Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
File:                     9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer (raw, json)
Hash identifier:          8jClY3qKHdDf4LVTmKNI0asppi0Xxm+YpGKTtGrJZvs=
Subject key identifier:   A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority key identifier: 47:F8:B0:3B:2C:54:46:06:91:E3:A5:0F:B1:31:3E:C2:76:85:9F:C4
Certificate issuer:       /CN=8bb7e416-db1b-4221-a6c0-947074a20f8f
Certificate serial:       010D0C9F4328584E0DEBCA618F71422C4CC4E900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
Manifest:                 rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
caRepository:             rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/
Notify URL:               https://rpki.admin.freerangecloud.com/rrdp/notification.xml
Certificate not before:   Thu 04 Jun 2026 00:29:07 +0000
Certificate not after:    Wed 06 Sep 2028 00:29:07 +0000
Subordinate resources:    IP: 23.169.224.0/23
                          IP: 206.83.8.0/24
                          IP: 2602:fe13::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:eb:ca:61:8f:71:42:2c:4c:c4:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb7e416-db1b-4221-a6c0-947074a20f8f
        Validity
            Not Before: Jun  4 00:29:07 2026 GMT
            Not After : Sep  6 00:29:07 2028 GMT
        Subject: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:9c:45:18:67:40:c7:5b:78:05:99:50:c7:
                    aa:92:13:76:88:c0:17:bc:fd:2b:26:ed:be:1a:60:
                    58:72:ed:66:d2:d4:4a:cd:70:e4:aa:e9:80:fe:05:
                    f8:a0:53:31:99:e7:21:45:95:0e:a6:5a:b0:be:2d:
                    5b:3f:b2:86:af:ee:3d:b0:39:b6:de:23:7c:c3:9c:
                    b5:cb:25:e6:78:d9:54:c2:42:15:d0:59:4d:ae:f7:
                    e7:38:9e:7a:1e:c4:51:6d:17:e0:76:e9:7c:8f:4a:
                    56:2c:10:a0:9d:b8:9e:41:61:d4:12:c2:3d:cb:26:
                    9c:0e:29:7d:3a:92:11:80:84:a6:3e:b0:79:fe:ef:
                    62:e7:47:4c:34:57:47:95:d8:e6:99:5c:37:fa:0e:
                    6e:ad:46:2f:88:f5:e7:aa:75:3f:53:18:df:e3:77:
                    0f:21:d9:71:41:1a:b8:a6:a8:18:a7:89:0b:d4:42:
                    0b:2d:e8:53:ce:32:9e:50:36:a4:0d:b5:5c:17:f9:
                    8e:14:d2:72:df:b5:27:c0:30:e4:1b:33:36:29:17:
                    aa:51:c1:ba:b6:26:74:e6:98:cf:2e:f5:2c:6f:48:
                    41:7b:aa:f8:c3:44:e0:4d:05:eb:70:bf:28:80:2f:
                    65:4d:90:e9:44:3b:f1:e3:6c:3e:f7:74:ab:61:0e:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/
                RPKI Manifest - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.mft
                RPKI Notify - URI:https://rpki.admin.freerangecloud.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/8bb7e416-db1b-4221-a6c0-947074a20f8f.crl

            X509v3 Authority Key Identifier:
                keyid:47:F8:B0:3B:2C:54:46:06:91:E3:A5:0F:B1:31:3E:C2:76:85:9F:C4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.224.0/23
                  206.83.8.0/24
                IPv6:
                  2602:fe13::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:61:c3:ed:38:7d:b6:f0:85:bc:1a:aa:cf:c1:b2:6c:18:47:
         60:8a:59:0f:af:0c:26:b7:d4:41:5f:a7:8e:c6:48:6b:b1:1a:
         10:c2:8d:43:56:cf:cb:9a:a5:6c:bd:9c:cf:bd:ca:53:e9:17:
         e2:b7:3a:1b:ea:e1:44:b9:4d:e6:b8:af:48:30:66:af:d5:5e:
         bd:4d:eb:c6:48:51:56:69:ab:c2:9b:31:f6:a9:a6:f8:4b:94:
         3d:19:22:07:a6:7b:91:c5:10:ab:26:af:24:bc:aa:17:dc:86:
         6d:c7:78:18:e3:87:62:a1:bc:31:23:9b:7e:7b:a1:5d:9d:63:
         eb:52:5a:64:46:32:30:16:23:c4:b6:5a:20:f0:58:b6:3e:8d:
         89:c8:e0:21:20:19:e0:05:08:5b:ad:e5:b6:30:12:ea:cf:ec:
         a8:94:ff:b2:e4:23:01:d0:27:a3:79:c7:c3:be:17:8f:95:90:
         89:c4:fd:3b:1c:5d:c8:97:9e:a6:70:67:3e:30:20:47:e4:ca:
         01:24:2d:34:13:ee:92:9d:8f:36:ac:14:0e:6a:9a:a1:f4:2f:
         24:f3:6c:24:19:5e:86:ef:12:b8:68:3e:3c:44:23:d2:d1:e6:
         70:dd:fe:9e:0f:90:c3:3a:aa:54:04:c8:45:95:59:9c:96:cb:
         d3:53:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:49 2026 by rpki-client