Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
File: 40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer (raw, json)
Hash identifier: 9xJ5+l+2gtRXajoqWWVE+Xe770BUbWK2OXJENVYx4WE=
Subject key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial: 010D0C9F4328584D0BD55F403426058AC30FB200
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 03 Mar 2026 13:45:23 +0000
Certificate not after: Mon 05 Jun 2028 12:45:23 +0000
Subordinate resources: AS: 11290
AS: 22520
AS: 30466
AS: 46618
IP: 24.49.224.0/19
IP: 24.50.64.0/18
IP: 24.54.0.0/18
IP: 24.75.176.0/20
IP: 24.122.0.0/16
IP: 24.138.80.0/20
IP: 24.142.80.0/20
IP: 24.153.96.0/20
IP: 24.204.144.0/20
IP: 24.226.128.0/17
IP: 24.230.192.0 -- 24.231.15.255
IP: 45.42.36.0/22
IP: 57.134.0.0/17
IP: 66.171.48.0/20
IP: 72.11.160.0/19
IP: 74.210.128.0/17
IP: 104.37.200.0/21
IP: 104.192.116.0/22
IP: 104.200.80.0/20
IP: 104.218.124.0/22
IP: 104.244.68.0/22
IP: 104.245.152.0/21
IP: 108.171.64.0/19
IP: 140.106.0.0/19
IP: 144.168.52.0/22
IP: 157.208.0.0/18
IP: 158.222.104.0/21
IP: 161.199.164.0/22
IP: 162.142.114.0/23
IP: 162.212.8.0/22
IP: 162.217.4.0/22
IP: 162.223.0.0/22
IP: 162.244.44.0/22
IP: 162.247.92.0/22
IP: 162.252.216.0/21
IP: 167.248.160.0/19
IP: 170.249.32.0/19
IP: 170.249.80.0/21
IP: 172.97.52.0/22
IP: 173.0.192.0/20
IP: 184.75.128.0/20
IP: 199.36.124.0/22
IP: 199.102.200.0/21
IP: 199.193.168.0/21
IP: 204.144.60.0/22
IP: 205.151.61.0 -- 205.151.69.255
IP: 205.237.35.0 -- 205.237.71.255
IP: 208.77.10.0/23
IP: 208.96.192.0/18
IP: 208.118.208.0/20
IP: 209.15.64.0/19
IP: 209.15.160.0/19
IP: 209.54.64.0/20
IP: 209.169.128.0/18
IP: 209.172.20.0/22
IP: 216.71.80.0/20
IP: 216.228.208.0/20
IP: 217.28.24.0/21
IP: 2001:18c0::/32
IP: 2602:210::/32
IP: 2604:4d80::/32
IP: 2606:6300::/32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:d5:5f:40:34:26:05:8a:c3:0f:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Validity
Not Before: Mar 3 13:45:23 2026 GMT
Not After : Jun 5 12:45:23 2028 GMT
Subject: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f3:b7:b4:e6:eb:75:1a:5b:05:4d:7a:d3:03:
43:24:eb:ac:3e:f4:27:8c:b7:bf:71:8f:7a:bb:ec:
e7:ff:7f:01:8a:0e:f5:1a:b0:84:b4:53:b2:6f:2f:
5e:7c:bd:92:15:55:12:97:5e:c8:e5:9a:64:99:95:
29:57:16:7c:fe:33:35:85:cf:b3:8d:01:4e:56:fc:
18:73:bc:a6:69:23:e1:4a:8b:32:cc:51:09:7d:0b:
f0:1c:42:e4:17:fe:75:26:d0:bd:1f:eb:81:42:39:
60:b7:4e:2d:12:17:12:af:69:b7:33:6a:32:d8:d2:
5d:e9:dc:ee:42:34:80:ec:0f:0d:e8:e7:62:c4:b8:
d3:ed:1a:8c:b9:e0:3f:d1:7b:f2:0f:f0:5e:90:15:
32:cd:e9:d2:ec:ce:20:86:cb:fa:60:1c:42:25:a9:
16:e0:05:ce:2b:65:27:c9:1c:ba:a8:6b:55:6f:4f:
9a:a5:2d:47:b8:98:e6:c6:a9:e2:57:d1:3c:37:09:
9e:95:5d:97:90:d2:a2:21:54:28:5a:c7:86:4d:8a:
b3:0f:80:5a:8e:9b:d2:ab:83:cb:73:ca:24:47:0a:
55:c8:55:e9:6a:ac:40:36:80:44:fe:92:28:5a:17:
6d:11:b4:f7:cc:89:ff:18:18:b4:82:f1:6f:08:5b:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
X509v3 Authority Key Identifier:
keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.224.0/19
24.50.64.0/18
24.54.0.0/18
24.75.176.0/20
24.122.0.0/16
24.138.80.0/20
24.142.80.0/20
24.153.96.0/20
24.204.144.0/20
24.226.128.0/17
24.230.192.0-24.231.15.255
45.42.36.0/22
57.134.0.0/17
66.171.48.0/20
72.11.160.0/19
74.210.128.0/17
104.37.200.0/21
104.192.116.0/22
104.200.80.0/20
104.218.124.0/22
104.244.68.0/22
104.245.152.0/21
108.171.64.0/19
140.106.0.0/19
144.168.52.0/22
157.208.0.0/18
158.222.104.0/21
161.199.164.0/22
162.142.114.0/23
162.212.8.0/22
162.217.4.0/22
162.223.0.0/22
162.244.44.0/22
162.247.92.0/22
162.252.216.0/21
167.248.160.0/19
170.249.32.0/19
170.249.80.0/21
172.97.52.0/22
173.0.192.0/20
184.75.128.0/20
199.36.124.0/22
199.102.200.0/21
199.193.168.0/21
204.144.60.0/22
205.151.61.0-205.151.69.255
205.237.35.0-205.237.71.255
208.77.10.0/23
208.96.192.0/18
208.118.208.0/20
209.15.64.0/19
209.15.160.0/19
209.54.64.0/20
209.169.128.0/18
209.172.20.0/22
216.71.80.0/20
216.228.208.0/20
217.28.24.0/21
IPv6:
2001:18c0::/32
2602:210::/32
2604:4d80::/32
2606:6300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11290
22520
30466
46618
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:0b:b9:76:1d:40:07:0e:19:d3:e0:71:b3:9c:dc:a9:38:4e:
50:0f:62:b7:41:5a:87:c4:ea:d9:db:24:0c:6f:66:3d:20:d3:
b4:34:78:fe:ce:13:e5:81:95:8f:13:a6:78:c6:39:70:35:cd:
64:c0:dc:a6:ad:e4:11:e3:42:67:fd:26:58:3e:aa:99:10:76:
58:ac:22:ed:30:5d:02:da:09:aa:72:88:1c:3a:1f:f0:a1:4f:
2b:4c:41:a1:9d:38:62:59:24:ec:fa:56:cc:bb:4f:65:74:d7:
d4:40:07:a1:74:e0:e8:38:a9:86:65:55:b3:a2:8d:7d:98:2d:
19:a5:5c:2d:a7:c0:f4:bd:99:c1:1e:c7:8c:12:58:e0:9a:1a:
eb:ce:a9:6f:15:6e:f0:f8:da:dc:76:21:8e:90:07:0a:dd:a2:
bf:5c:e2:86:25:f2:10:aa:06:86:fd:74:65:9f:c4:48:b0:3e:
e3:fb:73:f9:7f:11:8c:94:e2:bb:a0:33:5e:1e:c9:76:0e:4a:
10:e2:34:3e:58:18:a8:bc:9f:c5:bd:40:d1:78:9c:24:65:5d:
4c:8e:a3:02:70:d0:da:6e:a2:d3:a5:8a:85:5e:1d:fe:99:6c:
f6:96:24:10:29:04:2b:3a:e9:94:50:d5:1b:07:bf:b1:f5:17:
6e:8f:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:47:21 2026 by rpki-client