Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
File:                     ebf567a0-4cf8-429d-82b3-3d284a246421.cer (raw, json)
Hash identifier:          Pf0FB5A9eEIpu8HH8MjJQMSYVCHEEPhynM2HcWmC3HE=
Subject key identifier:   BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584D367EA276B9762BFA1EA2AE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Mar 2026 20:30:23 +0000
Certificate not after:    Mon 06 Dec 2027 07:47:41 +0000
Subordinate resources:    AS: 1421
                          AS: 26348
                          AS: 31985
                          IP: 66.39.192.0/20
                          IP: 66.220.58.0/24
                          IP: 69.64.240.0/20
                          IP: 162.211.176.0/22
                          IP: 162.216.96.0/23
                          IP: 162.216.100.0/22
                          IP: 199.38.232.0/22
                          IP: 199.47.192.0/21
                          IP: 199.101.92.0/22
                          IP: 2001:4848::/32
                          IP: 2605:dc80::/32
                          IP: 2606:9100::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:7e:a2:76:b9:76:2b:fa:1e:a2:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Mar 18 20:30:23 2026 GMT
            Not After : Dec  6 07:47:41 2027 GMT
        Subject: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:1d:3f:cc:84:20:fc:cb:8d:a2:4f:30:86:
                    5a:e8:b7:d5:d9:dd:ad:b0:06:88:a3:06:dd:44:10:
                    3e:06:a7:51:8d:81:3a:03:f4:13:02:3e:40:c5:cb:
                    8f:6c:83:63:a9:bf:2c:ea:6e:e3:5d:11:1a:38:8a:
                    77:35:0f:78:42:a8:a1:85:c8:91:c3:12:83:86:9a:
                    db:cf:01:6b:10:d7:a8:36:cd:79:d4:b0:a6:9c:32:
                    7a:d7:55:81:6e:2a:ca:1d:7f:4f:32:e4:86:e4:ce:
                    da:17:33:df:eb:53:d6:9a:a0:5e:4f:dc:41:9b:bd:
                    26:f5:00:3d:eb:d2:cc:d5:a5:fb:9d:5a:3c:ec:ab:
                    d0:e5:ea:88:ac:e9:31:4b:04:9f:f3:1c:0b:9a:b7:
                    91:d0:a7:b8:64:fe:31:fe:51:f6:eb:9a:cc:3c:42:
                    94:2c:19:cc:78:c4:18:87:71:3e:90:2c:6f:f3:cd:
                    74:79:8f:39:df:d7:a8:2b:d0:03:ed:8a:a1:de:b4:
                    ea:65:11:d0:41:9b:9b:ac:2c:19:50:72:ec:80:01:
                    28:85:e2:15:41:08:13:e0:e7:44:8c:cb:bd:0e:83:
                    fb:02:9b:a0:4d:4f:ba:0c:73:6d:19:05:86:56:d4:
                    b6:f0:5f:e2:a3:c9:a3:81:15:c2:a9:41:74:ec:d2:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.192.0/20
                  66.220.58.0/24
                  69.64.240.0/20
                  162.211.176.0/22
                  162.216.96.0/23
                  162.216.100.0/22
                  199.38.232.0/22
                  199.47.192.0/21
                  199.101.92.0/22
                IPv6:
                  2001:4848::/32
                  2605:dc80::/32
                  2606:9100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1421
                  26348
                  31985

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:b6:a1:9b:5d:3f:0e:c4:a7:78:b2:29:b0:14:68:c2:be:
         bb:b7:ff:cc:02:2a:b4:71:d0:07:9d:ff:a7:fb:0c:8f:fb:00:
         ab:6d:cb:20:05:d2:b8:a4:d6:b3:c0:a9:a4:d6:b7:a2:d7:ce:
         cb:5f:51:5e:04:51:b7:db:5e:fa:5d:56:9c:2d:9a:1b:b7:fd:
         41:ca:8f:23:be:e1:22:0a:e7:bf:1c:86:6f:dc:b3:be:0a:6b:
         36:f2:6b:a1:fd:6e:8c:f0:a9:21:27:c6:bf:10:0b:41:28:0a:
         4e:39:dd:19:6a:36:26:60:ca:08:8d:b9:5d:c4:98:f5:7f:05:
         c5:df:a0:45:29:f1:52:bf:4c:b5:18:a0:69:82:42:5b:3f:2f:
         c3:9e:5f:8d:e1:52:73:d8:ad:13:6c:90:42:f0:93:d9:4e:82:
         38:68:65:0e:35:ab:b4:8e:f3:54:3a:27:bf:f2:06:de:c6:f8:
         ac:92:6f:54:bd:f6:bc:72:10:99:2a:59:bb:83:fb:c3:23:e3:
         f4:06:3e:cb:35:ec:11:68:7d:cf:18:ed:c1:dd:0d:db:ba:9f:
         2e:c7:5d:de:eb:01:68:ab:4b:49:32:e0:3f:14:74:7c:09:17:
         31:47:9c:9d:dd:33:49:86:b6:7e:c6:a5:4b:82:f6:58:05:c2:
         97:ae:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:29 2026 by rpki-client