.0/24
206.51.248.0-206.51.253.255
206.191.0.0-206.191.27.255
206.191.29.0-206.191.63.255
207.112.4.0/22
207.112.9.0-207.112.15.255
207.112.46.0/24
207.112.70.0/24
209.90.136.0-209.90.140.255
209.90.158.0/24
209.90.171.0/24
209.90.174.0-209.90.176.255
209.90.188.0/23
209.183.12.0/24
209.183.20.0/24
209.216.137.0/24
209.217.64.0-209.217.120.255
209.217.122.0-209.217.127.255
216.129.192.0/23
216.129.195.0-216.129.210.255
216.129.212.0-216.129.223.255
216.138.192.0/23
216.138.196.0-216.138.215.255
216.138.218.0/23
216.138.222.0-216.138.228.255
216.138.234.0-216.138.255.255
216.254.158.0/23
216.254.169.0/24
216.254.197.0/24
216.254.200.0/22
216.254.209.0/24
216.254.223.0/24
IPv6:
2604:1f80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54412
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:90:d2:b3:c1:b5:e1:b7:52:76:9e:76:37:fd:00:8b:03:5b:
9a:e1:08:7c:6e:1c:91:2a:be:7c:3c:6f:ed:a8:cd:e9:c0:dc:
74:d2:49:e8:65:39:63:08:7f:7c:08:22:15:d3:6e:fc:44:aa:
32:0f:f7:d2:e4:c0:47:d0:60:0f:8a:4e:b5:64:7c:50:a8:38:
65:1e:d2:71:fe:28:a8:5c:b8:37:99:a5:b7:2c:b3:dc:c1:0a:
ff:66:18:cc:33:68:bd:8e:fb:93:7d:72:19:b1:96:aa:47:39:
11:89:08:bc:d3:b3:ad:98:9b:24:62:39:0d:19:bc:98:4b:8d:
c1:4c:9e:6d:dd:fa:ca:6e:ff:d2:f3:3a:ce:6f:a4:e9:0a:51:
06:12:5f:51:c1:f7:5c:4a:98:b6:af:be:07:96:ce:10:df:07:
8a:b6:33:2d:24:fc:60:a6:74:97:68:f0:7a:65:6e:28:de:86:
9f:e3:c5:48:c4:0c:57:2d:89:05:d8:09:00:57:31:34:3b:16:
09:29:62:45:a6:85:52:67:41:e3:ef:df:1c:15:58:07:c9:2d:
6b:0d:ca:98:a4:8e:db:63:7e:35:5c:9c:2d:a4:58:b4:78:0f:
7b:8f:95:7e:c8:6d:9e:c6:25:16:7f:d6:2e:98:3f:94:57:06:
8e:91:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:04 2025 by rpki-client