Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
File: ac9a6201-fe8c-49a4-985d-5463076b397d.cer (raw, json)
Hash identifier: WWngZbNWvM7noSNnO3Yme/l0CbmTURiiBRQ548GE1cs=
Subject key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial: 010D0C9F4328584D75CD8AD83757F6AAD874E500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Fri 10 Apr 2026 12:45:17 +0000
Certificate not after: Thu 13 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 3770
AS: 5738
AS: 6311
AS: 8120
AS: 10314
AS: 10809
AS: 11524
AS: 13536
AS: 14477
AS: 14877
AS: 15320
AS: 16425
AS: 20225
AS: 21547
AS: 27382
AS: 62929
IP: 64.17.96.0/19
IP: 64.25.208.0/20
IP: 64.140.192.0/18
IP: 66.109.32.0/19
IP: 66.152.96.0/19
IP: 66.186.160.0/19
IP: 66.211.128.0/19
IP: 66.231.192.0/19
IP: 67.217.96.0/19
IP: 68.65.124.0/23
IP: 68.70.48.0/20
IP: 68.233.160.0/20
IP: 69.24.0.0/20
IP: 69.49.128.0/19
IP: 69.84.128.0/19
IP: 69.84.208.0/20
IP: 69.168.0.0/20
IP: 72.0.128.0/19
IP: 72.12.64.0/19
IP: 72.15.0.0/19
IP: 72.55.224.0/19
IP: 74.220.224.0/20
IP: 98.159.208.0/20
IP: 162.223.16.0/22
IP: 162.223.204.0/22
IP: 162.246.192.0/22
IP: 173.242.96.0/20
IP: 173.243.160.0/20
IP: 176.115.176.0/21
IP: 206.128.96.0/20
IP: 207.136.192.0/18
IP: 208.103.188.0/24
IP: 209.94.96.0/19
IP: 209.198.64.0/18
IP: 216.27.112.0/20
IP: 216.59.64.0/19
IP: 216.107.192.0 -- 216.107.239.255
IP: 216.114.128.0/18
IP: 216.130.224.0/20
IP: 216.179.0.0/17
IP: 216.234.138.0/23
IP: 216.238.160.0/20
IP: 2001:4940::/32
IP: 2604:900::/32
IP: 2604:3f00::/32
IP: 2605:da80::/32
IP: 2606:9800::/32
IP: 2606:d780::/32
IP: 2607:3180::/32
IP: 2607:3900::/32
IP: 2607:fc58::/32
IP: 2607:fd48::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:75:cd:8a:d8:37:57:f6:aa:d8:74:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
Validity
Not Before: Apr 10 12:45:17 2026 GMT
Not After : Jul 13 12:45:17 2028 GMT
Subject: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:d3:42:9b:63:c4:2b:85:41:e7:5b:10:1e:
56:35:9e:66:16:7b:32:69:42:5a:7c:9b:b4:48:6c:
c1:45:80:fb:aa:69:fb:d4:d1:73:36:e4:24:32:11:
0d:3e:9a:a4:46:06:1f:47:70:43:0f:f1:dd:c8:fa:
99:7c:11:6a:39:db:c0:de:b6:bc:fc:fd:f6:7e:d7:
06:20:ca:03:28:b6:65:03:38:c5:26:4c:c8:ea:2a:
56:c9:6b:26:fd:74:b0:7c:99:31:d9:77:c8:b6:d0:
59:03:26:d4:16:9d:a0:5c:bf:23:f5:5d:63:0a:9a:
f5:99:5e:d5:e1:61:9d:82:41:06:09:c5:c1:7b:0e:
ac:76:4d:68:ff:56:a7:5e:2c:8a:8f:f3:8e:9f:76:
68:bb:07:a5:7d:b5:0c:8d:f9:4b:cd:ba:57:b7:22:
5d:ee:f4:82:22:51:26:cd:0e:e3:0c:ff:a3:28:2b:
2e:d0:04:20:33:aa:33:17:2b:89:89:f2:e7:72:2d:
73:8a:d7:27:29:4b:4c:f2:f8:68:f0:2a:a8:04:4d:
6e:5b:ee:ef:c9:67:32:f8:18:ce:c3:05:7b:15:f2:
e1:88:96:f4:eb:1a:46:d6:e8:da:5c:ac:c4:87:7e:
49:6b:02:fa:af:98:be:fe:eb:b6:73:4d:4a:74:f6:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
X509v3 Authority Key Identifier:
keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.17.96.0/19
64.25.208.0/20
64.140.192.0/18
66.109.32.0/19
66.152.96.0/19
66.186.160.0/19
66.211.128.0/19
66.231.192.0/19
67.217.96.0/19
68.65.124.0/23
68.70.48.0/20
68.233.160.0/20
69.24.0.0/20
69.49.128.0/19
69.84.128.0/19
69.84.208.0/20
69.168.0.0/20
72.0.128.0/19
72.12.64.0/19
72.15.0.0/19
72.55.224.0/19
74.220.224.0/20
98.159.208.0/20
162.223.16.0/22
162.223.204.0/22
162.246.192.0/22
173.242.96.0/20
173.243.160.0/20
176.115.176.0/21
206.128.96.0/20
207.136.192.0/18
208.103.188.0/24
209.94.96.0/19
209.198.64.0/18
216.27.112.0/20
216.59.64.0/19
216.107.192.0-216.107.239.255
216.114.128.0/18
216.130.224.0/20
216.179.0.0/17
216.234.138.0/23
216.238.160.0/20
IPv6:
2001:4940::/32
2604:900::/32
2604:3f00::/32
2605:da80::/32
2606:9800::/32
2606:d780::/32
2607:3180::/32
2607:3900::/32
2607:fc58::/32
2607:fd48::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3770
5738
6311
8120
10314
10809
11524
13536
14477
14877
15320
16425
20225
21547
27382
62929
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:6c:8d:08:6f:a8:18:61:0c:81:fe:11:52:19:89:aa:e8:68:
87:10:a2:a2:93:d2:e8:7b:48:22:f7:88:18:9b:bd:61:17:ae:
d1:60:4d:67:aa:f0:20:87:ee:a5:dd:48:5d:38:b8:ca:2a:5b:
cb:00:81:02:59:35:2f:8e:5f:98:19:a3:48:a9:06:7a:36:f6:
92:3a:12:8c:70:12:3f:61:a3:31:69:b0:e4:98:39:14:10:70:
94:4c:fb:a2:33:9b:ab:75:9f:7e:8b:53:b0:6f:00:e4:11:bf:
51:18:cb:78:ba:f0:de:4f:b1:06:48:74:e8:64:5c:df:f0:34:
b5:fe:bd:e8:1e:8a:e2:19:42:26:55:6c:72:a0:bb:c3:da:54:
d2:9b:90:88:84:ca:98:37:c8:da:b1:51:a1:b8:cc:44:b0:9a:
67:09:aa:4a:a7:95:70:91:52:f1:6d:5c:19:ed:85:74:0a:08:
07:73:32:5f:0a:da:f1:e9:88:63:94:45:ff:87:34:d8:bd:8a:
75:e5:35:05:b3:f5:e5:a3:a1:f0:44:30:54:be:0b:e0:a7:4c:
5e:48:35:90:ff:a9:ad:00:93:9a:36:5d:a8:ae:ca:f1:32:c6:
12:81:7b:5f:ce:ae:8c:14:cc:f5:01:75:3d:11:53:10:cf:42:
24:ea:2d:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:57:30 2026 by rpki-client