Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4.cer
File:                     c32ef62f-8d92-46b2-b82a-4731f6fc4ec4.cer (raw, json)
Hash identifier:          tZh28ruJKBDS4X5p6hpgezO9y8t3XlQWRW5rluppKas=
Subject key identifier:   C8:FA:3D:9A:2E:EA:96:54:04:9B:D4:BA:99:B5:E5:77:B6:BD:9C:CF
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584D81A675A6CE732D8BC658F780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Apr 2026 18:36:15 +0000
Certificate not after:    Mon 11 Oct 2027 20:35:40 +0000
Subordinate resources:    AS: 19397
                          IP: 45.74.128.0 -- 45.74.187.255
                          IP: 45.74.208.0/22
                          IP: 45.74.214.0/23
                          IP: 45.74.224.0/20
                          IP: 45.74.252.0/23
                          IP: 70.40.128.0/21
                          IP: 104.204.0.0 -- 104.204.95.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:a6:75:a6:ce:73:2d:8b:c6:58:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 14 18:36:15 2026 GMT
            Not After : Oct 11 20:35:40 2027 GMT
        Subject: CN=c32ef62f-8d92-46b2-b82a-4731f6fc4ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:61:e7:e5:fc:5d:52:d0:f6:e0:c6:bd:50:
                    9f:4c:25:b4:af:18:ba:ca:e9:09:af:ac:21:9f:60:
                    24:d9:41:30:3d:2e:94:55:44:b3:56:f0:f4:64:4f:
                    5b:5c:dc:7c:e5:1f:e6:b9:21:f3:25:aa:72:8c:a9:
                    43:45:17:59:ca:1f:d7:dd:22:ff:35:f9:be:1d:f2:
                    57:10:04:61:26:12:0d:75:09:8d:d4:96:5d:90:ed:
                    ca:17:ad:97:fb:65:79:a2:61:07:3f:53:12:01:e6:
                    4a:bc:e3:31:e4:ae:36:07:c8:48:95:d5:6d:56:38:
                    72:55:e6:06:cb:6f:0d:9b:80:31:7b:b8:a4:45:3b:
                    e7:37:7b:39:eb:71:01:5a:9e:02:0e:46:dc:6d:47:
                    f5:e0:0f:15:3e:fa:31:2d:d4:dd:19:17:37:78:fc:
                    6c:77:97:e8:d1:98:4e:ef:42:1f:9c:a8:50:71:76:
                    ef:2a:4a:63:c0:b3:9e:15:e0:40:5f:e4:c3:7a:1c:
                    05:40:1b:5b:8f:24:05:6f:02:15:82:ee:2e:2c:9e:
                    12:e9:20:6c:a9:cb:85:f0:c8:a1:53:78:b6:c2:5e:
                    04:b7:36:1e:d1:fa:71:40:36:96:50:b5:2a:51:40:
                    5a:17:0f:c4:3e:b6:95:a9:a6:25:65:60:a6:9c:11:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FA:3D:9A:2E:EA:96:54:04:9B:D4:BA:99:B5:E5:77:B6:BD:9C:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4/c32ef62f-8d92-46b2-b82a-4731f6fc4ec4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.128.0-45.74.187.255
                  45.74.208.0/22
                  45.74.214.0/23
                  45.74.224.0/20
                  45.74.252.0/23
                  70.40.128.0/21
                  104.204.0.0-104.204.95.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19397

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:e5:a8:86:a3:b2:e0:9b:ec:82:a1:4c:1b:13:52:6c:b4:
         ba:2f:80:63:3d:a3:8c:3d:cc:bb:e4:c1:c8:14:a1:56:d6:5a:
         8d:f0:d8:49:a6:d2:4d:83:47:aa:78:0f:82:a4:29:03:1c:77:
         7e:48:0c:e1:c6:ac:19:95:2e:78:e7:26:d9:0d:78:ae:ca:9d:
         da:78:92:9a:20:1f:37:0c:ea:3d:a5:dd:9a:87:17:8b:19:91:
         19:51:de:c8:6b:51:b0:9f:c2:06:f3:dd:b2:0a:b4:01:93:5b:
         16:46:06:28:70:5f:c5:93:1a:1d:59:bc:93:01:dc:2b:a3:b0:
         a2:1a:d5:34:ca:17:5f:b3:1f:66:de:d6:b5:fe:d4:89:0c:8b:
         81:32:45:3c:60:e0:5f:cc:50:01:fb:07:ea:a4:6a:89:9e:3f:
         7a:76:f3:2c:3a:ca:1c:dd:6b:4b:15:4a:5d:c1:d9:6a:ad:2d:
         1e:d9:fa:0f:f1:8d:09:d9:67:8a:2c:df:8c:86:3b:8d:86:45:
         f2:c2:28:b3:8d:f3:a3:eb:27:30:48:5a:c7:e8:bf:68:28:ed:
         e1:f9:70:81:c9:c4:ff:25:c4:e1:51:94:c7:2e:24:49:f6:63:
         3a:57:83:90:38:6c:b4:1d:69:2c:98:f8:ef:51:0b:66:7b:7d:
         0d:33:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:22:23 2026 by rpki-client