Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
File:                     8ed3050a-4605-4094-b331-bb0f8758defe.cer (raw, json)
Hash identifier:          VC81kNAatbEyjTuVuhiFMOuWcU8S7t72LvFDGNQnORA=
Subject key identifier:   71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584E3E57A114F6FC4EFB7FDDC180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Jun 2026 08:45:11 +0000
Certificate not after:    Sat 23 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 181 -- 185
                          AS: 229 -- 230
                          AS: 232 -- 233
                          AS: 235 -- 238
                          AS: 689
                          AS: 750 -- 759
                          AS: 2882 -- 2883
                          AS: 2885
                          AS: 4553
                          IP: 35.0.0.0 -- 35.16.255.255
                          IP: 35.20.0.0 -- 35.25.255.255
                          IP: 35.32.0.0 -- 35.33.127.255
                          IP: 35.34.0.0 -- 35.34.79.255
                          IP: 35.37.0.0 -- 35.39.95.255
                          IP: 35.39.128.0 -- 35.40.255.255
                          IP: 35.46.0.0/16
                          IP: 35.50.0.0/17
                          IP: 35.54.0.0/20
                          IP: 35.58.0.0/15
                          IP: 35.62.0.0 -- 35.71.63.255
                          IP: 35.128.216.0 -- 35.128.255.255
                          IP: 192.35.161.0 -- 192.35.170.255
                          IP: 192.41.229.0 -- 192.41.238.255
                          IP: 192.122.181.0 -- 192.122.200.255
                          IP: 192.203.195.0/24
                          IP: 198.108.0.0/14
                          IP: 204.38.0.0/16
                          IP: 204.39.128.0/17
                          IP: 207.72.0.0/14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:57:a1:14:f6:fc:4e:fb:7f:dd:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 21 08:45:11 2026 GMT
            Not After : Sep 23 08:45:11 2028 GMT
        Subject: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:96:92:41:63:3f:c2:e2:26:32:e1:69:48:
                    16:9e:3e:23:55:92:07:04:e2:db:4d:5c:f6:75:ed:
                    b3:2c:00:c6:21:01:f3:f9:1d:7e:10:6d:1c:07:b7:
                    ce:cc:54:f9:cc:9e:c1:bc:88:ba:0f:e3:ac:cb:fa:
                    8d:15:8d:39:cc:6b:31:8b:70:14:ae:85:62:20:26:
                    cd:8c:46:0c:84:23:12:9d:a8:89:a1:a0:09:33:6c:
                    e6:61:5b:83:3a:ab:b4:1d:ea:c7:df:a0:92:d0:2b:
                    16:ce:a5:7f:f1:55:23:23:09:a4:e3:af:d7:a7:8f:
                    e1:17:7d:26:a9:7f:00:f0:71:4b:7a:1d:f5:9b:9a:
                    4a:80:d7:e4:ee:06:e1:bd:6f:22:71:14:57:8c:6a:
                    ac:78:51:c3:6e:7d:93:fb:c1:a2:82:bc:3f:90:68:
                    ba:52:db:fb:68:a5:02:6d:23:15:41:be:aa:70:a5:
                    0c:4a:88:c3:e5:6c:e1:76:e3:12:89:e1:fd:34:13:
                    53:73:08:c0:82:68:a0:25:9a:e9:12:25:db:dc:84:
                    10:57:1e:78:1d:98:c3:b3:54:1e:a8:9b:09:0a:ee:
                    3b:aa:3f:8b:44:11:5f:08:dc:a5:dc:da:87:f1:06:
                    7d:70:f6:1d:54:25:b3:4c:29:4c:df:cf:54:2a:e4:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.0.0.0-35.16.255.255
                  35.20.0.0-35.25.255.255
                  35.32.0.0-35.33.127.255
                  35.34.0.0-35.34.79.255
                  35.37.0.0-35.39.95.255
                  35.39.128.0-35.40.255.255
                  35.46.0.0/16
                  35.50.0.0/17
                  35.54.0.0/20
                  35.58.0.0/15
                  35.62.0.0-35.71.63.255
                  35.128.216.0-35.128.255.255
                  192.35.161.0-192.35.170.255
                  192.41.229.0-192.41.238.255
                  192.122.181.0-192.122.200.255
                  192.203.195.0/24
                  198.108.0.0/14
                  204.38.0.0/16
                  204.39.128.0/17
                  207.72.0.0/14

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  181-185
                  229-230
                  232-233
                  235-238
                  689
                  750-759
                  2882-2883
                  2885
                  4553

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6d:c4:6c:3d:8a:22:d9:1f:8c:91:2c:48:9e:8c:bb:e1:ae:
         34:58:bb:ad:27:9c:bc:11:e1:fb:1f:25:41:ae:cf:9f:77:4d:
         d7:5f:57:3f:1a:0b:ad:46:17:67:fa:ae:8c:0c:a0:3c:a9:3d:
         c2:03:bc:b6:8a:15:b7:95:9a:81:70:d5:eb:8a:a4:04:2f:09:
         97:b4:39:57:77:7f:91:c4:3c:c9:37:26:78:7c:89:1b:11:a6:
         e7:b6:43:23:22:01:54:cb:91:9a:f7:ed:0d:18:dd:59:1f:05:
         99:19:63:87:1c:f9:23:2c:39:81:53:d1:7b:38:e6:e5:9e:41:
         b9:a4:c1:1f:a2:3d:f2:d0:0e:35:0b:2e:96:54:40:05:c4:a1:
         08:d5:23:b6:b6:33:ea:04:5a:38:3f:7a:31:6f:b6:3d:2e:42:
         a4:4f:4f:6e:65:43:e5:14:5d:98:4b:fe:60:d4:7b:78:33:c9:
         f5:6a:df:c4:69:1d:7e:0a:05:e4:f7:a0:12:9c:c2:c9:a5:12:
         8a:86:64:1d:1d:93:b0:36:8e:c5:96:95:24:83:c9:5e:72:32:
         c3:02:76:99:84:fa:de:c5:2a:9f:4f:51:20:6a:e9:71:5e:b2:
         f8:7d:9d:2c:0a:28:b4:3e:60:43:54:6a:32:25:03:b4:61:0c:
         b0:13:d9:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:55 2026 by rpki-client