Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
File:                     a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer (raw, json)
Hash identifier:          J4W8J2okg2qgwXagpLM3T1a90QJ82GCi4FHOZBWxiLw=
Subject key identifier:   75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority key identifier: 32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67
Certificate issuer:       /CN=9aeaefa1-9009-4d41-9090-b27ec04ef7ef
Certificate serial:       010D0C9F4328584E0DEBCC462A568C74CA4DA940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
Manifest:                 rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
caRepository:             rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/
Notify URL:               https://rpki.admin.freerangecloud.com/rrdp/notification.xml
Certificate not before:   Thu 04 Jun 2026 00:29:07 +0000
Certificate not after:    Wed 06 Sep 2028 00:29:07 +0000
Subordinate resources:    IP: 23.152.224.0 -- 23.152.226.255
                          IP: 2620:13a:c000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:eb:cc:46:2a:56:8c:74:ca:4d:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeaefa1-9009-4d41-9090-b27ec04ef7ef
        Validity
            Not Before: Jun  4 00:29:07 2026 GMT
            Not After : Sep  6 00:29:07 2028 GMT
        Subject: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:31:01:e9:0d:df:83:5a:14:e4:8a:e9:7b:
                    d3:85:86:e8:c5:76:72:2d:c0:0b:3d:ed:10:11:b6:
                    92:dc:5c:02:9c:01:7c:a7:12:83:be:9c:31:a8:d3:
                    e4:df:5e:b1:d7:c1:17:1c:52:65:20:ee:6b:c4:49:
                    b8:b1:21:18:87:66:20:59:6e:c3:66:fe:cb:4e:5f:
                    a8:55:c2:35:bb:8b:5a:2a:d0:be:77:36:77:17:8b:
                    99:b6:e6:cf:57:67:d7:68:cd:f9:82:03:be:e3:e8:
                    c6:5a:88:39:c5:5f:09:01:7b:e9:7a:34:4b:a7:68:
                    a5:09:f8:c2:d6:b9:30:60:a2:3f:f7:2d:3d:ed:de:
                    0d:94:3d:94:cd:3f:e3:4c:12:24:18:49:0d:e9:1c:
                    37:c9:92:e1:b6:e4:a3:5b:1d:14:8c:99:61:86:4e:
                    8e:10:d5:ea:39:ed:84:be:c1:84:18:1d:1c:a5:bc:
                    04:ff:bd:f6:7c:2d:03:2c:5e:2e:ae:f9:8e:cd:c8:
                    86:97:33:d0:97:c7:a7:a0:fb:a9:e3:0e:90:06:20:
                    b4:4e:a8:d3:79:ac:45:f2:3b:b4:b1:15:65:6c:6d:
                    81:f3:a1:c9:70:06:b3:20:fe:d8:4f:2f:dd:12:17:
                    0c:8a:35:30:ce:41:48:cf:15:e3:0a:e3:4a:68:8b:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/
                RPKI Manifest - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.mft
                RPKI Notify - URI:https://rpki.admin.freerangecloud.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.crl

            X509v3 Authority Key Identifier:
                keyid:32:78:9B:CC:41:A0:8F:2A:23:FC:EB:EC:5B:AD:AE:FC:9A:56:C2:67

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.224.0-23.152.226.255
                IPv6:
                  2620:13a:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:93:a8:bf:7f:84:4e:3e:07:03:5a:2c:d3:db:5c:e6:d7:
         86:27:51:6f:88:26:1b:69:07:62:11:93:91:df:cc:90:d8:10:
         ce:61:d4:9a:ae:a5:54:d8:b0:a9:59:83:58:27:a2:b1:a5:52:
         d7:a4:d2:8b:a6:e6:fb:d1:10:66:67:2b:8f:f6:54:6a:ee:ee:
         43:b3:03:d7:67:6a:9e:4f:c3:6f:27:39:96:1a:4b:db:a4:47:
         ef:51:09:6f:eb:12:00:60:cc:a9:e1:a1:d5:6c:32:52:01:de:
         a4:0d:fa:71:3b:c8:d1:f9:ae:99:23:6b:83:ae:55:fb:d4:df:
         27:c2:f4:d8:84:e6:5b:19:05:1d:5f:38:51:09:e7:06:03:c0:
         a6:35:fe:ef:0e:29:81:a1:93:06:c1:2c:dd:d3:d5:e9:50:69:
         a7:d8:e6:4f:4c:3a:97:11:cf:5d:15:d8:b1:46:f6:13:af:11:
         92:1a:fc:91:7f:0c:9f:35:3a:4b:fb:5d:39:a2:5d:72:82:18:
         c6:93:2c:8c:86:33:21:87:f1:14:42:bd:ba:6c:4f:d3:1b:de:
         bc:61:81:bc:a7:3e:2d:e6:c7:5e:b1:73:39:63:c7:a0:14:b5:
         ba:f2:5e:1d:5c:a5:10:22:5f:97:2d:48:8b:f4:71:16:93:c1:
         19:e4:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:20 2026 by rpki-client