Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
File:                     51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer (raw, json)
Hash identifier:          +pvpdS2sWQ4JcLNGlf/cbUjhwUJ0kuVJmxhX1VZeL/o=
Subject key identifier:   17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584D79FD92E9B0F5FFB7C760DF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 Apr 2026 00:45:18 +0000
Certificate not after:    Sat 15 Jul 2028 00:45:18 +0000
Subordinate resources:    AS: 11381
                          AS: 17310
                          AS: 19310
                          AS: 19872
                          AS: 25943
                          AS: 26479
                          AS: 30177
                          AS: 33346
                          AS: 40174
                          AS: 62798
                          AS: 396198
                          AS: 396351
                          AS: 397310
                          AS: 397872
                          AS: 398337
                          AS: 398383
                          AS: 398497
                          IP: 23.132.128.0/24
                          IP: 23.141.16.0/24
                          IP: 23.163.48.0/24
                          IP: 64.32.32.0/22
                          IP: 65.111.192.0/19
                          IP: 66.54.96.0/22
                          IP: 66.85.6.0/24
                          IP: 66.171.80.0/20
                          IP: 67.20.32.0/20
                          IP: 68.68.64.0/20
                          IP: 69.27.64.0/19
                          IP: 69.36.48.0/20
                          IP: 69.41.80.0/20
                          IP: 72.34.176.0/20
                          IP: 74.81.183.0/24
                          IP: 74.113.40.0/21
                          IP: 74.119.248.0/21
                          IP: 76.77.160.0/20
                          IP: 104.36.140.0/22
                          IP: 130.51.212.0/22
                          IP: 134.195.116.0/22
                          IP: 137.83.38.0/23
                          IP: 142.202.216.0/22
                          IP: 161.38.218.0/23
                          IP: 162.142.80.0/21
                          IP: 162.142.104.0 -- 162.142.113.255
                          IP: 162.208.4.0/22
                          IP: 162.218.252.0/22
                          IP: 162.221.128.0/22
                          IP: 162.223.104.0/22
                          IP: 162.248.60.0/22
                          IP: 162.252.64.0/22
                          IP: 162.255.64.0/22
                          IP: 163.123.164.0/22
                          IP: 167.248.144.0/20
                          IP: 173.225.192.0/20
                          IP: 192.169.72.0/21
                          IP: 192.209.17.0/24
                          IP: 199.102.184.0/22
                          IP: 204.238.54.0/24
                          IP: 208.94.88.0/21
                          IP: 216.184.64.0/19
                          IP: 2600:8c00::/28
                          IP: 2602:fd4d::/36
                          IP: 2602:ff88::/36
                          IP: 2604:68c0::/32
                          IP: 2604:9300::/32
                          IP: 2605:6040::/32
                          IP: 2605:9dc0::/32
                          IP: 2605:b7c0::/32
                          IP: 2606:7400::/32
                          IP: 2606:7900::/32
                          IP: 2607:da80::/32
                          IP: 2607:fbd0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:79:fd:92:e9:b0:f5:ff:b7:c7:60:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr 12 00:45:18 2026 GMT
            Not After : Jul 15 00:45:18 2028 GMT
        Subject: CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:cd:01:e7:98:82:de:17:21:e5:f5:ab:42:
                    cf:6f:fd:f3:0a:94:99:14:54:f4:10:0d:d2:7c:ca:
                    6d:39:e0:21:61:0a:8b:17:3f:ee:21:d1:a9:7d:e9:
                    ea:72:3d:b0:17:66:00:67:52:39:8d:ce:00:cd:6f:
                    f5:0e:2c:8c:c9:20:6c:f5:de:58:2e:0c:bf:c3:ac:
                    94:ce:fc:eb:b9:53:d1:93:0b:a1:73:ae:5d:dd:4c:
                    63:4e:d6:31:54:55:7c:98:cc:b3:e1:8a:62:c4:c6:
                    37:76:20:98:5c:f0:f9:a3:41:11:25:a6:14:44:2e:
                    ac:88:38:16:64:6b:67:9d:18:a6:19:8a:45:31:da:
                    ee:1a:e0:4d:ca:86:10:9e:3d:57:7d:9d:c4:bb:db:
                    8a:ed:e6:77:b6:f8:b8:2a:d4:26:4a:dd:d8:f7:35:
                    b0:1c:93:c1:7a:5e:87:d4:7d:e8:a0:45:30:d0:1d:
                    55:74:6e:11:a6:cf:36:a5:2d:d3:c9:ab:6f:24:2a:
                    6b:4e:dc:17:39:a5:ee:e4:4d:0a:d5:33:e8:72:a7:
                    9d:72:07:0d:3f:c8:da:15:33:d2:57:28:64:a8:64:
                    2d:49:34:b9:6e:b3:eb:98:47:23:4a:33:23:56:24:
                    b0:88:61:c7:4c:b1:e1:96:38:eb:14:40:b5:8a:58:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.128.0/24
                  23.141.16.0/24
                  23.163.48.0/24
                  64.32.32.0/22
                  65.111.192.0/19
                  66.54.96.0/22
                  66.85.6.0/24
                  66.171.80.0/20
                  67.20.32.0/20
                  68.68.64.0/20
                  69.27.64.0/19
                  69.36.48.0/20
                  69.41.80.0/20
                  72.34.176.0/20
                  74.81.183.0/24
                  74.113.40.0/21
                  74.119.248.0/21
                  76.77.160.0/20
                  104.36.140.0/22
                  130.51.212.0/22
                  134.195.116.0/22
                  137.83.38.0/23
                  142.202.216.0/22
                  161.38.218.0/23
                  162.142.80.0/21
                  162.142.104.0-162.142.113.255
                  162.208.4.0/22
                  162.218.252.0/22
                  162.221.128.0/22
                  162.223.104.0/22
                  162.248.60.0/22
                  162.252.64.0/22
                  162.255.64.0/22
                  163.123.164.0/22
                  167.248.144.0/20
                  173.225.192.0/20
                  192.169.72.0/21
                  192.209.17.0/24
                  199.102.184.0/22
                  204.238.54.0/24
                  208.94.88.0/21
                  216.184.64.0/19
                IPv6:
                  2600:8c00::/28
                  2602:fd4d::/36
                  2602:ff88::/36
                  2604:68c0::/32
                  2604:9300::/32
                  2605:6040::/32
                  2605:9dc0::/32
                  2605:b7c0::/32
                  2606:7400::/32
                  2606:7900::/32
                  2607:da80::/32
                  2607:fbd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11381
                  17310
                  19310
                  19872
                  25943
                  26479
                  30177
                  33346
                  40174
                  62798
                  396198
                  396351
                  397310
                  397872
                  398337
                  398383
                  398497

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:90:31:bd:d8:e9:f6:f5:62:6b:59:e3:70:c1:f7:29:de:1c:
         49:ad:15:0e:63:c6:62:dc:00:1a:71:40:44:ab:02:07:67:61:
         64:e3:a2:7e:bf:1c:7b:9d:42:10:d9:4d:82:14:31:87:4d:d4:
         d2:06:8f:b1:c6:6f:f7:b1:8b:32:ab:5f:eb:cb:17:83:ab:ba:
         54:4c:4b:b5:1d:c5:12:87:4e:fc:6e:bf:a7:0d:5f:be:4b:39:
         e2:c6:10:d5:53:b3:97:d2:c6:63:ef:70:58:97:cf:61:a3:6d:
         e6:d6:5b:72:76:52:d9:8b:f7:b4:07:c5:c9:3c:68:80:90:7a:
         4b:68:6b:3f:fa:80:8c:66:aa:ab:18:f2:88:13:67:a0:70:57:
         0a:9d:55:a1:44:3e:cb:68:d8:06:46:57:7c:9a:63:d2:9b:10:
         2c:49:67:22:79:1c:de:20:3c:86:a6:7f:1c:f9:9b:65:db:b1:
         77:0a:bb:1b:e1:26:c4:43:92:7d:3e:37:1b:a9:a4:00:9e:8b:
         ef:3c:10:f7:cf:56:c4:23:6d:00:84:f1:83:50:ef:79:63:0b:
         6a:1d:93:da:99:30:d5:d4:bc:a9:06:0d:a2:3c:e3:3b:bb:22:
         71:16:5d:2c:45:3d:dc:06:af:33:47:7b:8d:83:66:ec:cf:16:
         e9:f7:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:06 2026 by rpki-client