Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
File:                     6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer (raw, json)
Hash identifier:          xah9lH77tPL3j2diIQe1qaFuIpmY2xqcnRdMb5GxzO0=
Subject key identifier:   B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584E4D5F078F7B67A72B22788200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jun 2026 17:57:14 +0000
Certificate not after:    Sun 07 May 2028 12:45:22 +0000
Subordinate resources:    AS: 26673
                          AS: 63086
                          AS: 399095
                          IP: 43.231.12.0/22
                          IP: 45.74.184.0/22
                          IP: 69.48.216.0/21
                          IP: 103.50.92.0/22
                          IP: 104.36.192.0/21
                          IP: 207.231.168.0/21
                          IP: 2620:11a:f000::/36
                          IP: 2620:1b2::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:5f:07:8f:7b:67:a7:2b:22:78:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 26 17:57:14 2026 GMT
            Not After : May  7 12:45:22 2028 GMT
        Subject: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:a4:4f:5a:2d:1a:c0:0e:ed:7a:84:62:95:
                    d5:7c:1c:12:7c:cc:8c:05:31:cb:aa:e5:6e:15:7a:
                    b3:05:de:9c:d0:4d:79:f6:52:b8:dd:7b:4a:a3:ef:
                    32:09:d6:3d:87:cb:0a:f3:cc:18:fc:16:51:48:29:
                    7b:4c:31:f8:5c:92:11:a7:b4:43:85:bf:1a:5d:8b:
                    8c:af:9d:b9:c1:2a:cd:0f:a5:17:10:8c:a2:10:81:
                    07:2d:85:4b:41:82:25:8f:00:f4:f8:e4:3d:e6:5d:
                    f8:a6:02:b1:f4:3a:49:c7:0e:45:aa:54:c3:38:4e:
                    c2:8a:cd:f3:4b:8b:38:63:f2:08:e2:96:d4:87:a4:
                    52:90:b3:47:2b:e0:20:e7:cc:7f:4a:71:c1:9c:ee:
                    1e:14:a0:69:6b:57:24:0d:88:53:50:48:b0:52:de:
                    1f:dd:72:05:6e:a4:23:9d:20:54:76:92:a9:5e:13:
                    5c:ae:2a:73:0b:76:5b:d1:49:db:9d:0d:43:3e:8b:
                    1d:0a:79:bd:3e:5b:1e:ef:69:6c:b8:a8:d5:84:d0:
                    91:1b:ab:84:73:26:a2:e6:12:ca:ec:23:94:1f:ef:
                    06:0d:6f:72:e3:9d:d6:64:a8:74:b0:8b:24:eb:ac:
                    f0:f2:49:ed:c4:82:0f:ff:11:b5:45:18:ef:cf:2e:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/22
                  45.74.184.0/22
                  69.48.216.0/21
                  103.50.92.0/22
                  104.36.192.0/21
                  207.231.168.0/21
                IPv6:
                  2620:11a:f000::/36
                  2620:1b2::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26673
                  63086
                  399095

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:91:44:ee:13:e9:86:6c:79:eb:23:7b:3e:81:b8:dc:92:4d:
         93:1f:e9:e2:4e:d7:c0:72:01:08:e0:1a:79:23:16:db:59:7f:
         b5:08:6a:8e:f3:08:0e:bc:07:6c:6a:bf:74:28:78:c7:4f:63:
         eb:c1:4d:99:b6:b8:c6:0c:08:a0:58:78:c0:f7:db:1c:a1:bf:
         c2:63:3e:e5:06:bd:2f:47:53:d8:20:19:8a:32:42:f9:3c:2a:
         05:b4:67:72:20:34:62:bd:c1:2c:cd:10:6b:b5:4a:a8:c5:8e:
         be:e2:1f:d5:18:dd:d2:db:de:05:c8:bf:27:13:f8:3a:2b:38:
         d8:41:31:9c:bb:86:b3:ab:e5:13:a6:75:b9:93:f3:7c:40:83:
         a8:47:b5:9e:92:86:33:6c:26:9f:5b:74:b6:20:30:6c:0d:90:
         b6:fe:ea:20:ed:40:bd:29:0a:85:e2:95:95:b6:ed:c9:7b:56:
         23:d2:50:da:22:32:c0:4a:2b:9e:80:3d:65:f9:0a:3f:05:82:
         dd:28:fa:ae:74:85:63:1d:41:bc:6d:b4:a9:12:0c:91:88:d4:
         33:c5:cc:11:d7:6d:fa:9c:5c:4d:33:b5:96:26:60:eb:d5:64:
         ab:7f:79:cb:74:47:f9:a6:cc:2e:b7:7a:2e:41:db:a0:f1:92:
         6e:5c:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:18 2026 by rpki-client