Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
File:                     c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer (raw, json)
Hash identifier:          UdAhdyzf17aGgKtMKznIGH7httyLXVZk9ez/O1Vshj0=
Subject key identifier:   A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584E901B585E77566BB12ACB7F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Jul 2026 15:40:01 +0000
Certificate not after:    Sun 22 Oct 2028 15:40:01 +0000
Subordinate resources:    AS: 4867
                          AS: 16534
                          AS: 16760
                          AS: 22583
                          AS: 25803
                          AS: 26494
                          AS: 33404
                          AS: 46791
                          AS: 53596
                          IP: 74.112.224.0/22
                          IP: 74.115.128.0/21
                          IP: 104.129.224.0/20
                          IP: 170.137.0.0/16
                          IP: 174.136.160.0/19
                          IP: 198.160.147.0 -- 198.160.150.255
                          IP: 199.244.64.0/22
                          IP: 204.86.249.0/24
                          IP: 208.90.208.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:1b:58:5e:77:56:6b:b1:2a:cb:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Jul 20 15:40:01 2026 GMT
            Not After : Oct 22 15:40:01 2028 GMT
        Subject: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:d3:40:f1:69:65:7e:23:7c:5d:b3:4d:54:
                    ca:b5:9c:d8:20:d6:2d:c0:95:24:b4:34:d2:bf:23:
                    b3:a2:3f:ed:4e:74:7f:80:96:4d:66:97:a0:5e:cb:
                    84:0a:be:07:1e:62:0b:13:80:42:be:2d:b7:22:20:
                    43:45:ca:e3:37:8c:0b:86:ed:56:0f:9d:b0:4b:0a:
                    36:ae:7b:c3:3a:ad:64:72:a9:3d:f6:dd:54:48:f1:
                    36:88:9a:cf:e5:90:50:4a:c9:fe:8d:e6:dd:4e:59:
                    98:24:3e:23:2c:f2:e7:4f:36:51:fb:21:d5:2d:9c:
                    70:63:99:28:f3:93:7b:9f:0f:7d:30:49:de:8f:10:
                    f3:c8:79:5a:1d:45:40:85:10:6d:96:26:84:d6:de:
                    f0:14:13:18:f4:cc:4b:bf:c2:8d:5d:a5:da:0b:44:
                    ea:91:c0:11:14:85:d6:e2:7c:a4:06:4c:e7:0c:d4:
                    95:50:ba:2e:53:c9:6b:ae:5a:75:09:3c:05:4a:7b:
                    27:b8:e6:26:3b:fc:b7:01:7f:ac:d4:9f:16:15:de:
                    66:6e:72:97:e9:14:69:e3:18:45:59:38:85:79:10:
                    cd:c7:cc:7c:07:69:4e:11:92:cf:18:7f:bf:4c:36:
                    46:e8:f2:43:19:d1:77:f2:66:1f:b4:b7:cd:34:21:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.224.0/22
                  74.115.128.0/21
                  104.129.224.0/20
                  170.137.0.0/16
                  174.136.160.0/19
                  198.160.147.0-198.160.150.255
                  199.244.64.0/22
                  204.86.249.0/24
                  208.90.208.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4867
                  16534
                  16760
                  22583
                  25803
                  26494
                  33404
                  46791
                  53596

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:27:ca:dd:4a:a1:d4:00:a3:72:d5:fa:4e:bd:5f:ff:90:3f:
         e9:43:d4:50:c6:60:2a:d9:11:99:82:cb:7c:bd:bd:00:a2:4e:
         81:e3:b1:bd:78:34:68:0d:4a:2f:60:dc:7b:15:44:66:31:7e:
         6f:d7:25:5d:a3:af:b9:3a:45:d5:51:a0:85:b4:f9:2b:80:f1:
         b3:16:07:58:e5:ff:5c:01:b2:01:da:e2:6b:ab:45:42:ce:13:
         77:c9:73:4a:90:09:ec:b1:94:39:35:89:65:19:14:6c:5c:ff:
         db:18:63:6c:1a:c5:15:6e:93:32:a8:06:20:1f:0a:9c:62:8d:
         5f:3e:78:ff:79:ed:25:55:89:31:35:99:2f:ab:d0:a6:44:f1:
         df:b2:35:5e:90:fc:ac:da:27:2d:69:52:fe:0d:9d:f8:71:5c:
         17:5e:ab:5d:66:42:46:d9:d9:e1:6f:79:4e:88:5b:fd:db:7a:
         eb:05:e3:a0:13:43:31:a4:09:90:d5:f9:c0:cc:f9:ba:fc:27:
         06:65:4d:c6:10:4e:6e:fb:2e:8b:4d:32:49:d5:80:cc:1a:22:
         6f:6d:3e:92:18:d0:7f:76:bc:2a:d5:e9:02:d7:72:ee:f5:51:
         54:42:ee:7d:da:2f:65:8d:c1:1e:4d:c7:a4:b8:ea:79:a0:0e:
         5f:2a:59:be
-----BEGIN CERTIFICATE-----
MIIHYjCCBkqgAwIBAgIUAQ0Mn0MoWE6QG1hed1ZrsSrLf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz
YzQyMB4XDTI2MDcyMDE1NDAwMVoXDTI4MTAyMjE1NDAwMVowLzEtMCsGA1UEAxMk
YzdiOWNkNzMtNDc1My00MmIyLWExM2YtMjIxM2YwYmZlNGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TfTQPFpZX4jfF2zTVTKtZzYINYtwJUktDTS
vyOzoj/tTnR/gJZNZpegXsuECr4HHmILE4BCvi23IiBDRcrjN4wLhu1WD52wSwo2
rnvDOq1kcqk99t1USPE2iJrP5ZBQSsn+jebdTlmYJD4jLPLnTzZR+yHVLZxwY5ko
85N7nw99MEnejxDzyHlaHUVAhRBtliaE1t7wFBMY9MxLv8KNXaXaC0TqkcARFIXW
4nykBkznDNSVULouU8lrrlp1CTwFSnsnuOYmO/y3AX+s1J8WFd5mbnKX6RRp4xhF
WTiFeRDNx8x8B2lOEZLPGH+/TDZG6PJDGdF38mYftLfNNCGA9QIDAQABo4IEdDCC
BHAwHQYDVR0OBBYEFKgV1pstcj64gxWaljQs/5EqCz/OMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9j
N2I5Y2Q3My00NzUzLTQyYjItYTEzZi0yMjEzZjBiZmU0ZjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt
ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2M3YjljZDczLTQ3NTMtNDJiMi1h
MTNmLTIyMTNmMGJmZTRmOC9jN2I5Y2Q3My00NzUzLTQyYjItYTEzZi0yMjEzZjBi
ZmU0ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl
MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj
ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj
PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx
NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwVgYIKwYBBQUH
AQcBAf8ERzBFMEMEAgABMD0DBAJKcOADBANKc4ADBARogeADAwCqiQMEBa6IoDAM
AwQAxqCTAwQAxqCWAwQCx/RAAwQAzFb5AwQC0FrQMDwGCCsGAQUFBwEIAQH/BC0w
K6ApMCcCAhMDAgJAlgICQXgCAlg3AgJkywICZ34CAwCCfAIDALbHAgMA0VwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdCfK3Uqh1ACjctX6Tr1f/5A/6UPUUMZgKtkRmYLLfL29AKJOgeOxvXg0
aA1KL2DcexVEZjF+b9clXaOvuTpF1VGghbT5K4DxsxYHWOX/XAGyAdria6tFQs4T
d8lzSpAJ7LGUOTWJZRkUbFz/2xhjbBrFFW6TMqgGIB8KnGKNXz54/3ntJVWJMTWZ
L6vQpkTx37I1XpD8rNonLWlS/g2d+HFcF16rXWZCRtnZ4W95Tohb/dt66wXjoBND
MaQJkNX5wMz5uvwnBmVNxhBObvsui00ySdWAzBoib20+khjQf3a8KtXpAtdy7vVR
VELufdovZY3BHk3HpLjqeaAOXypZvg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:49 2026 by rpki-client