Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
File: b2fad91b-4146-4274-9411-fc471c444156.cer (raw, json)
Hash identifier: x19CW+Th/To48lgLF76kt6UzYZ4IXWPvAMYmH+1Axis=
Subject key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial: 010D0C9F4328584E6EDE630C3D9B47501E4097C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 08 Jul 2026 17:55:31 +0000
Certificate not after: Tue 10 Oct 2028 17:55:31 +0000
Subordinate resources: AS: 11696
AS: 16526
AS: 16985
AS: 17184
AS: 20175
AS: 22958
AS: 26482
AS: 29743
AS: 30322
AS: 39994
AS: 46989
AS: 55186
IP: 64.45.160.0 -- 64.45.162.255
IP: 64.45.165.0 -- 64.45.167.255
IP: 64.45.170.0/24
IP: 64.45.174.0 -- 64.45.177.255
IP: 64.45.179.0/24
IP: 64.52.7.0 -- 64.52.9.255
IP: 64.52.15.0/24
IP: 64.52.110.0/24
IP: 64.52.160.0/24
IP: 64.190.4.0/24
IP: 64.190.10.0 -- 64.190.15.255
IP: 64.190.22.0 -- 64.190.26.255
IP: 64.190.28.0/22
IP: 64.190.38.0/23
IP: 64.190.48.0 -- 64.190.61.255
IP: 64.190.64.0 -- 64.190.75.255
IP: 64.190.77.0 -- 64.190.79.255
IP: 64.190.83.0/24
IP: 64.190.88.0/24
IP: 64.190.96.0/24
IP: 64.190.98.0 -- 64.190.100.255
IP: 64.190.104.0 -- 64.190.109.255
IP: 64.190.123.0 -- 64.190.135.255
IP: 64.190.142.0 -- 64.190.144.255
IP: 64.190.150.0/24
IP: 64.190.152.0/23
IP: 64.190.160.0 -- 64.190.165.255
IP: 64.190.168.0/23
IP: 64.190.171.0 -- 64.190.180.255
IP: 64.190.182.0 -- 64.190.185.255
IP: 64.190.187.0 -- 64.190.190.255
IP: 64.190.208.0/22
IP: 64.190.216.0/24
IP: 64.190.220.0/22
IP: 64.190.228.0 -- 64.190.236.255
IP: 64.190.240.0/24
IP: 64.190.242.0 -- 64.190.251.255
IP: 65.48.96.0/20
IP: 66.6.160.0/20
IP: 66.94.64.0/19
IP: 68.171.0.0/20
IP: 69.24.128.0 -- 69.24.139.255
IP: 69.50.96.0/20
IP: 69.60.192.0/19
IP: 74.207.208.0/20
IP: 162.253.112.0/22
IP: 199.119.192.0/21
IP: 207.58.192.0/18
IP: 216.86.32.0/19
IP: 216.198.64.0/24
IP: 216.198.67.0/24
IP: 216.198.70.0 -- 216.198.72.255
IP: 216.198.76.0 -- 216.198.78.255
IP: 216.198.80.0 -- 216.198.84.255
IP: 216.198.87.0/24
IP: 216.198.89.0 -- 216.198.90.255
IP: 216.230.64.0/24
IP: 216.230.67.0 -- 216.230.69.255
IP: 216.230.76.0/24
IP: 216.230.83.0/24
IP: 216.230.89.0/24
IP: 216.230.91.0/24
IP: 216.230.93.0/24
IP: 216.230.95.0/24
IP: 216.246.192.0 -- 216.246.194.255
IP: 216.246.200.0 -- 216.246.202.255
IP: 216.246.210.0/24
IP: 2604:1280::/32
IP: 2604:1e00::/32
IP: 2606:a900::/32
IP: 2606:b000::/32
IP: 2607:f738::/32
IP: 2607:f770::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6e:de:63:0c:3d:9b:47:50:1e:40:97:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Validity
Not Before: Jul 8 17:55:31 2026 GMT
Not After : Oct 10 17:55:31 2028 GMT
Subject: CN=b2fad91b-4146-4274-9411-fc471c444156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:c1:c6:36:57:10:67:89:3f:48:a6:46:18:
53:93:c4:67:c7:8b:2a:cd:8c:61:62:8c:5d:93:06:
a0:4c:67:b5:75:33:41:1a:c2:a0:d1:ff:26:34:01:
7a:bf:01:5e:ef:ba:61:4e:15:d9:b5:15:46:54:50:
44:96:3d:3a:81:69:83:1c:9f:72:4c:ab:c7:ef:a0:
3b:8e:31:2f:7f:40:65:ce:b5:51:8f:54:2b:96:ea:
17:cf:03:79:43:d6:83:20:8d:47:09:ca:5d:89:f6:
68:13:23:50:dc:7e:67:5e:4e:ee:4c:c2:58:25:74:
93:9d:41:10:c6:18:b5:93:00:12:7c:5c:6a:06:f0:
9c:16:5f:f3:fc:24:a0:47:f0:85:c4:14:c2:82:62:
39:f1:cf:5a:78:69:83:3d:45:0e:74:1c:2f:cf:13:
01:3f:be:b4:ee:e0:89:d8:ce:23:34:1a:6b:f4:fb:
28:2c:68:f8:5f:e3:5d:d0:1a:94:c3:9d:a6:07:75:
80:41:ae:d3:01:6f:39:b3:a6:f0:e9:47:19:a1:81:
9f:80:16:0b:97:89:f2:11:e8:be:a2:64:a4:72:a3:
a3:b8:d8:17:8c:4d:f8:fe:57:41:f1:47:07:be:1a:
fe:26:7c:ab:51:97:13:c6:3a:45:15:d8:9d:d0:8a:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
X509v3 Authority Key Identifier:
keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
sbgp-ipAddrBlock: critical
IPv4:
64.45.160.0-64.45.162.255
64.45.165.0-64.45.167.255
64.45.170.0/24
64.45.174.0-64.45.177.255
64.45.179.0/24
64.52.7.0-64.52.9.255
64.52.15.0/24
64.52.110.0/24
64.52.160.0/24
64.190.4.0/24
64.190.10.0-64.190.15.255
64.190.22.0-64.190.26.255
64.190.28.0/22
64.190.38.0/23
64.190.48.0-64.190.61.255
64.190.64.0-64.190.75.255
64.190.77.0-64.190.79.255
64.190.83.0/24
64.190.88.0/24
64.190.96.0/24
64.190.98.0-64.190.100.255
64.190.104.0-64.190.109.255
64.190.123.0-64.190.135.255
64.190.142.0-64.190.144.255
64.190.150.0/24
64.190.152.0/23
64.190.160.0-64.190.165.255
64.190.168.0/23
64.190.171.0-64.190.180.255
64.190.182.0-64.190.185.255
64.190.187.0-64.190.190.255
64.190.208.0/22
64.190.216.0/24
64.190.220.0/22
64.190.228.0-64.190.236.255
64.190.240.0/24
64.190.242.0-64.190.251.255
65.48.96.0/20
66.6.160.0/20
66.94.64.0/19
68.171.0.0/20
69.24.128.0-69.24.139.255
69.50.96.0/20
69.60.192.0/19
74.207.208.0/20
162.253.112.0/22
199.119.192.0/21
207.58.192.0/18
216.86.32.0/19
216.198.64.0/24
216.198.67.0/24
216.198.70.0-216.198.72.255
216.198.76.0-216.198.78.255
216.198.80.0-216.198.84.255
216.198.87.0/24
216.198.89.0-216.198.90.255
216.230.64.0/24
216.230.67.0-216.230.69.255
216.230.76.0/24
216.230.83.0/24
216.230.89.0/24
216.230.91.0/24
216.230.93.0/24
216.230.95.0/24
216.246.192.0-216.246.194.255
216.246.200.0-216.246.202.255
216.246.210.0/24
IPv6:
2604:1280::/32
2604:1e00::/32
2606:a900::/32
2606:b000::/32
2607:f738::/32
2607:f770::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11696
16526
16985
17184
20175
22958
26482
29743
30322
39994
46989
55186
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:2c:e3:74:31:1d:f6:0c:7f:7e:79:2c:03:59:3c:5d:24:55:
a3:7a:bd:0a:0c:b7:19:35:12:a7:18:a3:b4:f9:ee:15:b3:0a:
47:63:78:d0:fa:0b:4f:6c:ca:54:82:76:11:c6:8e:24:17:1e:
a4:53:45:d3:cb:09:00:75:e4:47:4c:c3:13:1b:ce:dd:4e:c2:
2c:3a:88:fc:dc:9a:c4:ce:41:f9:b9:c9:3e:d8:72:7c:a4:a3:
7f:20:20:55:21:38:42:1b:4e:c0:70:2a:d3:f5:0f:0a:8e:42:
f8:b5:8c:25:fa:5e:dc:f4:4d:12:bf:83:ae:01:f6:f2:92:13:
43:dd:13:87:17:fb:57:24:a2:61:65:13:01:b5:c6:7d:29:ea:
b0:5e:84:2c:c1:9f:33:ee:e3:52:ef:1d:b7:bf:49:b6:f4:bd:
61:cd:8b:7d:df:20:bc:c7:35:84:aa:b7:9b:4f:2f:9b:24:7f:
be:53:94:90:46:1e:f7:73:b0:4f:74:55:97:34:7a:dc:c7:d2:
0b:39:85:dc:b1:10:9d:d8:b6:29:50:d8:6f:be:1f:dc:a4:e0:
60:23:1d:50:a1:a0:52:18:69:9c:f7:07:59:f5:fa:a2:03:50:
89:74:42:0b:42:08:ab:79:f8:10:0c:0e:72:83:a3:2a:f1:84:
95:51:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:28:58 2026 by rpki-client