Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
File:                     4edd6357-2935-4b92-8130-68071d4eaf01.cer (raw, json)
Hash identifier:          03buhse9ZVpgmwNTrWAOxHq2PrcijfGqqTI1EYcl2kI=
Subject key identifier:   0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584CD6CA5E1AA459C8D36AFAD480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Feb 2026 13:45:22 +0000
Certificate not after:    Wed 17 May 2028 12:45:22 +0000
Subordinate resources:    AS: 11788
                          AS: 14367
                          AS: 19391
                          AS: 20350
                          AS: 20357
                          AS: 21864
                          AS: 27264
                          AS: 33122
                          IP: 24.40.80.0/20
                          IP: 24.49.96.0/20
                          IP: 24.49.128.0/20
                          IP: 24.49.160.0/20
                          IP: 24.52.0.0 -- 24.52.11.255
                          IP: 24.52.18.0 -- 24.52.23.255
                          IP: 24.52.32.0/22
                          IP: 24.54.128.0 -- 24.54.149.255
                          IP: 24.54.160.0 -- 24.54.165.255
                          IP: 24.54.168.0/22
                          IP: 24.54.180.0 -- 24.54.191.255
                          IP: 24.56.160.0/22
                          IP: 24.56.170.0/23
                          IP: 24.56.176.0 -- 24.56.181.255
                          IP: 24.56.188.0/23
                          IP: 24.75.192.0/21
                          IP: 24.224.64.0/18
                          IP: 24.236.32.0/21
                          IP: 24.236.52.0/22
                          IP: 40.161.0.0/16
                          IP: 50.21.192.0/20
                          IP: 64.17.68.0 -- 64.17.73.255
                          IP: 64.17.76.0 -- 64.17.95.255
                          IP: 64.35.192.0/20
                          IP: 64.50.224.0/19
                          IP: 64.83.160.0/19
                          IP: 66.173.0.0/17
                          IP: 66.220.96.0/19
                          IP: 66.222.0.0/17
                          IP: 67.204.128.0/18
                          IP: 67.217.8.0 -- 67.217.17.255
                          IP: 68.71.160.0/19
                          IP: 69.11.128.0/17
                          IP: 69.21.0.0/16
                          IP: 69.128.0.0/14
                          IP: 72.0.160.0/19
                          IP: 72.35.128.0/19
                          IP: 74.211.0.0 -- 74.211.95.255
                          IP: 75.100.0.0/16
                          IP: 96.60.0.0/15
                          IP: 129.189.0.0/16
                          IP: 134.140.0.0/16
                          IP: 135.131.0.0/16
                          IP: 135.134.0.0/15
                          IP: 146.174.0.0/17
                          IP: 157.212.0.0/16
                          IP: 159.94.0.0/16
                          IP: 159.112.0.0/17
                          IP: 167.237.0.0/16
                          IP: 184.60.0.0/15
                          IP: 204.15.56.0/21
                          IP: 206.197.131.0/24
                          IP: 208.73.88.0/21
                          IP: 208.100.128.0/18
                          IP: 208.117.112.0/20
                          IP: 209.169.196.0/23
                          IP: 209.169.202.0 -- 209.169.207.255
                          IP: 209.169.216.0/23
                          IP: 209.169.220.0/22
                          IP: 216.87.224.0/20
                          IP: 216.165.128.0/18
                          IP: 216.170.128.0/17
                          IP: 216.228.160.0/19
                          IP: 217.143.0.0/16
                          IP: 2600:3400::/28
                          IP: 2604:ad00::/32
                          IP: 2610:1f0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:ca:5e:1a:a4:59:c8:d3:6a:fa:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 12 13:45:22 2026 GMT
            Not After : May 17 12:45:22 2028 GMT
        Subject: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:65:aa:ba:3f:a4:02:58:e1:4f:6f:c4:2d:24:
                    06:da:92:33:49:1b:cc:57:1c:82:20:01:2e:19:fa:
                    c6:e3:cc:58:2a:d2:0c:08:a6:a2:7a:1f:5c:1e:99:
                    40:6f:91:ae:a6:4c:e6:93:61:92:00:54:0a:51:86:
                    3c:77:8d:3b:78:0d:6c:a7:05:0e:c4:84:10:4b:89:
                    99:71:c9:92:33:0d:65:bd:dc:fe:bf:c8:84:2d:47:
                    5f:fd:d2:fe:9f:1b:26:2c:6f:6e:ae:4b:b7:5e:58:
                    ab:39:02:89:03:40:70:26:48:96:93:1e:ce:36:99:
                    c7:34:97:14:4c:3e:b9:69:dd:8b:9d:9f:f0:ed:88:
                    42:bc:3c:61:eb:83:f3:2b:6b:93:d3:86:86:1e:92:
                    d9:39:4b:ce:bb:53:18:5c:94:81:3c:24:ff:9e:c3:
                    c6:2b:ff:f3:d8:7e:dd:d4:21:5e:2d:76:eb:60:b6:
                    13:56:45:eb:e9:b5:1e:71:c3:51:1d:1c:68:32:01:
                    a3:9b:a0:0f:47:79:a2:d8:34:32:0c:93:4b:17:dc:
                    58:db:97:53:ae:db:43:df:98:05:22:8f:15:66:93:
                    72:65:44:a4:e5:5a:c4:6d:32:0d:4e:e4:12:43:4a:
                    17:d3:64:ce:e8:ed:37:0d:f6:a8:09:50:09:4b:f0:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.80.0/20
                  24.49.96.0/20
                  24.49.128.0/20
                  24.49.160.0/20
                  24.52.0.0-24.52.11.255
                  24.52.18.0-24.52.23.255
                  24.52.32.0/22
                  24.54.128.0-24.54.149.255
                  24.54.160.0-24.54.165.255
                  24.54.168.0/22
                  24.54.180.0-24.54.191.255
                  24.56.160.0/22
                  24.56.170.0/23
                  24.56.176.0-24.56.181.255
                  24.56.188.0/23
                  24.75.192.0/21
                  24.224.64.0/18
                  24.236.32.0/21
                  24.236.52.0/22
                  40.161.0.0/16
                  50.21.192.0/20
                  64.17.68.0-64.17.73.255
                  64.17.76.0-64.17.95.255
                  64.35.192.0/20
                  64.50.224.0/19
                  64.83.160.0/19
                  66.173.0.0/17
                  66.220.96.0/19
                  66.222.0.0/17
                  67.204.128.0/18
                  67.217.8.0-67.217.17.255
                  68.71.160.0/19
                  69.11.128.0/17
                  69.21.0.0/16
                  69.128.0.0/14
                  72.0.160.0/19
                  72.35.128.0/19
                  74.211.0.0-74.211.95.255
                  75.100.0.0/16
                  96.60.0.0/15
                  129.189.0.0/16
                  134.140.0.0/16
                  135.131.0.0/16
                  135.134.0.0/15
                  146.174.0.0/17
                  157.212.0.0/16
                  159.94.0.0/16
                  159.112.0.0/17
                  167.237.0.0/16
                  184.60.0.0/15
                  204.15.56.0/21
                  206.197.131.0/24
                  208.73.88.0/21
                  208.100.128.0/18
                  208.117.112.0/20
                  209.169.196.0/23
                  209.169.202.0-209.169.207.255
                  209.169.216.0/23
                  209.169.220.0/22
                  216.87.224.0/20
                  216.165.128.0/18
                  216.170.128.0/17
                  216.228.160.0/19
                  217.143.0.0/16
                IPv6:
                  2600:3400::/28
                  2604:ad00::/32
                  2610:1f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11788
                  14367
                  19391
                  20350
                  20357
                  21864
                  27264
                  33122

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:b1:df:92:6f:1e:1a:82:eb:39:63:09:e6:e7:b9:c1:74:
         1d:91:cf:85:f8:b4:0c:a5:88:14:63:7d:3c:21:f4:78:fb:83:
         9a:81:a6:91:8e:0e:d6:5a:f8:3c:37:66:18:8a:58:42:3e:1b:
         42:17:64:36:99:62:4f:69:9e:87:4b:e6:9d:fd:b1:f1:95:1b:
         ec:e2:7f:4e:8b:48:e8:33:94:2b:e6:4c:c6:87:76:75:d7:4f:
         aa:cd:98:cf:1a:be:d7:13:09:dd:f4:a0:3a:f2:37:2d:a5:77:
         66:18:14:18:5a:82:dc:68:da:59:7c:ce:ed:85:81:e9:10:39:
         4c:38:56:81:35:82:2c:51:55:73:f3:c4:83:0b:ac:0d:df:a2:
         3d:a8:93:cd:fc:7b:08:77:f3:45:10:78:89:89:5d:5b:43:ee:
         d4:22:60:b5:6c:47:d7:a2:d9:b0:8a:af:8b:ab:50:f2:76:34:
         86:92:2f:cd:3a:ee:9d:0d:1d:37:57:69:b7:c3:d6:f3:a7:82:
         95:e6:55:a9:77:75:87:a0:88:9e:15:ce:f1:db:49:c5:d2:7b:
         d6:8c:45:be:0e:49:34:e5:d5:f9:5e:12:69:a4:ae:36:09:00:
         61:da:83:70:ed:21:de:4c:7e:5e:da:23:c9:2c:c9:76:e6:2c:
         99:e6:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:26 2026 by rpki-client