Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
File:                     01fc1815-34ef-424d-8258-506f8b486e35.cer (raw, json)
Hash identifier:          YaReSdMMCpC1cxRKHwrPI91xhQ/Y+rCTtBmSg+YupQQ=
Subject key identifier:   51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584FC02EEE44678EB7A99E70F300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 06 Nov 2026 13:45:13 +0000
Certificate not after:    Thu 08 Feb 2029 13:45:13 +0000
Subordinate resources:    AS: 10835
                          AS: 12078
                          AS: 12111
                          AS: 20151
                          AS: 25757
                          AS: 33635
                          AS: 46193
                          AS: 63188
                          AS: 399869
                          IP: 64.35.128.0/20
                          IP: 64.184.224.0/19
                          IP: 65.38.128.0/19
                          IP: 66.36.112.0/20
                          IP: 66.117.64.0/19
                          IP: 66.198.192.0/19
                          IP: 66.201.128.0/19
                          IP: 66.225.0.0/19
                          IP: 68.170.32.0/19
                          IP: 69.71.160.0/19
                          IP: 72.55.192.0/19
                          IP: 74.118.88.0/22
                          IP: 162.212.224.0/22
                          IP: 162.255.156.0/22
                          IP: 165.140.184.0/22
                          IP: 184.164.96.0/19
                          IP: 199.7.96.0/21
                          IP: 199.114.228.0/22
                          IP: 199.180.88.0/21
                          IP: 204.10.248.0/21
                          IP: 208.38.192.0/19
                          IP: 209.193.64.0 -- 209.193.111.255
                          IP: 216.229.160.0/19
                          IP: 2001:5f0::/32
                          IP: 2601:c000::/24
                          IP: 2604:d000::/32
                          IP: 2607:f498::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c0:2e:ee:44:67:8e:b7:a9:9e:70:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov  6 13:45:13 2026 GMT
            Not After : Feb  8 13:45:13 2029 GMT
        Subject: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:d6:1e:ac:79:c7:68:2e:ab:8d:c2:41:ed:
                    19:00:71:ca:54:3a:64:23:9c:b0:d6:74:b9:19:ab:
                    e4:ba:78:e4:d1:a0:d8:5c:65:f6:9a:11:0f:9e:07:
                    b2:39:7e:e5:23:b9:3f:ed:69:c5:fb:c4:f7:ff:b4:
                    5a:fe:90:04:cb:d5:55:d8:ec:3f:4a:8e:72:9e:e7:
                    c8:c7:57:d8:40:90:22:fa:4a:85:77:ff:56:e9:0e:
                    35:ed:c0:71:bf:99:3f:7f:5e:20:05:f7:e4:b9:27:
                    10:18:9a:63:ac:ae:79:20:08:92:8f:8d:69:fc:4a:
                    d5:ff:eb:f8:ee:a1:0a:8a:c7:c6:14:e6:fb:5f:91:
                    ba:69:af:de:2c:d4:51:4a:17:61:da:38:28:ea:be:
                    bd:a5:d8:57:73:74:00:e9:d7:87:3e:c8:9a:25:b0:
                    ce:68:1a:59:03:a4:35:2a:c0:8f:34:15:b6:b9:cc:
                    81:a5:5b:1e:b7:6a:b8:f2:35:ff:c0:a3:a7:1f:4e:
                    bf:d2:39:3d:8e:8d:e7:04:7c:c6:15:d5:48:7b:79:
                    d4:f2:24:40:f2:de:0b:59:cc:ad:26:2a:ec:5c:62:
                    e5:ce:bb:e6:cf:ea:36:2a:68:c4:af:21:a9:00:bf:
                    eb:10:c3:57:23:b3:e2:b5:59:17:35:ae:6f:cd:a3:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.128.0/20
                  64.184.224.0/19
                  65.38.128.0/19
                  66.36.112.0/20
                  66.117.64.0/19
                  66.198.192.0/19
                  66.201.128.0/19
                  66.225.0.0/19
                  68.170.32.0/19
                  69.71.160.0/19
                  72.55.192.0/19
                  74.118.88.0/22
                  162.212.224.0/22
                  162.255.156.0/22
                  165.140.184.0/22
                  184.164.96.0/19
                  199.7.96.0/21
                  199.114.228.0/22
                  199.180.88.0/21
                  204.10.248.0/21
                  208.38.192.0/19
                  209.193.64.0-209.193.111.255
                  216.229.160.0/19
                IPv6:
                  2001:5f0::/32
                  2601:c000::/24
                  2604:d000::/32
                  2607:f498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10835
                  12078
                  12111
                  20151
                  25757
                  33635
                  46193
                  63188
                  399869

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:84:58:53:15:0b:6c:7c:7b:00:70:77:d9:7f:fc:63:a6:ac:
         00:ae:91:42:13:7e:b1:94:ba:0c:50:32:2c:8e:87:24:6b:22:
         27:99:5f:dc:cd:b8:7c:78:37:71:c1:9b:49:bd:8c:aa:e9:de:
         47:f4:0f:28:7e:16:0a:2f:3d:49:18:1c:e2:b3:ae:47:a8:22:
         12:7b:79:ab:40:83:da:4d:85:f9:14:e5:8c:c7:c5:d7:2f:17:
         fa:e8:83:b0:c6:bb:6c:d0:a2:bd:4e:bd:73:d6:2a:94:2e:37:
         47:38:b2:61:3b:c1:45:bb:66:58:1e:bd:c3:f1:d4:e1:8e:6d:
         e3:af:fc:5c:a0:be:d1:94:c1:c9:b6:50:59:d2:f6:f1:00:a2:
         b2:94:21:9a:22:19:15:ec:4c:b7:13:e4:b2:14:4f:da:33:1f:
         ec:1f:7b:14:7e:95:75:0a:57:36:be:f7:3b:a4:ed:65:9c:b3:
         60:9c:a5:da:fe:43:35:e0:59:be:10:5c:c4:c1:d9:c7:e9:c7:
         68:76:9c:71:b4:05:08:d5:11:74:d9:60:ec:e7:7b:bf:95:0d:
         84:36:d6:a3:d6:7f:15:1d:82:e4:ac:b9:c4:61:0d:8a:36:5b:
         1f:9b:3f:3f:54:22:48:12:0e:d7:04:84:58:fa:c8:c2:71:cb:
         c2:65:dd:80
-----BEGIN CERTIFICATE-----
MIIH4DCCBsigAwIBAgIUAQ0Mn0MoWE/ALu5EZ463qZ5w8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI2MTEwNjEzNDUxM1oXDTI5MDIwODEzNDUxM1owLzEtMCsGA1UEAxMk
MDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2ZTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSnWHqx5x2guq43CQe0ZAHHKVDpkI5yw1nS5
Gavkunjk0aDYXGX2mhEPngeyOX7lI7k/7WnF+8T3/7Ra/pAEy9VV2Ow/So5ynufI
x1fYQJAi+kqFd/9W6Q417cBxv5k/f14gBffkuScQGJpjrK55IAiSj41p/ErV/+v4
7qEKisfGFOb7X5G6aa/eLNRRShdh2jgo6r69pdhXc3QA6deHPsiaJbDOaBpZA6Q1
KsCPNBW2ucyBpVset2q48jX/wKOnH06/0jk9jo3nBHzGFdVIe3nU8iRA8t4LWcyt
JirsXGLlzrvmz+o2KmjEryGpAL/rEMNXI7PitVkXNa5vzaOHvQIDAQABo4IE8jCC
BO4wHQYDVR0OBBYEFFGie6nXTpsEX2XbP8MIZoGEzECVMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w
MWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAxZmMxODE1LTM0ZWYtNDI0ZC04
MjU4LTUwNmY4YjQ4NmUzNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0
ODZlMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwgdIGCCsGAQUF
BwEHAQH/BIHCMIG/MIGZBAIAATCBkgMEBEAjgAMEBUC44AMEBUEmgAMEBEIkcAME
BUJ1QAMEBULGwAMEBULJgAMEBULhAAMEBUSqIAMEBUVHoAMEBUg3wAMEAkp2WAME
AqLU4AMEAqL/nAMEAqWMuAMEBbikYAMEA8cHYAMEAsdy5AMEA8e0WAMEA8wK+AME
BdAmwDAMAwQG0cFAAwQE0cFgAwQF2OWgMCEEAgACMBsDBQAgAQXwAwQAJgHAAwUA
JgTQAAMFACYH9JgwPQYIKwYBBQUHAQgBAf8ELjAsoCowKAICKlMCAi8uAgIvTwIC
TrcCAmSdAgMAg2MCAwC0cQIDAPbUAgMGGf0wVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeIRYUxULbHx7AHB3
2X/8Y6asAK6RQhN+sZS6DFAyLI6HJGsiJ5lf3M24fHg3ccGbSb2MquneR/QPKH4W
Ci89SRgc4rOuR6giEnt5q0CD2k2F+RTljMfF1y8X+uiDsMa7bNCivU69c9YqlC43
RziyYTvBRbtmWB69w/HU4Y5t46/8XKC+0ZTBybZQWdL28QCispQhmiIZFexMtxPk
shRP2jMf7B97FH6VdQpXNr73O6TtZZyzYJyl2v5DNeBZvhBcxMHZx+nHaHaccbQF
CNURdNlg7Od7v5UNhDbWo9Z/FR2C5Ky5xGENijZbH5s/P1QiSBIO1wSEWPrIwnHL
wmXdgA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:49:53 2026 by rpki-client