Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
File: 90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer (raw, json)
Hash identifier: BaKYUwAty9iXJfnhWY7JYEQdYEtC3K54Y0ohFcRXoAc=
Subject key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584F9366342AB6B467D89275F100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 21 Oct 2026 12:45:12 +0000
Certificate not after: Tue 23 Jan 2029 13:45:12 +0000
Subordinate resources: AS: 12064
AS: 13432
AS: 13493
AS: 14710
AS: 15218
AS: 22318
AS: 22773
AS: 25904
AS: 26146
AS: 26204
AS: 31771
IP: 24.56.0.0/18
IP: 24.120.0.0/16
IP: 24.136.32.0/19
IP: 24.170.192.0/20
IP: 24.248.0.0/13
IP: 64.58.128.0/18
IP: 64.147.0.0/19
IP: 64.207.224.0/19
IP: 64.253.160.0/19
IP: 66.37.224.0/19
IP: 66.210.0.0/16
IP: 68.0.0.0/12
IP: 68.96.0.0/12
IP: 68.224.0.0/13
IP: 69.63.96.0/19
IP: 70.160.0.0/11
IP: 72.192.0.0/11
IP: 74.126.48.0/20
IP: 76.76.128.0/20
IP: 98.160.0.0/11
IP: 174.64.0.0/12
IP: 184.176.0.0/12
IP: 207.162.128.0/19
IP: 209.34.192.0/19
IP: 209.242.128.0 -- 209.242.175.255
IP: 216.16.128.0/20
IP: 216.54.0.0/17
IP: 216.231.0.0/19
IP: 2001:578::/30
IP: 2600:8800::/28
IP: 2606:ff00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:93:66:34:2a:b6:b4:67:d8:92:75:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Oct 21 12:45:12 2026 GMT
Not After : Jan 23 13:45:12 2029 GMT
Subject: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:38:8c:2f:15:37:1d:70:ca:36:f6:0c:0b:
68:f1:70:14:4f:f6:4b:3f:e8:22:a2:7b:6a:a3:48:
4f:ea:16:70:12:fd:b4:b1:91:7c:03:44:84:ea:28:
b6:9f:74:e4:7d:34:72:a6:cd:da:f7:46:6f:8d:7b:
60:23:8f:70:dd:79:dc:4c:90:22:54:b1:55:2f:6a:
a5:a9:f7:a4:71:30:ca:c1:79:b4:b3:c0:bf:d9:a7:
68:35:58:a9:e3:6f:3e:1c:7f:02:f4:79:d5:e9:b7:
e1:8c:d5:5f:f3:ff:32:50:07:dd:76:52:7f:23:c9:
c4:70:1c:d3:7c:b4:a5:8a:d8:2c:79:73:4d:e3:ac:
30:86:cc:5f:31:12:37:eb:e4:29:ae:8a:1e:3e:e7:
53:dd:04:18:61:b4:6b:f4:b2:0d:d4:d1:63:1b:c9:
c1:8e:2f:da:a9:4d:d4:26:34:d8:d6:db:32:4e:83:
e7:5d:2e:b3:3a:23:3a:ca:98:e0:13:9b:c8:e6:5e:
f9:2c:82:fd:77:4e:0e:53:54:bb:6f:3b:20:df:62:
17:12:0b:0c:2f:e3:d8:6f:8e:14:a3:8b:d9:fb:06:
90:5e:6d:fc:12:f8:83:16:1e:a7:98:63:58:d2:bb:
ef:f0:7b:a6:12:16:b8:1c:70:c2:11:38:14:58:19:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.0.0/18
24.120.0.0/16
24.136.32.0/19
24.170.192.0/20
24.248.0.0/13
64.58.128.0/18
64.147.0.0/19
64.207.224.0/19
64.253.160.0/19
66.37.224.0/19
66.210.0.0/16
68.0.0.0/12
68.96.0.0/12
68.224.0.0/13
69.63.96.0/19
70.160.0.0/11
72.192.0.0/11
74.126.48.0/20
76.76.128.0/20
98.160.0.0/11
174.64.0.0/12
184.176.0.0/12
207.162.128.0/19
209.34.192.0/19
209.242.128.0-209.242.175.255
216.16.128.0/20
216.54.0.0/17
216.231.0.0/19
IPv6:
2001:578::/30
2600:8800::/28
2606:ff00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12064
13432
13493
14710
15218
22318
22773
25904
26146
26204
31771
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:fc:00:14:59:be:e6:1a:a8:8e:3a:52:2c:83:32:bd:1c:9c:
c3:b5:b5:7f:a8:8d:d7:63:8b:91:a1:0a:df:30:5c:72:67:9d:
af:ae:c7:c5:b2:f9:09:df:13:e4:ef:80:46:79:af:0e:76:6e:
eb:2a:96:eb:62:7d:d8:31:7f:67:5f:d6:16:82:2b:f1:e2:f4:
1d:37:43:fe:6f:01:cf:ea:0b:c8:04:c1:02:7e:d6:5f:ed:d9:
67:18:46:35:13:e2:8d:73:10:e7:69:7a:f4:54:a8:d3:c8:9f:
76:15:98:3d:ce:38:12:83:34:67:a9:51:92:86:17:88:bb:6e:
1d:4a:8f:1e:cc:98:30:87:cb:65:5f:74:db:06:a4:39:de:30:
59:a9:12:d7:a9:87:d3:83:65:aa:cd:4e:c9:70:7b:66:64:be:
ab:98:30:05:ec:53:3a:12:67:2d:2c:a6:f8:be:f5:1d:1b:7f:
62:75:a3:a2:45:46:84:e7:16:89:b3:64:2b:5f:cb:b7:34:5a:
e0:c5:57:be:21:10:e3:6d:92:59:2e:6c:4a:40:4d:41:c8:7a:
03:4e:53:9b:b5:b5:66:54:a6:cd:bd:f2:3b:06:d4:b6:14:22:
6f:33:ce:86:c3:22:12:01:c2:32:2f:c2:b2:68:4a:86:4d:6c:
4c:84:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:18 2026 by rpki-client