Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb.cer
File:                     cd24b3f3-8c24-4212-b596-7495552f2bbb.cer (raw, json)
Hash identifier:          L8q0vIfT1WCpIIQiEC94RZKFdSyetbaL+LzjU+wjx4E=
Subject key identifier:   07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584DB6034621F72218E71E27D500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 May 2026 12:45:17 +0000
Certificate not after:    Sat 05 Aug 2028 12:45:17 +0000
Subordinate resources:    AS: 4314
                          AS: 11943
                          AS: 13693
                          AS: 14765
                          AS: 14791
                          AS: 19734
                          AS: 25798
                          AS: 32898
                          AS: 33507
                          AS: 35924
                          AS: 54340
                          AS: 62911
                          AS: 63001
                          AS: 393526
                          AS: 393814
                          AS: 397772
                          AS: 398149
                          AS: 400569
                          AS: 401284
                          IP: 64.130.64.0/19
                          IP: 64.185.0.0/18
                          IP: 65.182.64.0/19
                          IP: 145.224.0.0/19
                          IP: 172.110.0.0/19
                          IP: 199.254.157.0/24
                          IP: 205.209.224.0/19
                          IP: 206.251.160.0/19
                          IP: 209.16.64.0/19
                          IP: 209.205.128.0/18
                          IP: 216.97.240.0/20
                          IP: 216.131.24.0/21
                          IP: 216.167.128.0/18
                          IP: 2606:1600::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b6:03:46:21:f7:22:18:e7:1e:27:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: May  3 12:45:17 2026 GMT
            Not After : Aug  5 12:45:17 2028 GMT
        Subject: CN=cd24b3f3-8c24-4212-b596-7495552f2bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:6a:9a:4e:56:16:33:7c:c6:27:67:ba:55:
                    7f:e4:6c:83:79:e7:df:6d:7d:f2:f7:e9:71:e0:50:
                    71:e4:88:c9:0b:7d:77:f9:b7:01:40:d2:56:7c:1b:
                    6f:48:53:2a:25:00:ca:1d:a6:4f:d5:a1:51:bb:dd:
                    09:3f:86:6a:63:58:0e:43:5a:bd:46:d9:a8:ae:9b:
                    aa:b0:2c:95:3c:b2:ab:12:ff:a1:d6:a8:ef:9c:46:
                    12:5f:9c:d2:69:89:95:48:cf:df:2c:ea:91:59:6b:
                    a4:be:04:7c:79:76:be:2e:df:e4:73:c6:d8:2b:23:
                    c7:85:84:f1:ff:c0:0e:39:a8:bf:cf:52:99:9f:60:
                    5e:78:46:7b:32:b3:08:0b:22:bb:b1:b5:04:d2:d4:
                    1c:e7:68:f5:9e:a8:49:5a:63:ca:b3:67:99:e0:83:
                    1f:8c:d8:33:f1:7b:e4:63:a7:a5:48:e0:01:70:d5:
                    8d:97:0e:17:82:97:df:6f:8b:5e:1b:0c:1b:fd:65:
                    11:19:a2:e7:ca:9d:44:4e:d8:4a:b9:ae:aa:fe:75:
                    5e:12:52:fd:fe:fa:1f:15:fa:50:69:44:0e:22:63:
                    e0:47:e8:b4:d6:c0:2b:8e:8f:0c:27:47:e5:b2:bb:
                    c3:78:6a:ab:b5:83:b6:b0:39:24:c7:68:f7:11:72:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.64.0/19
                  64.185.0.0/18
                  65.182.64.0/19
                  145.224.0.0/19
                  172.110.0.0/19
                  199.254.157.0/24
                  205.209.224.0/19
                  206.251.160.0/19
                  209.16.64.0/19
                  209.205.128.0/18
                  216.97.240.0/20
                  216.131.24.0/21
                  216.167.128.0/18
                IPv6:
                  2606:1600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4314
                  11943
                  13693
                  14765
                  14791
                  19734
                  25798
                  32898
                  33507
                  35924
                  54340
                  62911
                  63001
                  393526
                  393814
                  397772
                  398149
                  400569
                  401284

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:bf:13:84:9c:2f:31:0a:88:49:09:bb:bb:a0:f8:88:ab:
         c8:da:83:a3:49:ac:7b:d9:bc:1b:15:74:0d:0d:ff:4a:3c:9e:
         b7:79:d5:a7:c3:ae:a8:d0:d3:98:ee:71:db:70:fa:c0:c6:24:
         a3:a2:19:74:28:4f:73:94:1b:b5:f0:44:c2:11:68:88:9b:06:
         c0:8f:2c:c3:f5:c6:9b:a1:fb:45:13:9e:98:85:f4:1a:e9:79:
         38:ac:8c:a1:2c:f3:7f:ba:33:fd:4d:b0:17:9e:58:bb:9a:6c:
         71:4f:60:77:84:b9:c1:34:76:69:f8:d5:98:85:c0:cb:b7:ca:
         56:08:f8:77:43:38:4b:31:c5:33:dc:5f:9d:79:04:3c:f9:5e:
         d9:ea:c4:e4:30:24:3a:bd:f1:38:e8:e4:ba:4e:8d:e3:b0:ac:
         94:45:b0:46:25:fe:10:ae:59:4d:c7:8f:8a:a6:5f:63:be:62:
         61:6b:3d:c2:e5:fa:48:56:dd:fa:65:c5:f6:69:32:53:97:41:
         b2:7e:cb:16:16:dd:e3:34:7a:ec:e9:b9:4e:ba:c3:20:80:96:
         32:c2:36:a2:ce:5a:15:e7:4c:81:20:1e:68:41:0f:8a:0e:39:
         4b:17:21:f7:b9:28:a4:4d:ab:21:12:61:1c:88:73:2a:8c:21:
         a7:3e:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:46 2026 by rpki-client