Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File:                     baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier:          LL2qJenBjACwsYJbBLQiZKJRnhwCSyAEr0TRg044RXQ=
Subject key identifier:   50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584D01545571A8DAC80028DE5C60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 19:27:18 +0000
Certificate not after:    Sat 09 Oct 2027 00:45:36 +0000
Subordinate resources:    AS: 11539
                          AS: 11858
                          AS: 16751
                          AS: 18442
                          AS: 19554
                          AS: 21563
                          AS: 22591
                          AS: 26547
                          AS: 26575
                          AS: 26704
                          AS: 27495
                          AS: 27570
                          AS: 30446
                          AS: 31917
                          AS: 32216
                          AS: 32263
                          AS: 33459
                          AS: 33737
                          AS: 35888
                          AS: 46371
                          AS: 46858
                          AS: 395509
                          AS: 395791
                          AS: 397717
                          AS: 398848
                          AS: 399973
                          IP: 66.159.106.0/23
                          IP: 67.202.160.0/20
                          IP: 74.112.144.0/21
                          IP: 137.236.0.0/16
                          IP: 142.75.0.0/16
                          IP: 150.105.0.0/16
                          IP: 162.252.12.0/22
                          IP: 173.243.48.0/20
                          IP: 192.67.53.0/24
                          IP: 192.80.54.0/24
                          IP: 192.138.191.0/24
                          IP: 199.71.120.0/24
                          IP: 199.85.101.0/24
                          IP: 199.87.216.0/22
                          IP: 199.182.176.0/21
                          IP: 199.231.96.0/22
                          IP: 204.107.28.0/22
                          IP: 204.138.115.0/24
                          IP: 205.141.236.0/22
                          IP: 205.211.178.0/24
                          IP: 206.197.31.0/24
                          IP: 206.253.128.0/21
                          IP: 207.195.160.0/19
                          IP: 208.87.136.0/22
                          IP: 2604:8b00::/32
                          IP: 2620:0:1a40::/48
                          IP: 2620:10c:f000::/40
                          IP: 2620:134:d000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:54:55:71:a8:da:c8:00:28:de:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 27 19:27:18 2026 GMT
            Not After : Oct  9 00:45:36 2027 GMT
        Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
                    3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
                    b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
                    bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
                    9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
                    23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
                    48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
                    5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
                    df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
                    8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
                    f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
                    77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
                    ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
                    9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
                    79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
                    bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
                    e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.106.0/23
                  67.202.160.0/20
                  74.112.144.0/21
                  137.236.0.0/16
                  142.75.0.0/16
                  150.105.0.0/16
                  162.252.12.0/22
                  173.243.48.0/20
                  192.67.53.0/24
                  192.80.54.0/24
                  192.138.191.0/24
                  199.71.120.0/24
                  199.85.101.0/24
                  199.87.216.0/22
                  199.182.176.0/21
                  199.231.96.0/22
                  204.107.28.0/22
                  204.138.115.0/24
                  205.141.236.0/22
                  205.211.178.0/24
                  206.197.31.0/24
                  206.253.128.0/21
                  207.195.160.0/19
                  208.87.136.0/22
                IPv6:
                  2604:8b00::/32
                  2620:0:1a40::/48
                  2620:10c:f000::/40
                  2620:134:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11539
                  11858
                  16751
                  18442
                  19554
                  21563
                  22591
                  26547
                  26575
                  26704
                  27495
                  27570
                  30446
                  31917
                  32216
                  32263
                  33459
                  33737
                  35888
                  46371
                  46858
                  395509
                  395791
                  397717
                  398848
                  399973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:9f:fa:11:bd:6d:46:39:eb:7c:c3:98:8f:3c:6b:28:30:
         4c:5f:f4:64:63:42:66:44:ae:7d:7b:10:4c:51:29:24:73:27:
         0a:3c:d1:a4:18:bc:72:40:a0:36:71:23:0b:5f:e0:fd:45:06:
         34:f0:1a:4f:b5:7a:a6:ff:ca:d9:f0:5a:e9:5f:93:3d:26:ef:
         11:8b:0e:c0:b1:84:fe:a5:db:1f:15:7f:ec:e0:d7:ba:80:43:
         85:3c:2a:1a:e4:d5:da:55:b1:58:5a:d7:8a:db:b2:d1:d0:01:
         65:d0:50:80:ed:cf:b2:e1:ae:3a:73:18:3a:93:4e:b2:b0:01:
         be:1f:65:dd:5e:4f:4e:66:93:8a:38:06:e7:f5:a1:c4:26:df:
         57:be:ce:39:4c:10:53:59:b6:c5:5d:67:88:ff:3e:55:52:68:
         e3:12:8d:41:ac:d5:a9:ef:e9:24:bf:0c:5c:2d:65:5a:99:c0:
         9f:6c:76:7f:d9:17:6e:d3:b1:b0:94:1b:19:05:15:c1:a0:fa:
         50:3a:47:75:df:b5:28:03:40:43:24:4e:87:13:ab:a4:44:fe:
         86:38:ef:8d:85:c4:7e:24:1b:8c:61:38:7b:17:79:ec:2a:54:
         30:55:74:09:dc:a5:94:79:be:4f:57:bd:77:86:98:16:76:80:
         dd:3c:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:05 2026 by rpki-client