
Certificate
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
File: 3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer (raw, json)
Hash identifier: X4FwNDczpIhnM536vSS9SEzpyxyZO6Rbb43LMApfboQ=
Subject key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584E85645FB47C3FEA2D63794B40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 16 Jul 2026 19:33:16 +0000
Certificate not after: Thu 19 Aug 2027 16:28:44 +0000
Subordinate resources: IP: 50.115.80.0/20
IP: 63.251.16.0 -- 63.251.85.255
IP: 63.251.128.0 -- 63.251.200.255
IP: 63.251.203.0 -- 63.251.223.255
IP: 64.74.0.0 -- 64.74.5.255
IP: 64.74.7.0/24
IP: 64.74.46.0/23
IP: 64.74.58.0/23
IP: 64.74.96.0 -- 64.74.255.255
IP: 64.94.13.0/24
IP: 64.94.24.0 -- 64.94.67.255
IP: 64.94.144.0/22
IP: 64.94.224.0 -- 64.95.3.255
IP: 64.95.28.0 -- 64.95.79.255
IP: 64.95.148.0/23
IP: 64.95.156.0/24
IP: 64.95.168.0/22
IP: 64.95.216.0 -- 64.95.255.255
IP: 66.150.72.0/22
IP: 66.150.132.0 -- 66.150.179.255
IP: 66.150.184.0 -- 66.150.227.255
IP: 66.151.124.0 -- 66.151.163.255
IP: 66.151.168.0 -- 66.151.207.255
IP: 66.151.212.0/22
IP: 66.151.220.0 -- 66.151.255.255
IP: 69.25.0.0 -- 69.25.51.255
IP: 69.25.62.0/24
IP: 69.25.64.0 -- 69.25.111.255
IP: 69.25.136.0 -- 69.25.179.255
IP: 69.25.208.0/22
IP: 69.88.132.0/23
IP: 70.42.0.0 -- 70.42.83.255
IP: 70.42.128.0 -- 70.42.163.255
IP: 70.42.214.0 -- 70.42.255.255
IP: 72.5.48.0 -- 72.5.95.255
IP: 72.5.104.0 -- 72.5.115.255
IP: 72.5.120.0/21
IP: 74.201.16.0/22
IP: 74.201.64.0 -- 74.201.171.255
IP: 74.217.36.0 -- 74.217.199.255
IP: 74.217.204.0 -- 74.217.255.255
IP: 75.98.0.0 -- 75.98.35.255
IP: 107.150.136.0/23
IP: 206.191.160.0/21
IP: 209.191.138.0/23
IP: 209.191.161.0/24
IP: 209.191.166.0 -- 209.191.171.255
IP: 209.191.173.0/24
IP: 209.191.175.0/24
IP: 209.191.180.0 -- 209.191.182.255
IP: 209.191.184.0/21
IP: 216.52.36.0/22
IP: 216.52.156.0 -- 216.52.208.255
IP: 216.52.210.0 -- 216.52.221.255
IP: 216.52.223.0 -- 216.52.232.255
IP: 216.52.234.0 -- 216.52.244.255
IP: 216.52.246.0 -- 216.52.255.255
IP: 216.133.252.0 -- 216.133.254.255
IP: 216.223.16.0/21
IP: 216.223.48.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:85:64:5f:b4:7c:3f:ea:2d:63:79:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Jul 16 19:33:16 2026 GMT
Not After : Aug 19 16:28:44 2027 GMT
Subject: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:19:55:05:87:89:ff:7d:2f:64:50:0f:ef:
50:ea:53:4a:40:25:d3:f4:ef:06:96:a1:eb:25:65:
2c:22:bd:d4:9c:92:a3:59:97:c1:92:7e:cb:da:bc:
c2:63:9e:57:b2:bc:90:13:43:95:92:31:b2:66:ec:
36:83:f3:f0:bf:99:de:b9:02:ab:56:16:db:30:98:
00:cd:cd:22:26:24:87:80:52:21:bf:c2:e3:47:e4:
c9:0b:f2:28:a6:df:3d:c9:58:a1:b3:d0:8a:97:9a:
92:8c:83:19:c4:f1:63:ae:1d:cc:6d:ac:8b:2b:31:
72:e2:c7:20:d2:f9:5a:bc:7d:42:90:cd:c4:09:57:
1c:49:20:72:45:93:42:ed:2a:5c:eb:5b:0b:cc:1d:
fb:2a:3d:81:96:9f:ef:68:37:87:cd:78:d1:76:0b:
3d:4b:43:b6:39:e3:04:28:b5:67:a4:d9:76:01:53:
22:4a:7f:e1:00:d2:ca:d9:e0:d9:8b:3a:0d:08:b0:
8a:ce:e8:9f:a3:57:54:85:f9:86:ee:28:96:80:51:
e9:d3:1c:87:d4:dc:5f:5b:fa:58:00:10:53:d4:00:
f3:cd:79:77:e4:ea:6a:58:b6:4d:5a:0b:0e:a7:43:
e8:d4:85:16:74:12:49:dd:be:bd:08:29:8d:d6:4f:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.115.80.0/20
63.251.16.0-63.251.85.255
63.251.128.0-63.251.200.255
63.251.203.0-63.251.223.255
64.74.0.0-64.74.5.255
64.74.7.0/24
64.74.46.0/23
64.74.58.0/23
64.74.96.0-64.74.255.255
64.94.13.0/24
64.94.24.0-64.94.67.255
64.94.144.0/22
64.94.224.0-64.95.3.255
64.95.28.0-64.95.79.255
64.95.148.0/23
64.95.156.0/24
64.95.168.0/22
64.95.216.0-64.95.255.255
66.150.72.0/22
66.150.132.0-66.150.179.255
66.150.184.0-66.150.227.255
66.151.124.0-66.151.163.255
66.151.168.0-66.151.207.255
66.151.212.0/22
66.151.220.0-66.151.255.255
69.25.0.0-69.25.51.255
69.25.62.0/24
69.25.64.0-69.25.111.255
69.25.136.0-69.25.179.255
69.25.208.0/22
69.88.132.0/23
70.42.0.0-70.42.83.255
70.42.128.0-70.42.163.255
70.42.214.0-70.42.255.255
72.5.48.0-72.5.95.255
72.5.104.0-72.5.115.255
72.5.120.0/21
74.201.16.0/22
74.201.64.0-74.201.171.255
74.217.36.0-74.217.199.255
74.217.204.0-74.217.255.255
75.98.0.0-75.98.35.255
107.150.136.0/23
206.191.160.0/21
209.191.138.0/23
209.191.161.0/24
209.191.166.0-209.191.171.255
209.191.173.0/24
209.191.175.0/24
209.191.180.0-209.191.182.255
209.191.184.0/21
216.52.36.0/22
216.52.156.0-216.52.208.255
216.52.210.0-216.52.221.255
216.52.223.0-216.52.232.255
216.52.234.0-216.52.244.255
216.52.246.0-216.52.255.255
216.133.252.0-216.133.254.255
216.223.16.0/21
216.223.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:4e:c1:d8:dd:5a:c0:bb:8b:47:5a:a3:3f:1c:42:a2:b1:34:
68:2a:e8:f5:67:3f:30:3f:b8:9c:64:ec:a6:02:43:7e:dd:06:
32:17:15:1d:51:04:15:19:3d:e7:61:28:f8:d9:0a:fd:c8:f5:
c6:54:60:7d:0e:b6:20:ee:80:55:1f:67:83:62:ef:a7:32:28:
be:de:4e:11:e1:79:c9:d2:f4:57:65:90:0c:c5:d9:5a:c6:2f:
e9:b7:e1:e6:d1:a6:d5:1a:34:35:11:97:62:6d:4e:c2:7f:c8:
4e:6f:d1:6d:f9:b0:3b:84:2e:ac:f8:f2:4e:77:d8:bb:01:2d:
48:0a:92:51:08:1b:a5:dc:88:1d:65:25:92:56:9c:49:49:37:
dd:34:4e:62:05:ae:67:ca:b8:22:ce:d6:a1:5b:ae:10:1f:5d:
0c:58:ab:a7:69:c3:5b:88:0a:2a:40:40:38:bf:c9:e9:48:b0:
63:ad:77:da:1a:21:85:c0:95:cd:2c:ee:99:4c:dd:27:5e:bc:
73:1a:6a:51:90:f1:04:3f:4c:90:ca:34:f0:c1:3c:72:24:85:
9e:8a:50:30:bd:29:c2:63:0f:5b:c1:35:17:64:10:ae:d0:7b:
0c:44:6c:9c:73:45:55:aa:ed:8f:0b:31:cd:e6:4a:28:60:de:
87:f1:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:29:38 2026 by rpki-client