Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer
File:                     4bfb8143-b010-4f06-b1de-8c27f25d8b00.cer (raw, json)
Hash identifier:          2w7XaekBXbdIVoDF7eXtp+zLkR0KzjhQFDYwLh3SGFE=
Subject key identifier:   5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D1CD9045D396E3F99691F8300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Mar 2026 16:01:28 +0000
Certificate not after:    Sun 11 Jun 2028 16:01:28 +0000
Subordinate resources:    AS: 193
                          AS: 1744
                          AS: 3355
                          AS: 6075
                          IP: 129.197.0.0/16
                          IP: 129.201.0.0 -- 129.202.255.255
                          IP: 129.243.0.0/16
                          IP: 134.5.0.0/16
                          IP: 134.116.0.0/16
                          IP: 134.189.0.0/16
                          IP: 137.32.0.0/16
                          IP: 137.41.0.0/16
                          IP: 137.249.0.0/16
                          IP: 138.114.0.0/16
                          IP: 138.209.0.0/16
                          IP: 140.169.0.0/16
                          IP: 141.205.0.0/16
                          IP: 143.114.0.0/16
                          IP: 143.173.0.0/16
                          IP: 144.197.0.0/16
                          IP: 144.219.0.0/16
                          IP: 144.221.0.0 -- 144.222.255.255
                          IP: 155.189.0.0/16
                          IP: 156.82.0.0/16
                          IP: 158.183.0.0/16
                          IP: 158.185.0.0 -- 158.188.255.255
                          IP: 160.205.0.0/16
                          IP: 163.254.0.0/16
                          IP: 165.80.0.0/16
                          IP: 168.237.0.0/16
                          IP: 192.5.147.0/24
                          IP: 192.28.110.0 -- 192.28.119.255
                          IP: 192.28.132.0 -- 192.28.139.255
                          IP: 192.30.108.0/24
                          IP: 192.30.125.0/24
                          IP: 192.30.206.0/23
                          IP: 192.31.24.0/24
                          IP: 192.31.86.0/24
                          IP: 192.31.106.0/24
                          IP: 192.34.233.0/24
                          IP: 192.34.247.0/24
                          IP: 192.35.28.0/24
                          IP: 192.35.32.0/24
                          IP: 192.35.35.0 -- 192.35.37.255
                          IP: 192.35.106.0/24
                          IP: 192.40.47.0 -- 192.40.48.255
                          IP: 192.40.53.0 -- 192.40.54.255
                          IP: 192.40.155.0/24
                          IP: 192.40.249.0/24
                          IP: 192.48.108.0/24
                          IP: 192.58.156.0 -- 192.58.179.255
                          IP: 192.82.240.0/24
                          IP: 192.91.146.0 -- 192.91.175.255
                          IP: 192.126.66.0/24
                          IP: 192.132.207.0/24
                          IP: 192.147.180.0 -- 192.147.209.255
                          IP: 192.152.142.0/24
                          IP: 192.203.43.0 -- 192.203.44.255
                          IP: 192.206.74.0 -- 192.206.76.255
                          IP: 192.223.32.0/19
                          IP: 192.231.104.0/24
                          IP: 192.245.46.0 -- 192.245.49.255
                          IP: 198.7.8.0/21
                          IP: 198.27.16.0 -- 198.27.27.255
                          IP: 198.49.176.0/24
                          IP: 198.51.31.0 -- 198.51.34.255
                          IP: 198.62.143.0 -- 198.62.146.255
                          IP: 198.62.251.0 -- 198.62.254.255
                          IP: 198.99.69.0 -- 198.99.72.255
                          IP: 198.136.136.0/22
                          IP: 198.137.192.0/24
                          IP: 198.148.251.0 -- 198.148.254.255
                          IP: 198.203.246.0 -- 198.203.249.255
                          IP: 198.241.64.0/18
                          IP: 199.33.215.0/24
                          IP: 199.66.32.0/19
                          IP: 199.74.212.0/24
                          IP: 199.79.145.0/24
                          IP: 199.190.215.0/24
                          IP: 204.27.176.0/24
                          IP: 204.27.253.0/24
                          IP: 204.68.135.0 -- 204.68.148.255
                          IP: 204.75.0.0 -- 204.75.10.255
                          IP: 204.90.127.0/24
                          IP: 204.153.156.0/22
                          IP: 204.154.72.0/21
                          IP: 206.197.213.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:d9:04:5d:39:6e:3f:99:69:1f:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Mar  9 16:01:28 2026 GMT
            Not After : Jun 11 16:01:28 2028 GMT
        Subject: CN=4bfb8143-b010-4f06-b1de-8c27f25d8b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:ac:3f:ae:d2:19:48:3c:dd:9f:41:7e:f4:
                    7b:0c:a8:cf:19:0a:20:35:bd:5a:13:c5:55:69:4f:
                    75:34:87:72:43:d2:d1:ce:9f:54:89:a5:c8:78:e1:
                    6a:c6:29:44:50:fe:a6:f5:e6:28:f8:d6:82:e8:2a:
                    ae:84:21:4c:80:7f:64:db:70:14:16:93:7f:b7:ae:
                    64:66:0f:03:bd:73:94:47:56:cb:39:8b:bd:24:fd:
                    1c:89:e1:52:21:43:8c:83:af:9d:5a:60:be:50:f4:
                    d0:f3:0d:8f:59:c5:06:6d:09:28:34:3e:88:b0:fa:
                    e4:8d:f3:1b:8b:b5:ea:e3:ee:b8:7b:59:5a:d6:81:
                    9a:2c:00:12:bc:14:82:38:ab:41:01:c3:72:c4:7d:
                    c4:7f:4d:41:be:f8:6b:e2:74:9c:a4:3a:e0:34:59:
                    c9:90:2a:fe:ce:bf:61:17:53:8c:51:94:43:3b:c6:
                    71:b7:e0:83:73:60:e8:a9:b8:d7:e5:5d:af:ce:df:
                    34:04:63:ad:b6:60:c2:ee:15:7c:9b:70:dc:f1:d7:
                    93:fb:9c:78:fb:48:19:91:8e:76:f0:51:05:b8:86:
                    cd:02:a1:75:e7:1a:04:ce:0c:8c:e6:93:07:33:a2:
                    b3:8f:8b:67:a5:43:24:a9:78:de:ff:24:61:3f:28:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DC:99:BC:64:6F:8B:00:FF:1D:4E:B0:0C:1D:CD:67:22:8D:FA:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4bfb8143-b010-4f06-b1de-8c27f25d8b00/4bfb8143-b010-4f06-b1de-8c27f25d8b00.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.197.0.0/16
                  129.201.0.0-129.202.255.255
                  129.243.0.0/16
                  134.5.0.0/16
                  134.116.0.0/16
                  134.189.0.0/16
                  137.32.0.0/16
                  137.41.0.0/16
                  137.249.0.0/16
                  138.114.0.0/16
                  138.209.0.0/16
                  140.169.0.0/16
                  141.205.0.0/16
                  143.114.0.0/16
                  143.173.0.0/16
                  144.197.0.0/16
                  144.219.0.0/16
                  144.221.0.0-144.222.255.255
                  155.189.0.0/16
                  156.82.0.0/16
                  158.183.0.0/16
                  158.185.0.0-158.188.255.255
                  160.205.0.0/16
                  163.254.0.0/16
                  165.80.0.0/16
                  168.237.0.0/16
                  192.5.147.0/24
                  192.28.110.0-192.28.119.255
                  192.28.132.0-192.28.139.255
                  192.30.108.0/24
                  192.30.125.0/24
                  192.30.206.0/23
                  192.31.24.0/24
                  192.31.86.0/24
                  192.31.106.0/24
                  192.34.233.0/24
                  192.34.247.0/24
                  192.35.28.0/24
                  192.35.32.0/24
                  192.35.35.0-192.35.37.255
                  192.35.106.0/24
                  192.40.47.0-192.40.48.255
                  192.40.53.0-192.40.54.255
                  192.40.155.0/24
                  192.40.249.0/24
                  192.48.108.0/24
                  192.58.156.0-192.58.179.255
                  192.82.240.0/24
                  192.91.146.0-192.91.175.255
                  192.126.66.0/24
                  192.132.207.0/24
                  192.147.180.0-192.147.209.255
                  192.152.142.0/24
                  192.203.43.0-192.203.44.255
                  192.206.74.0-192.206.76.255
                  192.223.32.0/19
                  192.231.104.0/24
                  192.245.46.0-192.245.49.255
                  198.7.8.0/21
                  198.27.16.0-198.27.27.255
                  198.49.176.0/24
                  198.51.31.0-198.51.34.255
                  198.62.143.0-198.62.146.255
                  198.62.251.0-198.62.254.255
                  198.99.69.0-198.99.72.255
                  198.136.136.0/22
                  198.137.192.0/24
                  198.148.251.0-198.148.254.255
                  198.203.246.0-198.203.249.255
                  198.241.64.0/18
                  199.33.215.0/24
                  199.66.32.0/19
                  199.74.212.0/24
                  199.79.145.0/24
                  199.190.215.0/24
                  204.27.176.0/24
                  204.27.253.0/24
                  204.68.135.0-204.68.148.255
                  204.75.0.0-204.75.10.255
                  204.90.127.0/24
                  204.153.156.0/22
                  204.154.72.0/21
                  206.197.213.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  193
                  1744
                  3355
                  6075

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:70:7a:9b:28:96:00:48:73:2e:21:68:0e:f2:18:f6:69:83:
         db:ac:32:06:76:6b:e9:cf:d3:5e:5e:16:5f:a8:6b:02:a5:03:
         6e:b6:2e:63:9c:df:25:ae:f1:12:3f:fc:7d:0a:dc:c3:d5:df:
         2b:cb:6a:8d:c3:39:05:84:7b:a4:45:65:b9:d6:e3:3e:53:7c:
         bb:56:d5:e0:31:79:42:3c:23:c0:e0:de:e5:68:85:8a:68:79:
         f4:b4:8f:e9:16:1f:4e:6f:1f:a6:cf:2e:0f:12:3a:2a:76:eb:
         0c:f9:7d:59:89:bb:af:85:3d:47:33:cd:b9:84:24:d1:d3:16:
         c0:f2:a1:2a:34:ba:72:aa:24:49:63:a6:f3:8a:99:29:1c:f3:
         0c:2a:e6:bc:9c:c1:82:db:ef:11:1a:6f:30:85:ab:6c:25:2c:
         40:f9:9b:de:71:02:47:75:8e:4d:94:56:7f:61:97:b5:61:48:
         bc:b6:e0:33:88:6e:71:20:23:f9:12:5e:46:87:d2:ae:6a:bf:
         90:14:c0:57:99:90:61:95:ba:1f:94:3a:60:7a:35:55:11:3e:
         c1:c6:41:68:23:77:5b:e1:98:0a:89:3b:a8:ae:eb:43:67:81:
         87:a4:1b:1d:99:d2:8e:f9:05:d6:1d:3a:d1:f8:52:ca:fc:1b:
         77:59:a2:ef
-----BEGIN CERTIFICATE-----
MIIJpDCCCIygAwIBAgIUAQ0Mn0MoWE0c2QRdOW4/mWkfgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDMwOTE2MDEyOFoXDTI4MDYxMTE2MDEyOFowLzEtMCsGA1UEAxMk
NGJmYjgxNDMtYjAxMC00ZjA2LWIxZGUtOGMyN2YyNWQ4YjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTqsP67SGUg83Z9BfvR7DKjPGQogNb1aE8VV
aU91NIdyQ9LRzp9UiaXIeOFqxilEUP6m9eYo+NaC6CquhCFMgH9k23AUFpN/t65k
Zg8DvXOUR1bLOYu9JP0cieFSIUOMg6+dWmC+UPTQ8w2PWcUGbQkoND6IsPrkjfMb
i7Xq4+64e1la1oGaLAASvBSCOKtBAcNyxH3Ef01Bvvhr4nScpDrgNFnJkCr+zr9h
F1OMUZRDO8Zxt+CDc2DoqbjX5V2vzt80BGOttmDC7hV8m3Dc8deT+5x4+0gZkY52
8FEFuIbNAqF15xoEzgyM5pMHM6Kzj4tnpUMkqXje/yRhPyi7iQIDAQABo4IGtjCC
BrIwHQYDVR0OBBYEFFrcmbxkb4sA/x1OsAwdzWcijfrRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80
YmZiODE0My1iMDEwLTRmMDYtYjFkZS04YzI3ZjI1ZDhiMDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzRiZmI4MTQzLWIwMTAtNGYwNi1i
MWRlLThjMjdmMjVkOGIwMC80YmZiODE0My1iMDEwLTRmMDYtYjFkZS04YzI3ZjI1
ZDhiMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwggKtBggrBgEF
BQcBBwEB/wSCApwwggKYMIIClAQCAAEwggKMAwMAgcUwCgMDAIHJAwMAgcoDAwCB
8wMDAIYFAwMAhnQDAwCGvQMDAIkgAwMAiSkDAwCJ+QMDAIpyAwMAitEDAwCMqQMD
AI3NAwMAj3IDAwCPrQMDAJDFAwMAkNswCgMDAJDdAwMAkN4DAwCbvQMDAJxSAwMA
nrcwCgMDAJ65AwMAnrwDAwCgzQMDAKP+AwMApVADAwCo7QMEAMAFkzAMAwQBwBxu
AwQDwBxwMAwDBALAHIQDBALAHIgDBADAHmwDBADAHn0DBAHAHs4DBADAHxgDBADA
H1YDBADAH2oDBADAIukDBADAIvcDBADAIxwDBADAIyAwDAMEAMAjIwMEAcAjJAME
AMAjajAMAwQAwCgvAwQAwCgwMAwDBADAKDUDBADAKDYDBADAKJsDBADAKPkDBADA
MGwwDAMEAsA6nAMEAsA6sAMEAMBS8DAMAwQBwFuSAwQEwFugAwQAwH5CAwQAwITP
MAwDBALAk7QDBAHAk9ADBADAmI4wDAMEAMDLKwMEAMDLLDAMAwQBwM5KAwQAwM5M
AwQFwN8gAwQAwOdoMAwDBAHA9S4DBAHA9TADBAPGBwgwDAMEBMYbEAMEAsYbGAME
AMYxsDAMAwQAxjMfAwQAxjMiMAwDBADGPo8DBADGPpIwDAMEAMY++wMEAMY+/jAM
AwQAxmNFAwQAxmNIAwQCxoiIAwQAxonAMAwDBADGlPsDBADGlP4wDAMEAcbL9gME
AcbL+AMEBsbxQAMEAMch1wMEBcdCIAMEAMdK1AMEAMdPkQMEAMe+1wMEAMwbsAME
AMwb/TAMAwQAzESHAwQAzESUMAsDAwDMSwMEAMxLCgMEAMxafwMEAsyZnAMEA8ya
SAMEAM7F1TAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIAwQICBtACAg0bAgIXuzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBIcHqbKJYASHMuIWgO8hj2aYPbrDIGdmvpz9NeXhZfqGsCpQNuti5j
nN8lrvESP/x9CtzD1d8ry2qNwzkFhHukRWW51uM+U3y7VtXgMXlCPCPA4N7laIWK
aHn0tI/pFh9Obx+mzy4PEjoqdusM+X1ZibuvhT1HM825hCTR0xbA8qEqNLpyqiRJ
Y6bzipkpHPMMKua8nMGC2+8RGm8whatsJSxA+ZvecQJHdY5NlFZ/YZe1YUi8tuAz
iG5xICP5El5Gh9Kuar+QFMBXmZBhlboflDpgejVVET7BxkFoI3db4ZgKiTuorutD
Z4GHpBsdmdKO+QXWHTrR+FLK/Bt3WaLv
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:49:48 2026 by rpki-client