Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
File:                     8450660f-e06c-43ee-910d-d4b472fdc395.cer (raw, json)
Hash identifier:          +GPHGYwjPNxBbKPUzhPx7+YvjEzOLTh0qIoJwxRrY7I=
Subject key identifier:   69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584E7FF2B36D1D0EC3D675C8C2D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Jul 2026 20:45:11 +0000
Certificate not after:    Mon 16 Oct 2028 20:45:11 +0000
Subordinate resources:    AS: 25973
                          IP: 64.235.224.0/19
                          IP: 67.199.128.0/19
                          IP: 67.201.0.0/18
                          IP: 68.64.128.0/18
                          IP: 69.43.240.0/20
                          IP: 69.174.0.0/17
                          IP: 70.39.128.0/17
                          IP: 72.37.128.0/17
                          IP: 173.205.0.0/17
                          IP: 204.237.128.0/17
                          IP: 207.223.96.0/20
                          IP: 216.193.192.0/18
                          IP: 2001:4890::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:f2:b3:6d:1d:0e:c3:d6:75:c8:c2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul 14 20:45:11 2026 GMT
            Not After : Oct 16 20:45:11 2028 GMT
        Subject: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:4e:54:df:0b:1d:d9:78:92:6e:f3:11:eb:
                    f7:de:89:70:12:67:6d:6f:af:19:19:88:32:06:97:
                    5f:ee:fc:bb:d0:3e:ba:51:c2:8f:d9:90:68:e3:22:
                    1d:d6:af:26:64:ab:3c:ba:e2:de:c4:42:db:67:f6:
                    18:ff:99:ab:04:30:67:63:a4:6e:80:f1:d0:b7:6f:
                    9f:23:08:5f:f9:f2:17:16:01:80:83:84:6a:c7:a5:
                    f4:68:df:c3:91:fc:86:fd:7e:f8:db:7b:43:7e:57:
                    55:49:49:56:cd:5a:1c:7c:4e:4e:1a:bd:f6:f1:b0:
                    31:46:04:bd:70:bc:1d:5e:85:87:4b:02:0d:56:26:
                    93:b2:d3:7b:cf:3f:fc:28:e4:e5:8d:e2:74:21:97:
                    67:9f:14:11:ea:e4:26:81:64:01:04:35:07:5f:9b:
                    ff:dc:eb:6e:c3:09:f8:1e:a1:db:af:85:ec:65:05:
                    47:a9:c3:00:41:0e:dc:68:e7:d5:03:6f:b9:41:cf:
                    7d:68:18:62:49:02:8b:fa:aa:40:18:e4:a5:e0:56:
                    77:91:81:f5:81:d9:20:b3:0c:b1:2c:76:2f:31:bd:
                    44:22:a6:c0:f4:dd:aa:81:70:50:e7:01:b9:0d:7c:
                    f9:ed:25:ba:0b:bf:36:55:b2:11:86:9e:00:b6:a1:
                    cf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.224.0/19
                  67.199.128.0/19
                  67.201.0.0/18
                  68.64.128.0/18
                  69.43.240.0/20
                  69.174.0.0/17
                  70.39.128.0/17
                  72.37.128.0/17
                  173.205.0.0/17
                  204.237.128.0/17
                  207.223.96.0/20
                  216.193.192.0/18
                IPv6:
                  2001:4890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:91:df:b6:e6:c5:2c:23:c9:43:c1:99:b8:ad:93:5d:dd:06:
         f5:33:fc:2b:8b:fb:d4:80:f7:ed:98:d8:23:6e:c9:2e:8b:85:
         6a:df:84:29:97:9d:0b:39:8b:e6:67:70:b5:33:50:af:50:18:
         1c:bc:73:26:04:24:ae:b3:1f:01:6c:c5:4e:ea:ac:d1:1b:41:
         c9:63:79:65:79:43:26:dd:f9:95:04:8c:c8:c6:fd:68:9e:78:
         c1:f6:f0:5e:b1:8b:21:25:8e:49:56:30:9c:59:50:2e:e7:7c:
         a1:31:44:5b:f2:8b:30:e5:95:fd:a0:18:4b:bb:dc:c0:bf:89:
         ee:cb:3c:c1:be:dd:dc:24:0a:58:1c:19:f7:17:c5:0d:6d:e3:
         ef:33:a3:12:42:67:38:49:ba:03:6a:e5:20:4a:47:5a:47:2a:
         6e:f7:02:c9:2a:eb:47:ec:df:d3:5b:b2:8d:6e:ae:44:1d:cf:
         7f:d8:a6:6c:1c:be:38:01:4c:f2:a1:59:9f:66:c4:39:cf:c0:
         65:4e:71:8e:34:68:ff:01:07:d9:28:63:62:e9:a7:58:ad:a7:
         9d:3f:8b:b8:a8:9e:a3:d3:9d:8a:29:d2:1e:ae:c9:5e:e9:e4:
         cf:54:ea:f0:fa:b4:b8:cf:9a:4a:3a:6e:b3:77:76:c4:92:0f:
         14:da:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:20 2026 by rpki-client