Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File:                     baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier:          UeyLAZREVqG4aivFlSgvZxiG5wZW/khaj2R/UjCtS7Q=
Subject key identifier:   50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584D0F52AFB609C6E0D4507561C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Mar 2026 19:45:18 +0000
Certificate not after:    Sat 09 Oct 2027 00:45:36 +0000
Subordinate resources:    AS: 11539
                          AS: 11858
                          AS: 16751
                          AS: 18442
                          AS: 19554
                          AS: 21563
                          AS: 22591
                          AS: 26547
                          AS: 26575
                          AS: 26704
                          AS: 27495
                          AS: 27570
                          AS: 30446
                          AS: 31917
                          AS: 32216
                          AS: 32263
                          AS: 33459
                          AS: 33737
                          AS: 35888
                          AS: 46371
                          AS: 46858
                          AS: 395509
                          AS: 395791
                          AS: 397717
                          AS: 398848
                          AS: 399973
                          IP: 66.159.106.0/23
                          IP: 67.202.160.0/20
                          IP: 74.112.144.0/21
                          IP: 137.236.0.0/16
                          IP: 142.75.0.0/16
                          IP: 150.105.0.0/16
                          IP: 162.252.12.0/22
                          IP: 173.243.48.0/20
                          IP: 192.67.53.0/24
                          IP: 192.80.54.0/24
                          IP: 192.138.191.0/24
                          IP: 199.71.120.0/24
                          IP: 199.85.101.0/24
                          IP: 199.87.216.0/22
                          IP: 199.182.176.0/21
                          IP: 199.201.226.0 -- 199.201.229.255
                          IP: 199.231.96.0/22
                          IP: 204.107.28.0/22
                          IP: 204.138.115.0/24
                          IP: 205.141.236.0/22
                          IP: 205.142.224.0/22
                          IP: 205.211.178.0/24
                          IP: 206.197.31.0/24
                          IP: 206.253.128.0/21
                          IP: 207.195.160.0/19
                          IP: 208.87.136.0/22
                          IP: 2604:8b00::/32
                          IP: 2620:0:1a40::/48
                          IP: 2620:10c:f000::/40
                          IP: 2620:134:d000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:52:af:b6:09:c6:e0:d4:50:75:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar  4 19:45:18 2026 GMT
            Not After : Oct  9 00:45:36 2027 GMT
        Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
                    3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
                    b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
                    bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
                    9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
                    23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
                    48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
                    5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
                    df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
                    8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
                    f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
                    77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
                    ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
                    9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
                    79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
                    bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
                    e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.106.0/23
                  67.202.160.0/20
                  74.112.144.0/21
                  137.236.0.0/16
                  142.75.0.0/16
                  150.105.0.0/16
                  162.252.12.0/22
                  173.243.48.0/20
                  192.67.53.0/24
                  192.80.54.0/24
                  192.138.191.0/24
                  199.71.120.0/24
                  199.85.101.0/24
                  199.87.216.0/22
                  199.182.176.0/21
                  199.201.226.0-199.201.229.255
                  199.231.96.0/22
                  204.107.28.0/22
                  204.138.115.0/24
                  205.141.236.0/22
                  205.142.224.0/22
                  205.211.178.0/24
                  206.197.31.0/24
                  206.253.128.0/21
                  207.195.160.0/19
                  208.87.136.0/22
                IPv6:
                  2604:8b00::/32
                  2620:0:1a40::/48
                  2620:10c:f000::/40
                  2620:134:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11539
                  11858
                  16751
                  18442
                  19554
                  21563
                  22591
                  26547
                  26575
                  26704
                  27495
                  27570
                  30446
                  31917
                  32216
                  32263
                  33459
                  33737
                  35888
                  46371
                  46858
                  395509
                  395791
                  397717
                  398848
                  399973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c9:6b:1b:5d:76:cd:7e:7e:a2:cb:53:50:c4:cf:bd:9d:1b:
         78:90:ff:e7:0a:56:26:94:e1:ab:d4:2f:c0:55:b0:1c:78:5a:
         f1:89:17:bd:4c:16:3d:98:3e:4d:76:9f:97:3e:94:55:56:4e:
         19:fa:af:50:3c:2a:ab:14:0e:da:2e:04:86:83:03:ed:b0:c3:
         83:4e:5d:9a:c8:f0:2b:f0:5d:af:9d:cf:36:7b:7c:46:b3:5a:
         29:51:86:77:f6:39:5b:03:40:e3:f0:f7:9c:de:ba:54:41:1e:
         9b:a7:e3:73:75:ed:35:f9:25:51:05:d9:c4:f3:18:8f:a3:b7:
         3b:df:ad:d8:7e:01:8c:d7:3e:f1:00:98:2c:c7:3b:44:e8:6d:
         0c:3d:4a:52:03:b2:b2:7f:1c:96:9c:2c:cf:de:f3:68:f0:57:
         c8:53:b7:8e:5d:0f:b3:01:9f:37:62:d9:b3:f6:52:c1:fd:f9:
         79:e2:f5:29:ed:a9:c4:a1:1c:31:b3:94:ac:02:59:14:73:f3:
         28:d4:aa:de:94:de:b9:7a:e4:14:26:42:bb:51:a9:62:70:9f:
         f0:4f:70:81:b0:27:5f:35:ed:73:fe:34:81:8f:2e:c6:c3:93:
         9e:ec:fe:dc:c0:4f:07:46:f8:cb:81:ee:6d:92:96:fa:ee:0e:
         ad:ed:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:12:15 2026 by rpki-client