Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
File:                     4279ddf8-3e66-45cf-8955-452fbe652c0c.cer (raw, json)
Hash identifier:          xgaGUYQAJQ6Pha1+QRsnmJjUt2SUsqBm7O4JJ7LHqCo=
Subject key identifier:   CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584D4F09E33D57A4453E19EE8A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Mar 2026 15:30:21 +0000
Certificate not after:    Mon 17 Jan 2028 01:45:23 +0000
Subordinate resources:    AS: 14399
                          AS: 20376
                          AS: 27425
                          AS: 397050
                          IP: 64.32.38.0/23
                          IP: 104.36.88.0/22
                          IP: 162.213.164.0/22
                          IP: 162.250.204.0/22
                          IP: 168.149.192.0/19
                          IP: 198.203.204.0/23
                          IP: 198.241.49.0/24
                          IP: 198.241.62.0/24
                          IP: 199.45.168.0/21
                          IP: 204.9.24.0/22
                          IP: 204.107.216.0/24
                          IP: 204.144.152.0/21
                          IP: 207.178.96.0/19
                          IP: 209.137.196.0 -- 209.137.201.255
                          IP: 209.137.203.0 -- 209.137.207.255
                          IP: 209.137.209.0 -- 209.137.219.255
                          IP: 209.137.222.0/23
                          IP: 213.170.146.0/24
                          IP: 2606:2600::/28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:09:e3:3d:57:a4:45:3e:19:ee:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 27 15:30:21 2026 GMT
            Not After : Jan 17 01:45:23 2028 GMT
        Subject: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:2e:19:ae:31:0f:6f:cc:1c:52:0b:e1:95:
                    81:37:d8:9a:eb:47:43:12:55:e9:24:32:40:d7:7b:
                    39:dc:28:bf:f9:b9:75:8a:6e:a7:af:23:37:be:fc:
                    91:3c:5c:e8:42:9e:5a:06:70:53:6b:09:91:1f:30:
                    58:36:c7:24:11:0a:4b:31:e5:d4:58:01:60:c2:3b:
                    dd:dc:54:c1:db:75:21:4f:52:0d:f1:d7:cb:a5:99:
                    54:b5:40:c6:e9:6b:65:92:2f:5d:6d:48:61:96:d7:
                    70:b2:06:f9:6a:2a:26:73:23:82:f0:ff:eb:43:88:
                    4c:49:cd:8c:41:d2:f1:92:0a:0a:97:aa:6f:74:8f:
                    c0:00:09:b0:71:ea:0f:46:49:2d:1b:11:ba:30:47:
                    03:14:09:d3:17:74:02:b3:1e:34:03:4a:f8:56:41:
                    3a:58:c9:3a:c6:36:ea:61:14:e0:11:e4:65:9f:d4:
                    34:ce:4d:ca:ac:00:29:7c:3f:a6:7e:5a:b1:b7:77:
                    6c:37:fa:35:7a:78:1b:62:5d:ea:c1:4b:d7:f1:5b:
                    70:57:98:14:ff:74:6b:ad:4e:79:d4:dc:e0:70:f1:
                    a1:5d:c1:ed:22:11:d9:99:15:57:43:df:4c:ef:52:
                    8a:35:0e:35:88:c2:5e:c1:fa:00:28:92:1a:ed:10:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.38.0/23
                  104.36.88.0/22
                  162.213.164.0/22
                  162.250.204.0/22
                  168.149.192.0/19
                  198.203.204.0/23
                  198.241.49.0/24
                  198.241.62.0/24
                  199.45.168.0/21
                  204.9.24.0/22
                  204.107.216.0/24
                  204.144.152.0/21
                  207.178.96.0/19
                  209.137.196.0-209.137.201.255
                  209.137.203.0-209.137.207.255
                  209.137.209.0-209.137.219.255
                  209.137.222.0/23
                  213.170.146.0/24
                IPv6:
                  2606:2600::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14399
                  20376
                  27425
                  397050

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:ee:a4:da:11:0d:6a:ab:40:7e:f0:14:9f:c8:dc:f8:ce:
         54:d4:1d:8a:2a:b3:ff:00:80:bf:25:b9:fc:24:58:fc:7a:40:
         80:6b:84:1a:21:21:7c:d3:32:22:bb:50:7a:8e:c7:2f:86:e8:
         9f:9b:2f:c1:33:16:9e:a5:09:76:2d:17:4c:e8:5d:2e:05:e1:
         b1:97:4b:5c:db:d5:20:0a:31:4e:20:ba:27:66:b0:25:c7:15:
         06:b3:db:4e:6d:0c:26:eb:b4:4c:a3:7b:d5:84:5a:bf:57:b5:
         4b:d3:59:fd:30:83:4f:b0:00:a3:44:29:7d:ac:7e:9a:0b:1e:
         80:2d:9b:bb:bc:2a:fd:c6:9d:f4:b2:aa:b1:74:d2:59:4b:7d:
         f7:c8:66:99:c5:a0:40:5d:8f:6e:dd:21:10:46:7e:a6:d9:6e:
         35:a9:06:20:90:19:47:7f:7c:35:69:9c:08:93:99:56:bf:b6:
         a8:a0:88:b2:46:5b:45:7a:fe:40:e2:b0:f8:82:48:6a:22:5d:
         b1:ce:1a:57:0a:10:bd:a0:72:34:56:c1:18:69:9b:2e:03:32:
         3f:65:be:91:87:d3:6e:2e:2a:7b:24:1d:f3:55:1e:53:d0:86:
         6e:79:ce:27:af:2a:e8:b4:a2:d5:85:98:1c:f3:d3:ca:f1:bf:
         bc:90:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:59:14 2026 by rpki-client