Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer
File: 1f1cee84-663d-43bc-bc24-3b0050eff749.cer (raw, json)
Hash identifier: X1jsxT16w2bWbJqa6RdYnmR4CuVoqvDWqGk9p6vP0xI=
Subject key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D090AAF6EE7F9BF96D9793BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Mon 02 Mar 2026 13:45:22 +0000
Certificate not after: Sun 04 Jun 2028 12:45:22 +0000
Subordinate resources: AS: 13672 -- 13675
AS: 13977
AS: 14154
AS: 17093
AS: 22647
AS: 32645
IP: 64.222.64.0 -- 64.222.255.255
IP: 64.223.64.0 -- 64.223.255.255
IP: 66.243.192.0 -- 66.243.211.255
IP: 66.243.216.0 -- 66.243.222.255
IP: 66.243.224.0/24
IP: 66.243.227.0 -- 66.243.231.255
IP: 67.158.128.0/18
IP: 68.237.128.0/20
IP: 68.238.48.0/20
IP: 69.50.32.0/19
IP: 69.53.0.0/17
IP: 70.8.0.0/16
IP: 70.16.64.0/20
IP: 70.16.96.0/20
IP: 70.16.192.0/19
IP: 70.20.32.0/19
IP: 70.105.224.0/19
IP: 70.109.128.0/18
IP: 71.161.64.0 -- 71.161.75.255
IP: 71.161.80.0 -- 71.161.127.255
IP: 71.161.192.0/19
IP: 71.168.64.0/18
IP: 71.169.128.0/18
IP: 71.173.64.0/19
IP: 71.181.0.0/17
IP: 71.241.128.0/20
IP: 71.241.192.0/19
IP: 71.254.0.0/20
IP: 71.254.96.0/20
IP: 71.255.112.0 -- 71.255.159.255
IP: 72.64.0.0/20
IP: 72.65.96.0/19
IP: 72.71.192.0/18
IP: 72.73.64.0/18
IP: 72.87.48.0/20
IP: 72.92.128.0/19
IP: 72.95.80.0 -- 72.95.127.255
IP: 74.209.0.0/21
IP: 74.209.12.0 -- 74.209.51.255
IP: 74.209.56.0/21
IP: 163.252.0.0/16
IP: 209.105.128.0 -- 209.105.179.255
IP: 209.105.188.0/22
IP: 216.212.0.0/17
IP: 216.227.0.0 -- 216.227.5.255
IP: 216.227.8.0 -- 216.227.39.255
IP: 216.227.56.0 -- 216.227.99.255
IP: 216.227.118.0 -- 216.227.127.255
IP: 2604:6e00::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:0a:af:6e:e7:f9:bf:96:d9:79:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 2 13:45:22 2026 GMT
Not After : Jun 4 12:45:22 2028 GMT
Subject: CN=1f1cee84-663d-43bc-bc24-3b0050eff749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:10:b6:40:15:3b:4b:81:5e:4d:94:73:2d:
95:a9:ed:05:bf:92:34:28:bf:23:85:51:ec:f6:a0:
c9:ae:fd:38:9a:6e:de:79:f2:a7:41:b2:be:58:0f:
cc:b5:f1:de:58:80:f7:3c:f4:c0:ed:21:f0:49:72:
41:26:cf:6e:fb:43:05:8d:ec:3b:a0:63:df:bd:52:
04:3b:a5:41:25:bc:04:37:ee:2c:c9:1f:59:4f:e9:
8e:5b:2a:69:ca:62:7e:1d:1f:2f:1e:d0:7d:0d:23:
d9:db:b5:03:21:8b:79:55:bf:6d:21:d3:03:13:b4:
d7:78:57:77:18:c0:bb:0d:26:41:c6:68:a5:09:37:
aa:1a:b2:f9:e0:2a:e3:82:c4:09:88:53:3a:3b:00:
96:90:ec:52:86:6c:95:ac:dd:ff:22:92:19:bb:ae:
16:89:23:77:d2:45:e9:02:7a:7b:7c:4e:05:10:28:
d0:99:60:19:60:70:86:50:67:d4:66:fb:ec:11:07:
a7:34:f8:74:e0:66:71:57:2a:16:8d:f2:a6:f8:c6:
6c:5f:3c:c1:82:eb:07:5a:c2:3c:88:fe:4d:bf:43:
17:40:0f:51:cf:68:e0:1e:66:d4:02:41:4f:9e:25:
1e:2f:29:3f:29:a5:20:e3:cc:fa:cf:aa:0e:6e:c2:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.222.64.0-64.222.255.255
64.223.64.0-64.223.255.255
66.243.192.0-66.243.211.255
66.243.216.0-66.243.222.255
66.243.224.0/24
66.243.227.0-66.243.231.255
67.158.128.0/18
68.237.128.0/20
68.238.48.0/20
69.50.32.0/19
69.53.0.0/17
70.8.0.0/16
70.16.64.0/20
70.16.96.0/20
70.16.192.0/19
70.20.32.0/19
70.105.224.0/19
70.109.128.0/18
71.161.64.0-71.161.75.255
71.161.80.0-71.161.127.255
71.161.192.0/19
71.168.64.0/18
71.169.128.0/18
71.173.64.0/19
71.181.0.0/17
71.241.128.0/20
71.241.192.0/19
71.254.0.0/20
71.254.96.0/20
71.255.112.0-71.255.159.255
72.64.0.0/20
72.65.96.0/19
72.71.192.0/18
72.73.64.0/18
72.87.48.0/20
72.92.128.0/19
72.95.80.0-72.95.127.255
74.209.0.0/21
74.209.12.0-74.209.51.255
74.209.56.0/21
163.252.0.0/16
209.105.128.0-209.105.179.255
209.105.188.0/22
216.212.0.0/17
216.227.0.0-216.227.5.255
216.227.8.0-216.227.39.255
216.227.56.0-216.227.99.255
216.227.118.0-216.227.127.255
IPv6:
2604:6e00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13672-13675
13977
14154
17093
22647
32645
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:11:b2:ba:7a:e5:36:63:0f:21:a3:cf:65:24:19:88:8c:50:
a7:70:dd:d5:2d:a1:be:29:f3:5b:74:1c:3f:8d:3a:21:cb:d9:
a9:40:60:59:35:3c:14:9a:25:47:69:ea:27:8f:79:0c:4d:b0:
13:88:aa:d7:e0:52:18:99:50:09:e9:50:c9:f3:e5:33:d7:1f:
36:ac:52:75:63:5e:99:72:06:fa:43:3f:bb:a0:3e:39:5a:fd:
52:37:23:a3:3f:44:5f:f0:4f:28:d7:88:b6:e4:de:d5:8e:37:
1b:32:d5:2b:c5:0f:50:d2:d0:5d:f3:f5:0a:28:b9:c4:da:b0:
c0:19:7a:a0:e0:51:8d:8e:d7:c0:e1:5d:46:33:fc:21:1e:7b:
cc:c2:c5:0b:de:49:39:f4:94:83:30:af:b1:0f:e9:78:85:c9:
47:45:6a:2a:e6:95:dc:19:63:0a:6b:c6:ff:94:90:c6:5e:29:
12:19:89:e0:27:e8:91:f6:39:cf:4c:c3:26:4a:e9:f6:c5:7b:
08:69:cd:27:60:88:a8:f2:47:28:00:2f:ee:a4:69:8a:9d:01:
75:1a:d5:1a:23:ed:24:4f:72:b0:d0:b0:ea:81:84:8a:b9:67:
d8:22:c1:07:90:de:e0:fc:62:46:58:3d:a1:5e:f9:41:48:84:
57:23:4b:21
-----BEGIN CERTIFICATE-----
MIIIyDCCB7CgAwIBAgIUAQ0Mn0MoWE0JCq9u5/m/ltl5O8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI2MDMwMjEzNDUyMloXDTI4MDYwNDEyNDUyMlowLzEtMCsGA1UEAxMk
MWYxY2VlODQtNjYzZC00M2JjLWJjMjQtM2IwMDUwZWZmNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn20QtkAVO0uBXk2Ucy2Vqe0Fv5I0KL8jhVHs
9qDJrv04mm7eefKnQbK+WA/MtfHeWID3PPTA7SHwSXJBJs9u+0MFjew7oGPfvVIE
O6VBJbwEN+4syR9ZT+mOWyppymJ+HR8vHtB9DSPZ27UDIYt5Vb9tIdMDE7TXeFd3
GMC7DSZBxmilCTeqGrL54CrjgsQJiFM6OwCWkOxShmyVrN3/IpIZu64WiSN30kXp
Anp7fE4FECjQmWAZYHCGUGfUZvvsEQenNPh04GZxVyoWjfKm+MZsXzzBgusHWsI8
iP5Nv0MXQA9Rz2jgHmbUAkFPniUeLyk/KaUg48z6z6oObsIvqwIDAQABo4IF2jCC
BdYwHQYDVR0OBBYEFNj44D0VOaRUde7rEjcQ63sZusbaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
ZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBlZmY3NDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmMWNlZTg0LTY2M2QtNDNiYy1i
YzI0LTNiMDA1MGVmZjc0OS8xZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBl
ZmY3NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwggHDBggrBgEF
BQcBBwEB/wSCAbIwggGuMIIBmwQCAAEwggGTMAsDBAZA3kADAwBA3jALAwQGQN9A
AwMFQMAwDAMEBkLzwAMEAkLz0DAMAwQDQvPYAwQAQvPeAwQAQvPgMAwDBABC8+MD
BANC8+ADBAZDnoADBARE7YADBARE7jADBAVFMiADBAdFNQADAwBGCAMEBEYQQAME
BEYQYAMEBUYQwAMEBUYUIAMEBUZp4AMEBkZtgDAMAwQGR6FAAwQCR6FIMAwDBARH
oVADBAdHoQADBAVHocADBAZHqEADBAZHqYADBAVHrUADBAdHtQADBARH8YADBAVH
8cADBARH/gADBARH/mAwDAMEBEf/cAMEBUf/gAMEBEhAAAMEBUhBYAMEBkhHwAME
BkhJQAMEBEhXMAMEBUhcgDAMAwQESF9QAwQHSF8AAwQDStEAMAwDBAJK0QwDBAJK
0TADBANK0TgDAwCj/DAMAwQH0WmAAwQC0WmwAwQC0Wm8AwQH2NQAMAsDAwDY4wME
AdjjBDAMAwQD2OMIAwQD2OMgMAwDBAPY4zgDBALY42AwDAMEAdjjdgMEB9jjADAN
BAIAAjAHAwUAJgRuADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeMAgCAjVoAgI1awIC
NpkCAjdKAgJCxQICWHcCAn+FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACYRsrp65TZjDyGjz2UkGYiMUKdw
3dUtob4p81t0HD+NOiHL2alAYFk1PBSaJUdp6iePeQxNsBOIqtfgUhiZUAnpUMnz
5TPXHzasUnVjXplyBvpDP7ugPjla/VI3I6M/RF/wTyjXiLbk3tWONxsy1SvFD1DS
0F3z9QooucTasMAZeqDgUY2O18DhXUYz/CEee8zCxQveSTn0lIMwr7EP6XiFyUdF
airmldwZYwprxv+UkMZeKRIZieAn6JH2Oc9MwyZK6fbFewhpzSdgiKjyRygAL+6k
aYqdAXUa1Roj7SRPcrDQsOqBhIq5Z9giwQeQ3uD8YkZYPaFe+UFIhFcjSyE=
-----END CERTIFICATE-----
Generated at Sun Mar 15 00:03:17 2026 by rpki-client