Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer
File:                     0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer (raw, json)
Hash identifier:          Gexz05vHinPmz4KdIAVDNt5//nqddYrpaSwIi7uZQ+A=
Subject key identifier:   CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584EC09F8CB25A7F50B26FA349C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Aug 2026 00:45:11 +0000
Certificate not after:    Thu 09 Nov 2028 01:45:11 +0000
Subordinate resources:    AS: 32095
                          IP: 67.217.254.0/23
                          IP: 74.205.240.0/23
                          IP: 142.79.48.0/21
                          IP: 157.120.200.0/21
                          IP: 161.115.224.0/19
                          IP: 168.235.144.0/20
                          IP: 173.209.232.0/23
                          IP: 199.115.176.0/22
                          IP: 209.46.2.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:9f:8c:b2:5a:7f:50:b2:6f:a3:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Aug  7 00:45:11 2026 GMT
            Not After : Nov  9 01:45:11 2028 GMT
        Subject: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:97:b7:2d:16:22:07:69:9b:52:23:63:9c:
                    b6:2c:cd:50:94:ac:ea:b7:45:f6:5b:ad:4c:91:81:
                    db:22:ac:0c:bf:1d:fb:7f:69:4b:b7:9c:ae:71:f2:
                    35:20:70:99:fa:d1:37:25:37:6b:47:a7:88:50:72:
                    d4:c7:ec:ce:8c:a5:c7:21:93:9b:d2:a8:24:7e:fd:
                    a3:89:2e:e1:b1:db:27:b3:73:9f:4f:24:8f:b6:fb:
                    a1:5b:e6:2f:df:41:a1:64:b8:7d:af:dc:c3:18:db:
                    8f:57:b8:29:e8:53:35:6a:d6:d2:4f:1a:fb:e5:28:
                    a0:8b:80:04:ff:80:0a:c2:43:68:4c:d7:d6:de:04:
                    3d:70:66:e6:fe:59:4b:45:0e:2d:f1:cb:a5:4e:cc:
                    94:b4:5c:bf:e2:5a:b0:cb:f7:da:7e:4e:31:f9:2d:
                    5e:1a:a0:8f:fd:9a:2b:ce:5b:5a:2f:91:90:66:94:
                    b3:c3:83:b2:a1:58:b2:97:3d:0e:a9:fa:73:92:df:
                    d0:89:95:dd:78:58:37:69:01:a5:45:62:b8:5c:c3:
                    98:d9:6f:48:32:31:cd:9d:9d:8c:38:1d:87:97:97:
                    de:93:49:fb:60:8c:30:a6:e3:0a:8d:09:c9:36:00:
                    37:23:50:bc:56:01:1a:ee:f8:a6:45:89:04:56:32:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.254.0/23
                  74.205.240.0/23
                  142.79.48.0/21
                  157.120.200.0/21
                  161.115.224.0/19
                  168.235.144.0/20
                  173.209.232.0/23
                  199.115.176.0/22
                  209.46.2.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32095

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:38:23:66:9e:f0:ec:a7:9b:dc:74:34:99:b6:d9:6b:09:
         99:b2:9a:5e:58:4d:c2:2d:39:c7:b5:7d:10:f2:85:13:07:0f:
         61:69:73:48:df:1c:19:92:92:c3:61:0e:e5:6e:0d:a9:80:00:
         10:41:f4:56:ac:d6:34:cc:4a:dc:ad:f6:ce:79:35:f9:08:bb:
         ec:bb:31:f4:94:34:03:2f:f6:a6:3e:74:c7:c5:66:52:b2:68:
         d0:00:7b:ce:61:22:77:a0:6b:04:8a:e3:01:30:7c:b5:a2:83:
         9a:1b:93:35:97:9a:4f:44:01:db:dc:28:25:e4:90:12:2e:4d:
         8b:28:d6:f8:0e:4e:a1:f5:ec:56:16:44:c6:4f:c3:0e:35:40:
         0c:66:e3:4d:c0:3c:c1:bd:5e:c8:ed:7b:6c:6c:ba:0c:39:a0:
         50:4f:8b:da:97:d1:88:ec:8a:0b:a9:f5:09:95:b5:cf:ba:75:
         e4:c6:2c:cb:95:21:77:21:97:ec:db:44:42:2a:79:fb:fa:e5:
         8d:3d:96:00:d8:66:99:aa:a4:82:2a:e5:46:80:9f:df:12:4a:
         8c:81:ec:43:13:66:da:9f:d6:62:51:4a:18:f2:e0:40:b6:f1:
         84:05:8a:e0:45:e2:be:1b:a8:2a:3c:30:0e:3c:6a:2c:72:16:
         c9:b3:77:44
-----BEGIN CERTIFICATE-----
MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWE7An4yyWn9Qsm+jScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDgwNzAwNDUxMVoXDTI4MTEwOTAxNDUxMVowLzEtMCsGA1UEAxMk
MGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgxZDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+eXty0WIgdpm1IjY5y2LM1QlKzqt0X2W61M
kYHbIqwMvx37f2lLt5yucfI1IHCZ+tE3JTdrR6eIUHLUx+zOjKXHIZOb0qgkfv2j
iS7hsdsns3OfTySPtvuhW+Yv30GhZLh9r9zDGNuPV7gp6FM1atbSTxr75Sigi4AE
/4AKwkNoTNfW3gQ9cGbm/llLRQ4t8culTsyUtFy/4lqwy/fafk4x+S1eGqCP/Zor
zltaL5GQZpSzw4OyoViylz0Oqfpzkt/QiZXdeFg3aQGlRWK4XMOY2W9IMjHNnZ2M
OB2Hl5fek0n7YIwwpuMKjQnJNgA3I1C8VgEa7vimRYkEVjJC2wIDAQABo4IESjCC
BEYwHQYDVR0OBBYEFMpXsVk2wv5xTa+QUcrutL3ECKuXMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w
YjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzBiMmU2NGRhLTBjZjEtNGJhZi1i
ZTk0LWMyMTZiMmI4MWQxYi8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJi
ODFkMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwTwYIKwYBBQUH
AQcBAf8EQDA+MDwEAgABMDYDBAFD2f4DBAFKzfADBAOOTzADBAOdeMgDBAWhc+AD
BASo65ADBAGt0egDBALHc7ADBAHRLgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
fV8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEATyA4I2ae8Oynm9x0NJm22WsJmbKaXlhNwi05x7V9EPKFEwcP
YWlzSN8cGZKSw2EO5W4NqYAAEEH0VqzWNMxK3K32znk1+Qi77Lsx9JQ0Ay/2pj50
x8VmUrJo0AB7zmEid6BrBIrjATB8taKDmhuTNZeaT0QB29woJeSQEi5NiyjW+A5O
ofXsVhZExk/DDjVADGbjTcA8wb1eyO17bGy6DDmgUE+L2pfRiOyKC6n1CZW1z7p1
5MYsy5UhdyGX7NtEQip5+/rljT2WANhmmaqkgirlRoCf3xJKjIHsQxNm2p/WYlFK
GPLgQLbxhAWK4EXivhuoKjwwDjxqLHIWybN3RA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:53:03 2026 by rpki-client