Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911.cer
File:                     37979819-9f1b-4b22-b17f-691002d8c911.cer (raw, json)
Hash identifier:          HMpmPr0j+5ggWk5pX37aqu+z327Ah0tmMM/QmVx82Xo=
Subject key identifier:   7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584D62BB557F1841A186F91B5150
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Apr 2026 16:48:15 +0000
Certificate not after:    Tue 31 Aug 2027 00:45:37 +0000
Subordinate resources:    AS: 12019
                          AS: 12089
                          AS: 14832
                          AS: 27166
                          AS: 32505
                          IP: 69.63.160.0/20
                          IP: 69.194.176.0/20
                          IP: 139.180.32.0/19
                          IP: 157.185.0.0/18
                          IP: 173.0.32.0/20
                          IP: 199.33.80.0/24
                          IP: 199.83.224.0/21
                          IP: 208.77.168.0/22
                          IP: 208.80.160.0/21
                          IP: 216.45.0.0/19
                          IP: 2604:8e80::/32
                          IP: 2606:8380::/32
                          IP: 2606:b980::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:bb:55:7f:18:41:a1:86:f9:1b:51:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  3 16:48:15 2026 GMT
            Not After : Aug 31 00:45:37 2027 GMT
        Subject: CN=37979819-9f1b-4b22-b17f-691002d8c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:73:a4:f1:45:ec:dc:f2:a7:2d:f6:92:9d:
                    04:d0:3b:2c:fd:3c:7c:e9:f7:f2:6b:9e:cc:cf:3d:
                    d4:3d:3c:5f:b6:83:25:83:84:f4:b0:2f:93:29:e0:
                    0a:c8:e6:0d:ae:d2:e0:26:ee:d7:bb:d4:bc:62:7f:
                    89:a5:e4:c5:4b:c9:77:cf:58:87:79:8a:61:4f:de:
                    de:9b:51:2d:44:97:bf:5b:ff:1b:16:d3:6d:5a:58:
                    cd:03:e5:27:3c:04:4b:2e:4a:ae:92:68:19:33:d3:
                    d7:79:48:44:c0:35:d7:13:9c:34:76:3b:3c:4e:ad:
                    71:ad:0f:71:dc:a1:68:2f:f4:00:01:6b:63:d1:1d:
                    35:8d:ba:6e:01:4e:db:d5:1a:51:9a:94:c8:6f:ad:
                    b9:07:4c:32:68:7a:99:7a:f8:4f:78:bd:2a:2c:2f:
                    c2:11:10:8e:d7:c4:72:6c:4f:0b:74:51:aa:a5:e2:
                    50:b4:de:86:08:07:9a:ea:0d:4a:8b:6f:79:a4:15:
                    dc:00:1e:40:71:8f:21:bc:18:b9:e1:73:67:35:d7:
                    9c:30:6a:17:1f:df:0e:b5:b4:ff:ce:f0:74:85:d3:
                    f8:8d:3c:53:e4:97:72:7c:88:0d:6e:45:44:47:b1:
                    0c:d7:52:16:81:97:6d:d6:96:6d:cd:6c:37:4f:e5:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.160.0/20
                  69.194.176.0/20
                  139.180.32.0/19
                  157.185.0.0/18
                  173.0.32.0/20
                  199.33.80.0/24
                  199.83.224.0/21
                  208.77.168.0/22
                  208.80.160.0/21
                  216.45.0.0/19
                IPv6:
                  2604:8e80::/32
                  2606:8380::/32
                  2606:b980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12019
                  12089
                  14832
                  27166
                  32505

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:db:e7:1d:65:f2:ea:4b:16:cb:1a:ce:89:85:42:b2:5e:bb:
         33:f5:3e:1f:94:55:20:ef:4f:81:6f:5e:d2:ec:07:92:29:22:
         5a:e3:ba:48:a1:3e:31:5d:e0:a2:d5:28:9a:90:6e:18:c8:49:
         91:95:84:5c:c2:7a:65:52:86:ca:9c:06:75:a3:6e:7f:59:eb:
         5a:70:17:17:4d:a5:1a:fa:42:fb:d7:2c:8b:4a:a3:56:fa:24:
         b3:2e:8f:95:67:bd:8d:85:83:28:7b:68:cd:41:1c:24:69:f8:
         50:61:be:84:d0:cd:8f:d8:9b:e4:d4:41:55:fb:cb:c5:00:0e:
         88:08:cf:80:25:36:e9:27:f6:40:a1:c4:68:64:e7:59:96:a2:
         61:89:a7:0f:66:40:8b:9d:c5:3f:e3:5f:ab:2e:57:ba:39:38:
         e7:1b:24:df:a5:19:f7:45:cd:6d:76:0e:65:36:cb:a7:a8:28:
         95:64:e1:05:06:fa:b5:fa:f6:51:14:26:45:b5:7e:3e:a4:78:
         e6:b7:35:8f:a8:7b:d6:5f:2b:9a:64:11:90:00:2a:19:80:f2:
         e8:0f:e1:cd:b9:eb:c5:a5:2e:2c:4e:43:68:a2:76:21:ad:44:
         35:3f:c2:55:6f:cb:6f:4d:e0:3b:31:81:34:4d:bf:75:46:5e:
         b6:29:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:53 2026 by rpki-client