Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
File:                     66094ef6-a967-4978-81e1-d66227a478fd.cer (raw, json)
Hash identifier:          TDyNPhNPt1tl7b1QBV2VZ6FhPUXAn7ZGVx207XaJrNQ=
Subject key identifier:   DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584D980E75B816A02865D30EA600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Apr 2026 19:13:35 +0000
Certificate not after:    Tue 25 Jul 2028 19:13:35 +0000
Subordinate resources:    AS: 3770
                          AS: 5738
                          AS: 6311
                          AS: 8120
                          AS: 10314
                          AS: 10809
                          AS: 11524
                          AS: 13536
                          AS: 14477
                          AS: 14877
                          AS: 15320
                          AS: 16425
                          AS: 20225
                          AS: 21547
                          AS: 27382
                          AS: 62929
                          IP: 64.17.96.0/19
                          IP: 64.25.208.0/20
                          IP: 64.140.192.0/18
                          IP: 66.109.32.0/19
                          IP: 66.152.96.0/19
                          IP: 66.186.160.0/19
                          IP: 66.211.128.0/19
                          IP: 66.231.192.0/19
                          IP: 67.217.96.0/19
                          IP: 68.65.124.0/23
                          IP: 68.70.48.0/20
                          IP: 68.233.160.0/20
                          IP: 69.24.0.0/20
                          IP: 69.49.128.0/19
                          IP: 69.84.128.0/19
                          IP: 69.84.208.0/20
                          IP: 69.168.0.0/20
                          IP: 72.0.128.0/19
                          IP: 72.12.64.0/19
                          IP: 72.15.0.0/19
                          IP: 72.55.224.0/19
                          IP: 74.220.224.0/20
                          IP: 98.159.208.0/20
                          IP: 162.223.16.0/22
                          IP: 162.223.204.0/22
                          IP: 162.246.192.0/22
                          IP: 173.242.96.0/20
                          IP: 173.243.160.0/20
                          IP: 176.115.176.0/21
                          IP: 206.128.96.0/20
                          IP: 207.136.192.0/18
                          IP: 208.103.188.0/24
                          IP: 209.94.96.0/19
                          IP: 209.198.64.0/18
                          IP: 216.27.112.0/20
                          IP: 216.59.64.0/19
                          IP: 216.107.192.0 -- 216.107.239.255
                          IP: 216.114.128.0/18
                          IP: 216.130.224.0/20
                          IP: 216.179.0.0/17
                          IP: 216.234.138.0/23
                          IP: 216.238.160.0/20
                          IP: 2001:4940::/32
                          IP: 2604:900::/32
                          IP: 2604:3f00::/32
                          IP: 2605:da80::/32
                          IP: 2606:9800::/32
                          IP: 2606:d780::/32
                          IP: 2607:3180::/32
                          IP: 2607:3900::/32
                          IP: 2607:fc58::/32
                          IP: 2607:fd48::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:0e:75:b8:16:a0:28:65:d3:0e:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Apr 22 19:13:35 2026 GMT
            Not After : Jul 25 19:13:35 2028 GMT
        Subject: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:aa:88:93:26:e6:ed:1a:ff:2c:43:1a:ad:
                    4a:f4:bb:45:dc:fb:3e:2f:b4:63:46:b4:0a:50:f0:
                    65:41:3b:0c:81:75:4c:6a:d9:97:70:46:89:c1:81:
                    fd:13:6f:21:d3:d6:5e:c6:3a:a7:7b:83:85:ba:eb:
                    54:01:15:6e:bc:c2:62:e7:55:db:3f:aa:6a:bd:12:
                    8e:a6:d7:37:94:2a:9e:a6:82:b3:a4:7f:0e:bc:ea:
                    36:7a:0b:83:0b:c3:44:0d:c1:23:66:a2:b6:31:97:
                    44:06:61:da:67:1a:7b:9c:01:d5:3a:3f:03:a9:d5:
                    d3:e3:cc:89:b9:00:e8:d0:4d:8e:0e:6f:cc:3a:03:
                    c1:89:25:42:c0:5d:8e:7f:bf:3a:06:af:78:c1:48:
                    cc:73:f0:3b:68:d7:91:b3:27:f6:02:6f:c3:ba:ea:
                    bc:5a:26:55:9f:a8:99:79:65:53:1c:ab:39:50:d0:
                    9f:fc:f5:00:70:ea:81:bf:15:66:e6:f8:34:83:2f:
                    9b:fd:c9:3d:b9:09:6f:59:f8:61:3d:14:d9:00:5b:
                    9b:8b:fa:85:da:9a:c5:42:90:a4:04:e5:b1:f9:05:
                    73:c5:2a:78:f0:de:09:bf:89:62:e4:4e:c6:08:94:
                    8a:e1:5d:04:5c:6b:20:e8:74:9b:5e:97:5b:fa:66:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.96.0/19
                  64.25.208.0/20
                  64.140.192.0/18
                  66.109.32.0/19
                  66.152.96.0/19
                  66.186.160.0/19
                  66.211.128.0/19
                  66.231.192.0/19
                  67.217.96.0/19
                  68.65.124.0/23
                  68.70.48.0/20
                  68.233.160.0/20
                  69.24.0.0/20
                  69.49.128.0/19
                  69.84.128.0/19
                  69.84.208.0/20
                  69.168.0.0/20
                  72.0.128.0/19
                  72.12.64.0/19
                  72.15.0.0/19
                  72.55.224.0/19
                  74.220.224.0/20
                  98.159.208.0/20
                  162.223.16.0/22
                  162.223.204.0/22
                  162.246.192.0/22
                  173.242.96.0/20
                  173.243.160.0/20
                  176.115.176.0/21
                  206.128.96.0/20
                  207.136.192.0/18
                  208.103.188.0/24
                  209.94.96.0/19
                  209.198.64.0/18
                  216.27.112.0/20
                  216.59.64.0/19
                  216.107.192.0-216.107.239.255
                  216.114.128.0/18
                  216.130.224.0/20
                  216.179.0.0/17
                  216.234.138.0/23
                  216.238.160.0/20
                IPv6:
                  2001:4940::/32
                  2604:900::/32
                  2604:3f00::/32
                  2605:da80::/32
                  2606:9800::/32
                  2606:d780::/32
                  2607:3180::/32
                  2607:3900::/32
                  2607:fc58::/32
                  2607:fd48::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3770
                  5738
                  6311
                  8120
                  10314
                  10809
                  11524
                  13536
                  14477
                  14877
                  15320
                  16425
                  20225
                  21547
                  27382
                  62929

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:a7:ce:6f:42:87:4f:3f:c8:42:e4:65:69:11:0c:54:5d:
         82:85:79:3f:32:ed:9d:79:f1:d7:09:20:8f:11:e2:45:d8:0b:
         98:d3:81:d0:7e:5b:3b:4d:96:85:91:7c:b2:5a:6c:2f:42:c3:
         1b:9e:e1:b1:62:96:f5:06:54:3f:e8:a1:b7:35:54:5c:0d:e1:
         7d:45:f2:63:d7:79:37:33:38:bd:76:48:7e:7f:24:6a:50:55:
         86:3d:93:3c:84:6b:1b:df:5e:46:7b:23:97:41:ad:01:7a:aa:
         92:91:5e:25:de:2b:12:bf:6e:40:42:56:f5:eb:85:f1:2b:56:
         43:7e:15:10:d8:6b:c3:bd:da:15:34:c2:b9:32:b9:d1:d5:c2:
         de:f2:86:df:f4:f2:a8:82:19:2b:01:4c:3d:24:3d:98:eb:71:
         be:60:42:d5:b1:ef:16:7f:b3:f4:4b:bd:4d:7f:84:57:24:9f:
         ee:05:7b:7f:22:c8:02:4c:d6:5b:95:2f:84:39:dc:06:2e:03:
         2f:fa:e4:27:58:a2:82:ed:3b:93:4b:99:d3:50:bd:44:e0:e6:
         ae:4f:b4:9b:51:b6:56:e5:5b:38:4e:f2:3e:50:34:d6:2d:68:
         1f:1a:d3:5c:48:da:d9:44:86:5a:87:24:93:95:67:b0:88:95:
         e1:b9:79:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:43:18 2026 by rpki-client