Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
File: 249140ca-277e-4871-a100-451d066d1c5b.cer (raw, json)
Hash identifier: kK69UgIu6rDG1d0sz0wPzq1ANxksWfbR8vwspscN8L4=
Subject key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584BAC2682F795304D034071EFC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 28 Oct 2025 14:24:20 +0000
Certificate not after: Wed 23 Dec 2026 01:45:26 +0000
Subordinate resources: AS: 6391
AS: 11478
AS: 21513
AS: 21548
AS: 21949
AS: 23498
AS: 40191
AS: 53364
AS: 395570
AS: 397177
AS: 397778
IP: 45.42.8.0 -- 45.42.14.255
IP: 50.21.16.0/21
IP: 50.21.64.0/21
IP: 64.18.64.0/19
IP: 64.137.128.0/19
IP: 64.254.224.0/19
IP: 65.97.32.0/20
IP: 66.11.32.0/20
IP: 66.23.0.0/17
IP: 66.171.160.0/20
IP: 66.199.32.0/20
IP: 66.207.192.0/19
IP: 66.234.32.0/19
IP: 66.241.128.0/20
IP: 67.22.224.0/20
IP: 67.213.71.0/24
IP: 67.213.80.0/23
IP: 67.213.87.0/24
IP: 67.213.92.0/24
IP: 69.9.172.0/23
IP: 69.77.160.0/19
IP: 70.35.160.0/20
IP: 72.15.48.0/20
IP: 74.114.100.0/22
IP: 74.123.92.0/22
IP: 74.213.160.0/19
IP: 75.98.192.0/20
IP: 76.9.192.0/19
IP: 96.45.192.0/20
IP: 97.107.176.0/20
IP: 104.192.44.0/22
IP: 104.193.52.0/22
IP: 134.128.192.0/19
IP: 134.231.32.0/19
IP: 138.28.224.0/19
IP: 142.59.160.0/20
IP: 149.248.176.0/20
IP: 158.106.64.0/18
IP: 162.249.160.0/22
IP: 162.250.170.0 -- 162.250.174.255
IP: 172.85.124.0/22
IP: 173.231.160.0/20
IP: 173.243.192.0/20
IP: 173.246.64.0/19
IP: 192.69.1.0/24
IP: 198.22.225.0/24
IP: 198.98.96.0/19
IP: 199.7.144.0/22
IP: 199.33.112.0/22
IP: 199.45.144.0/21
IP: 199.45.164.0/23
IP: 199.68.120.0/21
IP: 199.167.152.0/21
IP: 199.247.192.0/21
IP: 204.9.80.0/22
IP: 204.11.218.0/24
IP: 205.175.212.0/22
IP: 206.55.80.0/20
IP: 206.214.240.0/20
IP: 206.223.160.0/19
IP: 206.253.136.0/21
IP: 207.22.0.0/19
IP: 207.66.120.0/22
IP: 207.115.96.0/20
IP: 208.71.8.0/22
IP: 208.85.112.0/22
IP: 208.122.24.0/22
IP: 209.195.248.0/21
IP: 216.46.0.0/19
IP: 216.81.48.0/20
IP: 216.120.194.0/23
IP: 2605:8c80::/32
IP: 2606:880::/32
IP: 2607:5e00::/32
IP: 2607:f0c8::/32
IP: 2607:f3d8::/32
IP: 2610:98::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 02 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ac:26:82:f7:95:30:4d:03:40:71:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Oct 28 14:24:20 2025 GMT
Not After : Dec 23 01:45:26 2026 GMT
Subject: CN=249140ca-277e-4871-a100-451d066d1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:8b:da:bc:64:fd:ae:65:dc:41:67:61:35:
7f:84:0a:9b:57:69:9d:70:a4:32:d1:6a:74:78:ff:
4a:18:94:af:bd:07:a7:54:0a:c6:c0:1f:40:24:4e:
29:ac:f2:62:0a:fb:f0:64:45:19:38:10:f3:be:9b:
1d:77:75:d9:1b:4b:9e:9e:b5:9c:c2:20:68:18:f5:
cd:cd:ac:57:d7:fa:79:c4:2b:86:68:6a:6d:48:64:
36:ab:f2:36:40:1f:49:e3:ba:37:d5:e4:db:92:23:
34:81:a0:1e:e1:ae:1c:1b:58:66:e1:d5:25:08:63:
e3:d4:12:3e:ae:56:a5:e3:b6:e0:53:1f:47:46:1a:
1b:84:a8:b6:95:6f:3c:0c:7d:d4:af:97:51:99:63:
a0:90:26:c6:86:e0:03:67:e4:51:b1:12:ea:d3:ff:
3a:a1:09:4b:f6:47:f2:fc:2a:14:3d:f0:93:de:49:
9b:82:53:1f:5d:11:b3:2f:04:ea:83:e4:50:5b:63:
ac:ab:a4:5e:72:fe:e3:9f:21:41:ee:f8:1f:60:8b:
39:3b:73:81:64:92:1c:a6:fc:db:cd:91:a4:65:4b:
90:27:34:47:c6:a3:81:e6:14:d4:eb:e1:ba:b0:ad:
69:5e:e8:90:63:ab:c1:77:44:aa:02:48:98:66:06:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
45.42.8.0-45.42.14.255
50.21.16.0/21
50.21.64.0/21
64.18.64.0/19
64.137.128.0/19
64.254.224.0/19
65.97.32.0/20
66.11.32.0/20
66.23.0.0/17
66.171.160.0/20
66.199.32.0/20
66.207.192.0/19
66.234.32.0/19
66.241.128.0/20
67.22.224.0/20
67.213.71.0/24
67.213.80.0/23
67.213.87.0/24
67.213.92.0/24
69.9.172.0/23
69.77.160.0/19
70.35.160.0/20
72.15.48.0/20
74.114.100.0/22
74.123.92.0/22
74.213.160.0/19
75.98.192.0/20
76.9.192.0/19
96.45.192.0/20
97.107.176.0/20
104.192.44.0/22
104.193.52.0/22
134.128.192.0/19
134.231.32.0/19
138.28.224.0/19
142.59.160.0/20
149.248.176.0/20
158.106.64.0/18
162.249.160.0/22
162.250.170.0-162.250.174.255
172.85.124.0/22
173.231.160.0/20
173.243.192.0/20
173.246.64.0/19
192.69.1.0/24
198.22.225.0/24
198.98.96.0/19
199.7.144.0/22
199.33.112.0/22
199.45.144.0/21
199.45.164.0/23
199.68.120.0/21
199.167.152.0/21
199.247.192.0/21
204.9.80.0/22
204.11.218.0/24
205.175.212.0/22
206.55.80.0/20
206.214.240.0/20
206.223.160.0/19
206.253.136.0/21
207.22.0.0/19
207.66.120.0/22
207.115.96.0/20
208.71.8.0/22
208.85.112.0/22
208.122.24.0/22
209.195.248.0/21
216.46.0.0/19
216.81.48.0/20
216.120.194.0/23
IPv6:
2605:8c80::/32
2606:880::/32
2607:5e00::/32
2607:f0c8::/32
2607:f3d8::/32
2610:98::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6391
11478
21513
21548
21949
23498
40191
53364
395570
397177
397778
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:35:63:f6:b1:da:42:e2:88:89:60:08:ab:85:45:29:e4:25:
53:9a:72:d4:99:02:11:03:8f:fa:ac:9b:f4:7d:5e:d6:90:0d:
aa:f0:7a:d4:79:fd:a1:d3:0d:75:75:2d:37:0d:bb:43:5a:99:
fd:8d:d8:70:ad:24:9a:46:bf:ef:e2:62:de:27:3d:90:90:d7:
ec:86:bf:61:e7:c7:82:fb:c1:b9:98:6d:f0:e1:3d:c2:4f:16:
0b:0c:59:9c:fd:64:c6:c6:3e:ec:12:c3:75:ce:d4:a8:2d:05:
49:9b:2d:0a:1d:30:b3:b7:69:af:8c:a9:9d:7a:8e:0e:88:9d:
cb:d1:3a:1c:97:6a:ea:ed:dc:50:6c:3b:ea:5b:74:7c:93:73:
4c:2f:e4:8c:ec:ec:6b:04:a4:d4:65:7d:f8:a1:e4:4c:6f:f2:
d5:49:c2:3c:e8:0f:dd:bb:67:65:9d:56:6e:58:23:c4:56:f1:
66:06:eb:eb:52:75:a8:66:74:49:c4:e7:74:33:29:bf:21:19:
92:52:8f:b4:ba:54:df:d5:25:2e:0c:7e:af:a9:58:43:2e:89:
1c:81:96:c7:4d:ef:fa:68:6e:65:34:38:38:44:40:a1:f7:f6:
c9:8e:e2:24:64:af:29:4f:66:e7:e1:ef:93:86:8f:10:ae:44:
f1:ea:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 04:05:50 2025 by rpki-client