Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
File:                     141d1fb1-9841-4771-b75f-7e85f1329175.cer (raw, json)
Hash identifier:          IhL3/HFAfUPHO2fSdVoR5vQjLIEPVljexWHIX+asrJk=
Subject key identifier:   32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584DB7689DC828BB8A03EDFC4A50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 May 2026 00:45:17 +0000
Certificate not after:    Sun 06 Aug 2028 00:45:17 +0000
Subordinate resources:    AS: 603
                          AS: 12085
                          AS: 12188
                          AS: 13531
                          AS: 14609
                          AS: 16553
                          AS: 18928
                          AS: 19930
                          AS: 22232
                          AS: 25658
                          AS: 27224
                          AS: 27272
                          AS: 27315
                          AS: 27330
                          AS: 27354
                          AS: 27407
                          AS: 27433
                          AS: 27438
                          AS: 27444
                          AS: 27466
                          AS: 27566
                          AS: 29884
                          AS: 30157
                          AS: 30159
                          AS: 30715
                          AS: 32007
                          AS: 32323
                          AS: 32550
                          AS: 33109
                          AS: 33157
                          AS: 36030 -- 36031
                          AS: 36641
                          AS: 40052
                          AS: 40341
                          AS: 40957
                          AS: 54588
                          AS: 64275
                          AS: 64292
                          AS: 394255
                          AS: 394749
                          AS: 398811
                          AS: 398814
                          AS: 398975
                          IP: 50.100.0.0/21
                          IP: 50.100.12.0/22
                          IP: 50.100.18.0 -- 50.100.22.255
                          IP: 64.191.192.0/18
                          IP: 65.110.160.0/19
                          IP: 66.38.144.0/24
                          IP: 66.38.146.0/24
                          IP: 67.210.208.0/20
                          IP: 67.223.176.0/20
                          IP: 69.46.96.0/19
                          IP: 72.28.77.0/24
                          IP: 74.121.160.0/21
                          IP: 74.200.0.0/19
                          IP: 98.158.80.0/20
                          IP: 142.134.175.0/24
                          IP: 142.134.209.0/24
                          IP: 142.134.245.0/24
                          IP: 142.215.0.0/16
                          IP: 149.97.128.0/17
                          IP: 173.205.192.0/21
                          IP: 184.150.220.0/24
                          IP: 184.150.231.0 -- 184.150.239.255
                          IP: 198.32.99.0 -- 198.32.119.255
                          IP: 198.32.133.0 -- 198.32.135.255
                          IP: 198.32.175.0 -- 198.32.177.255
                          IP: 198.32.181.0 -- 198.32.183.255
                          IP: 198.32.190.0 -- 198.32.192.255
                          IP: 198.32.241.0 -- 198.32.243.255
                          IP: 204.136.12.0/22
                          IP: 206.47.42.0/24
                          IP: 206.51.36.0/22
                          IP: 206.126.236.0/22
                          IP: 206.197.169.0/24
                          IP: 206.223.115.0 -- 206.223.119.255
                          IP: 206.223.123.0/24
                          IP: 206.223.131.0 -- 206.223.135.255
                          IP: 206.223.137.0 -- 206.223.138.255
                          IP: 206.223.142.0/24
                          IP: 208.92.132.0/22
                          IP: 208.115.128.0/20
                          IP: 216.55.208.0/21
                          IP: 216.220.32.0/19
                          IP: 216.221.224.0/20
                          IP: 2001:504::/48
                          IP: 2001:504:d:: -- 2001:504:12:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:4818::/32
                          IP: 2605:a800::/32
                          IP: 2606:5c80::/32
                          IP: 2607:f6f0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:68:9d:c8:28:bb:8a:03:ed:fc:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: May  4 00:45:17 2026 GMT
            Not After : Aug  6 00:45:17 2028 GMT
        Subject: CN=141d1fb1-9841-4771-b75f-7e85f1329175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:40:f3:d9:43:55:80:65:1a:b1:06:f4:91:
                    b5:f1:68:f0:bc:74:c0:f6:00:76:f5:cd:3c:03:90:
                    5b:4b:5e:e0:cf:a3:b3:ef:82:ed:bc:12:c6:53:d3:
                    42:02:37:81:3c:8f:ab:bc:7c:9a:2d:00:99:1d:f6:
                    70:c2:01:48:93:38:07:dc:50:b5:59:23:7c:c5:bf:
                    b0:9e:5e:b3:a7:bd:03:86:aa:38:00:f9:2c:5b:ef:
                    82:62:a3:a7:e9:b5:bd:db:c8:09:46:93:88:52:42:
                    b4:4f:3c:f0:62:c3:d3:bb:01:e0:11:5d:ba:8f:45:
                    c3:3e:72:3b:02:4c:f3:c6:9a:18:05:e1:cf:71:19:
                    8e:70:21:07:cf:e6:c6:f9:b6:60:54:d9:bd:43:86:
                    60:b5:82:64:c6:d5:4d:dd:6f:52:7a:78:5b:dc:b5:
                    7e:a4:b3:ca:a5:9e:94:61:21:75:a7:c8:9c:f5:4e:
                    d0:1a:d1:1c:75:16:36:f6:86:1f:9a:13:3a:92:2b:
                    e3:8c:a9:fb:04:32:01:f8:61:b6:7a:ea:40:85:9b:
                    2d:49:5a:c8:4d:2e:44:db:1b:6d:71:5d:7e:21:29:
                    89:4b:b3:84:02:3a:5d:de:3b:50:0c:c4:09:7c:3e:
                    95:8f:92:81:97:4f:c5:c9:8b:34:c0:d3:31:e7:b5:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.0.0/21
                  50.100.12.0/22
                  50.100.18.0-50.100.22.255
                  64.191.192.0/18
                  65.110.160.0/19
                  66.38.144.0/24
                  66.38.146.0/24
                  67.210.208.0/20
                  67.223.176.0/20
                  69.46.96.0/19
                  72.28.77.0/24
                  74.121.160.0/21
                  74.200.0.0/19
                  98.158.80.0/20
                  142.134.175.0/24
                  142.134.209.0/24
                  142.134.245.0/24
                  142.215.0.0/16
                  149.97.128.0/17
                  173.205.192.0/21
                  184.150.220.0/24
                  184.150.231.0-184.150.239.255
                  198.32.99.0-198.32.119.255
                  198.32.133.0-198.32.135.255
                  198.32.175.0-198.32.177.255
                  198.32.181.0-198.32.183.255
                  198.32.190.0-198.32.192.255
                  198.32.241.0-198.32.243.255
                  204.136.12.0/22
                  206.47.42.0/24
                  206.51.36.0/22
                  206.126.236.0/22
                  206.197.169.0/24
                  206.223.115.0-206.223.119.255
                  206.223.123.0/24
                  206.223.131.0-206.223.135.255
                  206.223.137.0-206.223.138.255
                  206.223.142.0/24
                  208.92.132.0/22
                  208.115.128.0/20
                  216.55.208.0/21
                  216.220.32.0/19
                  216.221.224.0/20
                IPv6:
                  2001:504::/48
                  2001:504:d::-2001:504:12:ffff:ffff:ffff:ffff:ffff
                  2001:4818::/32
                  2605:a800::/32
                  2606:5c80::/32
                  2607:f6f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  603
                  12085
                  12188
                  13531
                  14609
                  16553
                  18928
                  19930
                  22232
                  25658
                  27224
                  27272
                  27315
                  27330
                  27354
                  27407
                  27433
                  27438
                  27444
                  27466
                  27566
                  29884
                  30157
                  30159
                  30715
                  32007
                  32323
                  32550
                  33109
                  33157
                  36030-36031
                  36641
                  40052
                  40341
                  40957
                  54588
                  64275
                  64292
                  394255
                  394749
                  398811
                  398814
                  398975

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:33:6a:db:0f:97:a7:9b:2d:1a:55:a3:17:ad:94:be:9f:
         8b:8a:dd:6b:89:ba:91:de:73:9e:c7:0f:a9:72:89:ec:cc:68:
         a9:6a:9d:dc:08:4e:95:21:b8:fc:c6:60:02:8e:e6:8e:d1:4d:
         dd:c5:9d:03:f9:ad:91:ba:b5:d4:21:4e:44:4d:0e:a3:a7:33:
         ec:b9:44:d2:3f:8e:e6:e3:00:13:b1:af:a7:00:01:f8:84:5c:
         92:10:22:4a:6e:39:09:6d:c5:df:46:41:74:db:95:b6:44:0e:
         93:7e:25:aa:f6:75:1a:da:b2:3e:82:52:88:70:f9:c4:c0:66:
         29:9e:9c:2d:c9:9d:6d:83:7f:94:10:7c:0e:4d:5b:d7:8a:e0:
         50:98:72:a4:e2:b1:c1:3b:6d:98:24:0f:14:81:0a:9f:ba:36:
         73:7b:12:19:aa:7c:3b:86:a2:b5:76:81:a8:c0:cd:24:c9:fa:
         73:76:bb:ea:81:a3:b8:a5:b9:5e:41:ad:8a:61:2b:54:32:59:
         74:c7:65:e4:b1:6f:1e:42:d6:d8:6b:36:14:b2:ca:9e:21:ca:
         2a:0a:de:f3:f0:21:2b:b8:9f:f5:e3:56:00:4c:2f:f3:35:a1:
         bd:6b:aa:70:2a:75:af:74:f2:a2:63:ee:30:0d:a5:7f:4c:2d:
         c0:18:88:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:10 2026 by rpki-client