Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
File:                     7386a5e1-ba73-408c-a7e4-df88e2f52603.cer (raw, json)
Hash identifier:          OkqmQJXUJOIxTkbFj2tSdIL2/FlEn0z30vIUb+Cgbzs=
Subject key identifier:   8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584D064000CECF3721D1B33B3370
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 01 Mar 2026 13:45:22 +0000
Certificate not after:    Sat 03 Jun 2028 12:45:22 +0000
Subordinate resources:    AS: 13910
                          IP: 96.9.0.0/18
                          IP: 207.204.0.0 -- 207.204.55.255
                          IP: 209.16.96.0/20
                          IP: 216.21.224.0/22
                          IP: 216.21.231.0 -- 216.21.232.255
                          IP: 216.21.234.0 -- 216.21.238.255
                          IP: 2607:f408::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:40:00:ce:cf:37:21:d1:b3:3b:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  1 13:45:22 2026 GMT
            Not After : Jun  3 12:45:22 2028 GMT
        Subject: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:0d:53:d5:4c:0c:10:15:de:2b:31:a9:a7:
                    5d:19:fa:f0:3e:f4:60:04:10:f5:64:4b:08:29:e7:
                    33:e8:76:7b:cf:12:e3:93:ca:e1:e0:72:c7:22:91:
                    56:c2:b2:f2:42:7e:ad:1f:7c:d3:cc:fa:2d:8f:b9:
                    c4:ba:02:f7:8a:1e:41:61:aa:8c:fd:2e:6d:6a:4a:
                    87:48:fa:1c:00:46:d9:1d:a9:77:12:1d:c8:44:33:
                    a3:9b:6f:dc:42:d2:2d:9f:90:0d:df:95:42:b0:53:
                    19:47:1f:33:92:ea:96:46:61:ba:2a:03:e5:98:a8:
                    8d:b5:81:83:f7:b9:da:7a:d9:39:65:a6:1c:8f:d0:
                    93:92:e2:2d:02:31:80:24:9e:75:73:54:57:27:fa:
                    17:22:12:e3:3b:04:18:b4:3e:bb:42:ec:b1:9a:89:
                    13:18:3b:b0:33:21:b7:07:67:e1:0d:1a:02:81:33:
                    d4:3e:4a:b5:65:a0:cf:64:aa:37:4d:15:50:bb:1a:
                    a2:c8:5c:17:55:78:5c:e8:5c:5f:9e:74:7c:bc:78:
                    10:fa:fe:d4:38:4e:29:58:59:0f:11:79:f3:1f:4a:
                    88:44:57:60:36:6d:14:33:58:d3:a3:e1:36:ef:60:
                    07:d7:43:91:25:61:6a:13:6f:a3:51:eb:e8:0f:bc:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.0.0/18
                  207.204.0.0-207.204.55.255
                  209.16.96.0/20
                  216.21.224.0/22
                  216.21.231.0-216.21.232.255
                  216.21.234.0-216.21.238.255
                IPv6:
                  2607:f408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13910

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:ae:e7:d7:29:91:9a:d3:ce:af:29:a9:2a:3a:40:ca:73:
         83:6c:8e:de:29:94:b1:a1:fd:e4:ec:0f:89:51:47:6e:14:cc:
         e5:59:5c:f9:96:f2:de:63:ea:e8:63:a9:8c:ef:8b:49:7c:e4:
         db:85:d3:9a:86:fd:2f:06:cb:a8:94:23:ab:8a:82:67:19:2a:
         56:3f:c3:79:1a:b7:99:ca:13:f7:e8:e7:7d:d1:b0:0c:0b:2a:
         34:89:6e:c9:e4:f0:99:02:43:10:56:69:8d:d5:d9:31:8c:6b:
         90:97:00:7f:9b:8d:4e:0c:33:e2:3c:91:cb:85:c3:c0:c2:86:
         d8:0c:c6:48:f3:f2:d8:80:4e:cf:a3:f1:48:ab:e6:e1:91:52:
         f8:85:3b:00:19:39:7b:44:9a:c7:11:5f:5c:d3:21:25:16:57:
         b4:af:09:79:19:5f:2b:54:bb:1e:3e:49:a6:3b:4a:65:78:e6:
         14:10:ab:a4:1d:c6:47:41:1a:5e:6c:2e:81:79:c7:05:bd:bc:
         19:da:9e:74:c5:41:f0:14:69:81:64:44:35:bf:92:1c:a7:5c:
         7a:e9:08:53:db:8c:ff:a8:78:8e:78:79:df:7b:f3:fd:63:a1:
         46:bd:25:2f:6e:70:c5:85:17:b9:78:2d:10:8f:71:3d:a4:89:
         d7:74:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:46 2026 by rpki-client