Certificate
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer
File: 7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.cer (raw, json)
Hash identifier: EJxz66jN3NsUTb4czUjh3qt60BdosxlrpdqP9QnoK8w=
Subject key identifier: 5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial: 010D0C9F4328584ECE94F8208F7F05A4B57C1828
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Wed 12 Aug 2026 00:45:11 +0000
Certificate not after: Tue 14 Nov 2028 01:45:11 +0000
Subordinate resources: AS: 58
AS: 74
AS: 566
AS: 820
AS: 837
AS: 3765 -- 3766
IP: 128.43.0.0/16
IP: 131.132.0.0 -- 131.141.255.255
IP: 132.246.0.0/16
IP: 138.214.0.0/16
IP: 142.2.0.0/16
IP: 142.53.0.0/16
IP: 142.64.0.0/16
IP: 142.72.0.0/16
IP: 142.74.0.0/16
IP: 142.92.0.0/16
IP: 142.130.0.0/16
IP: 142.191.0.0/16
IP: 142.206.0.0/16
IP: 142.208.0.0 -- 142.212.255.255
IP: 142.235.0.0 -- 142.236.255.255
IP: 159.177.0.0/16
IP: 161.187.0.0/16
IP: 167.11.0.0/16
IP: 167.33.0.0/16
IP: 167.227.0.0/16
IP: 192.5.144.0/24
IP: 192.12.62.0/24
IP: 192.12.98.0/24
IP: 192.12.215.0/24
IP: 192.16.205.0 -- 192.16.255.255
IP: 192.35.144.0/24
IP: 192.42.68.0/24
IP: 192.55.224.0/24
IP: 192.70.172.0/24
IP: 192.75.10.0/24
IP: 192.75.14.0/23
IP: 192.75.65.0/24
IP: 192.75.68.0/24
IP: 192.75.72.0/24
IP: 192.83.247.0/24
IP: 192.139.21.0/24
IP: 192.139.115.0 -- 192.139.117.255
IP: 192.139.141.0/24
IP: 192.139.198.0/24
IP: 192.197.52.0/23
IP: 192.197.71.0/24
IP: 192.197.73.0 -- 192.197.75.255
IP: 192.197.150.0/24
IP: 192.197.178.0 -- 192.197.187.255
IP: 192.197.243.0 -- 192.197.244.255
IP: 198.73.83.0 -- 198.73.87.255
IP: 198.73.135.0 -- 198.73.136.255
IP: 198.96.62.0/24
IP: 198.161.23.0/24
IP: 199.60.64.0/19
IP: 199.175.8.0/21
IP: 199.175.96.0/23
IP: 199.212.148.0/22
IP: 199.212.192.0 -- 199.212.216.255
IP: 204.174.103.0/24
IP: 204.187.48.0/23
IP: 204.225.144.0/24
IP: 205.189.5.0 -- 205.189.7.255
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ce:94:f8:20:8f:7f:05:a4:b5:7c:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Validity
Not Before: Aug 12 00:45:11 2026 GMT
Not After : Nov 14 01:45:11 2028 GMT
Subject: CN=7ed4b7da-afac-4a5d-b987-9835dbc0c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:66:6b:06:cd:32:73:b9:6a:be:12:a4:c0:70:
8c:e5:ac:98:d6:2a:61:1c:ef:56:24:37:10:cd:99:
75:cf:ae:e8:de:ae:23:fe:32:fe:ba:12:96:39:c0:
df:a5:e1:56:fc:76:25:02:1f:39:c4:c3:f0:58:a4:
59:f5:c2:5c:d5:78:16:d7:af:99:6f:f7:64:5b:7e:
59:8d:6c:b0:28:cd:67:35:44:a6:ca:e3:f0:0a:71:
eb:3f:95:79:8a:28:81:82:61:89:1c:66:70:f4:6e:
27:0d:bb:2a:b8:84:e6:06:b4:a7:1e:19:51:c8:12:
c5:c5:63:37:cc:e0:38:9a:dc:36:46:e3:6a:57:7d:
63:b7:48:74:28:5b:f8:b1:7b:71:65:6a:cb:3f:d7:
3f:dc:12:c8:99:a8:ba:ef:da:fd:aa:8d:e3:d4:a5:
96:e8:08:f9:31:0e:d2:b6:a3:4c:a1:9c:44:d1:95:
d8:f3:e9:30:05:f8:a6:55:48:fb:b8:62:a0:3f:8a:
25:f5:03:3f:3a:ff:a6:f6:80:4f:cb:b9:27:0c:01:
ea:7f:eb:bc:87:e2:b8:1b:d1:11:10:0a:b4:85:c4:
59:c3:23:47:68:97:bf:94:ba:d0:72:6d:dc:4b:d2:
4a:30:e9:50:38:f9:99:a3:ca:87:a9:33:86:b0:e7:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:25:D0:61:90:7F:1A:CA:4B:A9:D2:7C:77:B4:E6:99:F4:8A:22
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5/7ed4b7da-afac-4a5d-b987-9835dbc0c0a5.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
X509v3 Authority Key Identifier:
keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
sbgp-ipAddrBlock: critical
IPv4:
128.43.0.0/16
131.132.0.0-131.141.255.255
132.246.0.0/16
138.214.0.0/16
142.2.0.0/16
142.53.0.0/16
142.64.0.0/16
142.72.0.0/16
142.74.0.0/16
142.92.0.0/16
142.130.0.0/16
142.191.0.0/16
142.206.0.0/16
142.208.0.0-142.212.255.255
142.235.0.0-142.236.255.255
159.177.0.0/16
161.187.0.0/16
167.11.0.0/16
167.33.0.0/16
167.227.0.0/16
192.5.144.0/24
192.12.62.0/24
192.12.98.0/24
192.12.215.0/24
192.16.205.0-192.16.255.255
192.35.144.0/24
192.42.68.0/24
192.55.224.0/24
192.70.172.0/24
192.75.10.0/24
192.75.14.0/23
192.75.65.0/24
192.75.68.0/24
192.75.72.0/24
192.83.247.0/24
192.139.21.0/24
192.139.115.0-192.139.117.255
192.139.141.0/24
192.139.198.0/24
192.197.52.0/23
192.197.71.0/24
192.197.73.0-192.197.75.255
192.197.150.0/24
192.197.178.0-192.197.187.255
192.197.243.0-192.197.244.255
198.73.83.0-198.73.87.255
198.73.135.0-198.73.136.255
198.96.62.0/24
198.161.23.0/24
199.60.64.0/19
199.175.8.0/21
199.175.96.0/23
199.212.148.0/22
199.212.192.0-199.212.216.255
204.174.103.0/24
204.187.48.0/23
204.225.144.0/24
205.189.5.0-205.189.7.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58
74
566
820
837
3765-3766
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:db:d0:d5:1a:90:c1:1e:4d:b5:31:ca:a3:82:53:ad:f4:b7:
d7:18:02:4c:a2:d2:11:31:bb:79:3b:09:71:16:62:72:5b:86:
10:32:8e:bc:b2:c1:e5:86:41:e2:81:c0:15:ea:1e:af:1d:b7:
cf:a5:7c:24:1b:fe:d4:43:39:36:ab:b3:21:aa:9e:52:c5:78:
f3:c3:52:c6:9c:b1:b5:8b:16:10:d7:36:e9:7a:e2:1f:f4:64:
9f:75:9f:52:16:30:d0:3e:58:58:40:ad:d3:39:4c:1a:8c:7e:
fd:22:b7:ef:f2:71:73:17:11:70:a4:a0:14:2e:4f:07:78:8d:
9f:5a:a9:1f:45:83:6a:51:b2:9c:14:de:59:11:62:9e:0c:8f:
b4:0f:f8:46:06:b5:da:7d:04:bd:b9:ad:2f:e0:9e:f2:f2:42:
81:7d:2c:19:36:f1:73:9b:c3:3d:d4:d1:0d:e8:10:13:dc:aa:
65:c2:6a:b1:75:f1:e3:1c:d5:13:90:74:5c:eb:29:8c:bc:1e:
ad:cc:6d:28:57:40:e7:27:b5:45:21:81:ac:9f:2e:c6:dc:8a:
53:e9:65:5e:95:f5:bf:24:ec:a9:72:61:ab:04:05:7f:e7:1f:
83:ed:3c:33:60:44:f0:b9:7e:23:6e:21:43:5b:c4:db:81:30:
40:f5:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:01:04 2026 by rpki-client