Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
File: 4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer (raw, json)
Hash identifier: A08QMMIa7qoZ5B7l4JXaDRaQQCO8tE/S4+9QievGo04=
Subject key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584F31DFEA41E7F79296A10EA400
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 16 Sep 2026 14:21:13 +0000
Certificate not after: Wed 02 Aug 2028 12:45:17 +0000
Subordinate resources: AS: 163
AS: 547
AS: 1747
AS: 1786
AS: 1956
AS: 1997
AS: 2538
AS: 3082
AS: 3383
IP: 9.0.0.0 -- 9.9.8.255
IP: 9.9.10.0 -- 9.127.255.255
IP: 9.147.0.0/16
IP: 9.150.0.0/16
IP: 9.172.0.0/16
IP: 9.180.0.0 -- 9.184.255.255
IP: 9.186.0.0 -- 9.189.255.255
IP: 9.194.0.0/16
IP: 9.197.0.0/16
IP: 9.201.0.0 -- 9.203.255.255
IP: 9.207.0.0 -- 9.209.255.255
IP: 9.213.0.0 -- 9.219.255.255
IP: 9.221.0.0 -- 9.222.255.255
IP: 9.224.0.0/14
IP: 9.230.0.0/16
IP: 9.238.0.0/15
IP: 9.242.0.0/15
IP: 9.252.0.0/14
IP: 129.33.241.0 -- 129.33.242.255
IP: 129.34.0.0/16
IP: 129.41.0.0 -- 129.41.35.255
IP: 129.41.42.0/24
IP: 129.41.44.0/24
IP: 129.41.46.0/23
IP: 129.41.53.0 -- 129.41.61.255
IP: 129.41.64.0/21
IP: 129.41.84.0/22
IP: 129.41.91.0 -- 129.41.93.255
IP: 129.41.95.0 -- 129.41.111.255
IP: 129.41.160.0 -- 129.41.165.255
IP: 129.41.177.0 -- 129.41.187.255
IP: 129.41.190.0/23
IP: 129.41.210.0 -- 129.41.215.255
IP: 129.41.217.0 -- 129.41.219.255
IP: 129.41.224.0/19
IP: 137.42.0.0/16
IP: 146.84.128.0/17
IP: 149.131.152.0 -- 149.131.255.255
IP: 170.224.128.0/19
IP: 170.224.192.0/18
IP: 170.225.32.0 -- 170.225.95.255
IP: 170.225.112.0/20
IP: 170.225.144.0 -- 170.225.226.255
IP: 170.225.229.0 -- 170.225.231.255
IP: 170.225.234.0 -- 170.225.241.255
IP: 170.225.243.0 -- 170.225.251.255
IP: 170.226.0.0 -- 170.226.57.255
IP: 170.226.60.0/22
IP: 192.35.231.0 -- 192.35.232.255
IP: 192.35.234.0 -- 192.35.239.255
IP: 192.41.137.0/24
IP: 192.41.205.0/24
IP: 192.83.206.0/24
IP: 192.86.29.0 -- 192.86.65.255
IP: 192.91.192.0 -- 192.91.197.255
IP: 192.124.113.0/24
IP: 192.147.13.0/24
IP: 192.148.0.0 -- 192.148.32.255
IP: 192.150.122.0/24
IP: 192.156.133.0/24
IP: 192.157.175.0/24
IP: 192.195.29.0/24
IP: 192.207.88.0/24
IP: 192.229.32.0/19
IP: 192.231.8.0/24
IP: 192.231.10.0/24
IP: 192.231.12.0 -- 192.231.14.255
IP: 198.17.57.0/24
IP: 198.17.202.0 -- 198.17.204.255
IP: 198.49.195.0 -- 198.49.196.255
IP: 198.151.0.0/21
IP: 198.180.207.0/24
IP: 198.182.248.0/24
IP: 198.187.219.0/24
IP: 198.206.218.0/24
IP: 198.232.134.0/24
IP: 199.103.69.0 -- 199.103.72.255
IP: 199.164.149.0/24
IP: 199.181.149.0/24
IP: 199.201.254.0/24
IP: 199.242.142.0/24
IP: 204.79.144.0/23
IP: 204.79.175.0/24
IP: 204.79.184.0/24
IP: 204.107.195.0/24
IP: 204.231.227.0/24
IP: 204.231.239.0/24
IP: 205.210.232.0/23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:31:df:ea:41:e7:f7:92:96:a1:0e:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Sep 16 14:21:13 2026 GMT
Not After : Aug 2 12:45:17 2028 GMT
Subject: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:01:eb:bf:b6:65:5a:e0:90:d2:fb:cc:88:
15:ac:42:62:c1:38:c5:0a:53:2b:98:ff:80:77:b4:
87:b4:d2:62:80:3d:51:d8:79:27:33:61:59:d1:36:
d6:a8:eb:90:38:c0:51:93:2d:74:90:a5:81:d1:fd:
0b:ea:38:77:19:2c:5f:3a:27:2e:a7:49:08:ac:f7:
bf:91:ed:9f:2a:71:ba:4d:8d:ae:b0:85:b5:66:19:
f0:e3:42:38:8a:b0:05:e7:66:95:0d:3f:5b:5f:d2:
b6:5c:96:11:fc:80:9e:7b:0f:d4:2e:d1:8e:30:87:
f4:45:55:4f:5c:3f:0d:0d:1e:23:37:0d:94:71:ed:
cd:a5:6d:bc:8c:0d:96:90:fa:48:3d:55:ba:23:3e:
f4:80:41:0d:e1:3d:b6:cd:03:6d:c9:df:53:a1:5c:
2d:f6:2d:fc:4f:45:38:73:89:d8:3a:de:04:37:5e:
12:d1:c3:63:dd:b9:31:89:5f:93:25:37:43:da:1d:
74:40:9b:dd:b1:82:a6:27:98:38:cb:50:58:f4:1e:
1c:ba:d2:55:c3:b1:16:f9:8d:ca:f7:a4:9f:be:d8:
84:8d:8b:4a:82:1c:c5:39:70:87:92:84:f0:eb:a5:
e8:e9:8a:e7:2b:57:cc:b5:e3:1c:aa:98:e2:3d:69:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
9.0.0.0-9.9.8.255
9.9.10.0-9.127.255.255
9.147.0.0/16
9.150.0.0/16
9.172.0.0/16
9.180.0.0-9.184.255.255
9.186.0.0-9.189.255.255
9.194.0.0/16
9.197.0.0/16
9.201.0.0-9.203.255.255
9.207.0.0-9.209.255.255
9.213.0.0-9.219.255.255
9.221.0.0-9.222.255.255
9.224.0.0/14
9.230.0.0/16
9.238.0.0/15
9.242.0.0/15
9.252.0.0/14
129.33.241.0-129.33.242.255
129.34.0.0/16
129.41.0.0-129.41.35.255
129.41.42.0/24
129.41.44.0/24
129.41.46.0/23
129.41.53.0-129.41.61.255
129.41.64.0/21
129.41.84.0/22
129.41.91.0-129.41.93.255
129.41.95.0-129.41.111.255
129.41.160.0-129.41.165.255
129.41.177.0-129.41.187.255
129.41.190.0/23
129.41.210.0-129.41.215.255
129.41.217.0-129.41.219.255
129.41.224.0/19
137.42.0.0/16
146.84.128.0/17
149.131.152.0-149.131.255.255
170.224.128.0/19
170.224.192.0/18
170.225.32.0-170.225.95.255
170.225.112.0/20
170.225.144.0-170.225.226.255
170.225.229.0-170.225.231.255
170.225.234.0-170.225.241.255
170.225.243.0-170.225.251.255
170.226.0.0-170.226.57.255
170.226.60.0/22
192.35.231.0-192.35.232.255
192.35.234.0-192.35.239.255
192.41.137.0/24
192.41.205.0/24
192.83.206.0/24
192.86.29.0-192.86.65.255
192.91.192.0-192.91.197.255
192.124.113.0/24
192.147.13.0/24
192.148.0.0-192.148.32.255
192.150.122.0/24
192.156.133.0/24
192.157.175.0/24
192.195.29.0/24
192.207.88.0/24
192.229.32.0/19
192.231.8.0/24
192.231.10.0/24
192.231.12.0-192.231.14.255
198.17.57.0/24
198.17.202.0-198.17.204.255
198.49.195.0-198.49.196.255
198.151.0.0/21
198.180.207.0/24
198.182.248.0/24
198.187.219.0/24
198.206.218.0/24
198.232.134.0/24
199.103.69.0-199.103.72.255
199.164.149.0/24
199.181.149.0/24
199.201.254.0/24
199.242.142.0/24
204.79.144.0/23
204.79.175.0/24
204.79.184.0/24
204.107.195.0/24
204.231.227.0/24
204.231.239.0/24
205.210.232.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
163
547
1747
1786
1956
1997
2538
3082
3383
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:12:cf:87:e7:55:75:f9:89:68:31:a5:8e:4d:8b:ae:b3:d1:
b1:e6:30:49:cd:0e:d6:96:e9:a7:7f:14:df:40:75:a7:72:16:
94:cb:44:de:85:52:31:73:cd:fa:9d:bc:a1:2c:08:45:b6:b6:
de:06:58:85:aa:e3:18:d5:fc:1a:8a:73:61:35:d9:5a:33:05:
1b:b8:70:78:07:82:64:4a:75:85:29:27:0e:b4:f1:db:0d:b7:
bb:bd:c8:eb:85:ab:19:74:5c:2c:58:24:92:d7:47:59:5a:c7:
f7:87:ff:92:41:e3:52:e0:54:87:f5:8e:83:a3:d6:70:8e:50:
ad:1f:82:c7:08:d0:2e:a7:ec:49:ba:dc:a1:53:b5:11:87:8e:
5a:2b:2e:96:b3:e5:30:e3:85:0e:91:f4:80:ef:3a:91:e9:7d:
6d:3d:04:ae:87:cf:7a:fa:7a:23:03:c0:de:1e:9e:2f:27:f0:
5e:bb:1d:7a:41:de:1a:34:d2:04:98:a8:8a:ee:17:d1:19:43:
d8:46:21:84:fa:a8:af:eb:5b:92:e5:0d:1b:2d:2f:f4:24:94:
2b:fb:85:e8:b5:6d:7a:d7:39:25:78:b1:e8:9b:32:bd:1d:7f:
c7:2d:2b:b6:93:4a:a3:83:24:f1:27:d7:a4:79:22:e8:55:ed:
67:d7:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:47:35 2026 by rpki-client