Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
File:                     16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer (raw, json)
Hash identifier:          ZLWkx7SAZwCd6FXboTuGgC6cS+nyV2RZnJun7FglCFE=
Subject key identifier:   4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584B970546ABB1DFDDE065993A20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Oct 2025 00:45:23 +0000
Certificate not after:    Mon 24 Jan 2028 01:45:23 +0000
Subordinate resources:    AS: 17185
                          AS: 26896
                          AS: 29724
                          AS: 33302
                          AS: 46949
                          IP: 64.111.16.0/20
                          IP: 74.115.168.0/21
                          IP: 76.8.48.0/20
                          IP: 96.47.0.0/20
                          IP: 173.195.144.0/20
                          IP: 199.16.48.0/21
                          IP: 208.72.236.0/22
                          IP: 208.82.128.0/22
                          IP: 208.88.48.0/21
                          IP: 2604:bf00::/32
                          IP: 2607:2800::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:05:46:ab:b1:df:dd:e0:65:99:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 21 00:45:23 2025 GMT
            Not After : Jan 24 01:45:23 2028 GMT
        Subject: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:c1:10:90:1b:b0:ce:a3:d7:93:2a:1b:63:
                    1b:f5:3c:fb:93:14:90:6d:57:9d:1a:45:87:76:bf:
                    b4:1e:b0:25:f8:d3:a3:82:87:b0:ad:0a:18:76:68:
                    ae:92:e8:0d:a4:73:8d:d3:54:df:4d:07:58:6a:fe:
                    4d:e5:2a:08:4c:e6:10:4a:ed:fb:b4:be:93:8c:57:
                    57:25:0a:e4:5c:c4:06:4c:f1:51:a3:32:f7:63:e8:
                    00:f1:57:3d:b7:38:dd:85:a9:48:92:77:de:d6:86:
                    de:5a:68:ea:30:6e:a5:66:5b:97:67:1f:07:05:23:
                    8d:69:bb:c8:df:95:6f:3d:b8:5c:88:9d:00:2c:80:
                    11:f8:5b:c6:51:8c:9f:bb:c2:45:75:57:a0:df:13:
                    63:2f:de:b2:ff:a0:c5:52:4b:9c:6c:bc:4a:21:13:
                    2b:c6:51:05:90:5d:ac:b8:12:bb:ea:70:c1:3e:9f:
                    4b:66:1f:de:16:0d:71:3a:07:15:de:d1:e9:2c:62:
                    db:27:51:53:80:7f:fe:4b:5d:53:c6:b7:69:fd:45:
                    31:ce:b7:16:99:88:98:84:9a:64:ce:33:58:8d:c3:
                    07:a3:5b:77:97:d8:d4:48:4b:8d:68:1a:b7:e0:e5:
                    4b:10:86:bc:90:01:2b:a7:da:d6:8f:f6:dd:35:39:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.16.0/20
                  74.115.168.0/21
                  76.8.48.0/20
                  96.47.0.0/20
                  173.195.144.0/20
                  199.16.48.0/21
                  208.72.236.0/22
                  208.82.128.0/22
                  208.88.48.0/21
                IPv6:
                  2604:bf00::/32
                  2607:2800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17185
                  26896
                  29724
                  33302
                  46949

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:02:97:fa:32:5b:43:17:ff:3c:46:f6:3d:27:2c:11:87:74:
         f9:27:01:3e:6b:a8:02:a4:ce:d3:c0:03:7b:ac:ae:5c:b1:16:
         f0:21:af:c8:c5:4e:7f:5d:2b:4d:ef:2d:21:87:e1:0d:fd:0c:
         94:db:e6:65:17:a3:4d:4e:fb:8c:c3:f7:25:7a:5c:49:21:41:
         8d:9e:87:18:1a:3e:ed:00:56:ae:55:16:55:fa:60:ac:4e:4a:
         d9:34:0f:77:02:f5:b3:cf:18:4e:a4:2a:ce:fe:91:3a:51:60:
         e7:80:bd:df:c3:5d:47:90:13:b7:d9:2c:80:fd:a1:92:0b:5d:
         59:c7:4c:52:ff:a2:c0:4c:0a:d9:5d:d4:8a:c2:0c:14:78:c3:
         aa:8d:fb:ab:bf:b3:0d:c4:09:07:2c:e9:d7:a8:1e:25:dc:70:
         67:cd:fa:46:4c:53:44:c8:a3:00:5d:89:dd:c5:b2:5a:f3:76:
         93:d7:a5:44:62:6d:be:c0:dd:0b:c4:38:c4:bc:b2:b4:d6:bf:
         1f:d4:99:34:32:45:79:d3:6b:61:b9:20:23:73:c6:52:c3:97:
         6a:9f:ec:e7:10:83:5e:8a:fd:da:88:71:23:6e:61:23:05:e8:
         9b:11:21:58:39:9e:67:a6:76:d4:ba:34:85:2e:2d:ba:f5:98:
         1f:95:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:14:57 2025 by rpki-client