Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
File:                     3b9b8028-72e5-488e-971c-54bd1e51f064.cer (raw, json)
Hash identifier:          M1KMDP4J70nWWdiVRqa0o3D9f3OMsNoTvU0WwAT0+IY=
Subject key identifier:   5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A73740461515CD78B91C850C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Jul 2025 14:12:29 +0000
Certificate not after:    Wed 29 Sep 2027 19:14:47 +0000
Subordinate resources:    IP: 65.98.128.0 -- 65.98.147.255
                          IP: 65.98.150.0/24
                          IP: 65.98.152.0 -- 65.98.154.255
                          IP: 65.98.156.0 -- 65.98.176.255
                          IP: 65.98.180.0 -- 65.98.231.255
                          IP: 65.98.241.0 -- 65.98.252.255
                          IP: 66.81.2.0 -- 66.81.6.255
                          IP: 66.81.9.0 -- 66.81.13.255
                          IP: 66.81.15.0 -- 66.81.27.255
                          IP: 66.81.30.0/23
                          IP: 66.81.38.0/23
                          IP: 66.81.48.0/23
                          IP: 66.81.56.0 -- 66.81.80.255
                          IP: 66.81.82.0/23
                          IP: 66.81.88.0 -- 66.81.94.255
                          IP: 66.81.96.0 -- 66.81.102.255
                          IP: 66.81.106.0 -- 66.81.111.255
                          IP: 66.81.124.0 -- 66.81.131.255
                          IP: 66.81.133.0 -- 66.81.135.255
                          IP: 66.81.152.0 -- 66.81.158.255
                          IP: 66.81.208.0/22
                          IP: 66.81.224.0 -- 66.81.226.255
                          IP: 66.81.228.0 -- 66.81.239.255
                          IP: 66.249.160.0 -- 66.249.171.255
                          IP: 66.249.176.0/20
                          IP: 67.203.65.0 -- 67.203.91.255
                          IP: 67.203.93.0 -- 67.203.96.255
                          IP: 67.203.98.0 -- 67.203.100.255
                          IP: 67.203.103.0 -- 67.203.108.255
                          IP: 67.203.110.0 -- 67.203.120.255
                          IP: 67.203.122.0/24
                          IP: 67.203.124.0 -- 67.203.126.255
                          IP: 69.19.128.0 -- 69.19.134.255
                          IP: 69.19.144.0 -- 69.19.160.255
                          IP: 69.19.186.0 -- 69.19.189.255
                          IP: 69.19.191.0 -- 69.19.216.255
                          IP: 69.19.224.0 -- 69.19.228.255
                          IP: 69.19.230.0 -- 69.19.234.255
                          IP: 69.19.236.0/23
                          IP: 69.19.241.0 -- 69.19.245.255
                          IP: 69.19.249.0 -- 69.19.251.255
                          IP: 69.19.253.0/24
                          IP: 69.85.128.0/21
                          IP: 69.85.137.0 -- 69.85.142.255
                          IP: 69.85.152.0/23
                          IP: 69.85.158.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:74:04:61:51:5c:d7:8b:91:c8:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Jul  8 14:12:29 2025 GMT
            Not After : Sep 29 19:14:47 2027 GMT
        Subject: CN=3b9b8028-72e5-488e-971c-54bd1e51f064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:fe:85:13:49:8a:b7:2b:cf:e6:7a:7e:76:
                    79:07:2d:e4:f2:63:58:4b:e6:20:6c:a5:99:54:3b:
                    e0:f1:a9:9c:48:b4:9a:85:4e:88:19:ec:95:ea:b8:
                    db:be:03:35:5d:22:9f:2b:1d:6b:d2:42:ed:be:b9:
                    0f:bf:e8:0f:fc:ec:07:42:ae:cf:e9:fb:74:a0:01:
                    0e:4b:1d:de:ad:66:45:b4:0f:06:a3:34:a3:74:a0:
                    b0:39:36:56:dc:ca:93:07:c3:cf:08:2b:6f:24:54:
                    4c:f6:6a:5b:51:40:a0:0a:82:2f:0b:62:99:81:a0:
                    9f:7f:5b:eb:60:3b:bf:83:ad:44:31:9e:ad:d5:67:
                    72:0e:e7:1e:19:82:eb:23:2e:bf:25:48:8e:64:c9:
                    e1:6a:fa:f1:07:5e:24:90:37:cc:ce:42:51:0d:f9:
                    d3:6e:55:34:9d:fb:71:69:0f:a3:38:aa:39:26:63:
                    1b:64:d6:40:15:8f:a9:87:ef:2c:61:8d:8f:11:76:
                    10:2a:7a:78:77:a2:0c:90:4f:2c:bd:58:e8:2d:74:
                    7c:d9:29:4f:07:a2:5e:01:23:46:d2:24:68:c6:8d:
                    48:22:1e:2a:cd:0b:22:b0:50:f0:67:f5:3e:45:3c:
                    65:13:5d:5d:c3:c4:4f:9e:d0:fd:8f:ee:07:62:a6:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.98.128.0-65.98.147.255
                  65.98.150.0/24
                  65.98.152.0-65.98.154.255
                  65.98.156.0-65.98.176.255
                  65.98.180.0-65.98.231.255
                  65.98.241.0-65.98.252.255
                  66.81.2.0-66.81.6.255
                  66.81.9.0-66.81.13.255
                  66.81.15.0-66.81.27.255
                  66.81.30.0/23
                  66.81.38.0/23
                  66.81.48.0/23
                  66.81.56.0-66.81.80.255
                  66.81.82.0/23
                  66.81.88.0-66.81.94.255
                  66.81.96.0-66.81.102.255
                  66.81.106.0-66.81.111.255
                  66.81.124.0-66.81.131.255
                  66.81.133.0-66.81.135.255
                  66.81.152.0-66.81.158.255
                  66.81.208.0/22
                  66.81.224.0-66.81.226.255
                  66.81.228.0-66.81.239.255
                  66.249.160.0-66.249.171.255
                  66.249.176.0/20
                  67.203.65.0-67.203.91.255
                  67.203.93.0-67.203.96.255
                  67.203.98.0-67.203.100.255
                  67.203.103.0-67.203.108.255
                  67.203.110.0-67.203.120.255
                  67.203.122.0/24
                  67.203.124.0-67.203.126.255
                  69.19.128.0-69.19.134.255
                  69.19.144.0-69.19.160.255
                  69.19.186.0-69.19.189.255
                  69.19.191.0-69.19.216.255
                  69.19.224.0-69.19.228.255
                  69.19.230.0-69.19.234.255
                  69.19.236.0/23
                  69.19.241.0-69.19.245.255
                  69.19.249.0-69.19.251.255
                  69.19.253.0/24
                  69.85.128.0/21
                  69.85.137.0-69.85.142.255
                  69.85.152.0/23
                  69.85.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:03:0d:3e:a5:f9:d8:cd:3d:64:19:7a:bc:1f:17:b7:27:
         76:af:e8:ed:01:cc:df:31:c1:38:4c:88:c5:22:6c:9f:11:77:
         0e:f9:e3:bb:ea:fe:e1:ac:b6:25:5f:cb:34:de:a8:e9:1f:2d:
         18:52:fa:af:24:dc:6a:b2:02:9e:cf:f1:83:ee:79:40:57:5a:
         97:c9:4b:18:76:f3:e5:fd:bc:59:41:38:de:ec:28:1a:0d:5b:
         97:6a:b9:7b:50:a7:b1:53:0f:de:96:83:45:1b:a5:6e:56:69:
         e8:bf:a6:c9:3b:3f:6a:78:57:4d:81:44:de:6c:1e:2b:91:79:
         79:0c:39:68:b5:a1:e5:db:1d:e4:07:2d:cb:e4:a7:b1:72:87:
         19:af:b5:ca:07:e7:49:53:65:cc:1a:7a:9f:7b:25:4b:a9:44:
         f6:7b:6f:69:6e:cc:ba:21:32:79:da:b2:28:1b:73:29:f1:11:
         03:01:ce:09:8f:2b:06:e7:2f:c9:68:3a:e0:a0:65:bb:3b:9e:
         9f:a5:a5:c2:a8:79:8d:ab:fb:c4:50:0e:df:d1:ac:42:e6:f7:
         40:90:5d:3c:0b:0b:11:7f:ae:06:50:db:41:37:32:93:ca:4d:
         21:2a:be:a2:2d:0b:78:3b:ef:2b:92:86:c4:fa:bd:34:e6:25:
         6b:56:ae:59
-----BEGIN CERTIFICATE-----
MIIJDTCCB/WgAwIBAgIUAQ0Mn0MoWEpzdARhUVzXi5HIUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDcwODE0MTIyOVoXDTI3MDkyOTE5MTQ0N1owLzEtMCsGA1UEAxMk
M2I5YjgwMjgtNzJlNS00ODhlLTk3MWMtNTRiZDFlNTFmMDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3n+hRNJircrz+Z6fnZ5By3k8mNYS+YgbKWZ
VDvg8amcSLSahU6IGeyV6rjbvgM1XSKfKx1r0kLtvrkPv+gP/OwHQq7P6ft0oAEO
Sx3erWZFtA8GozSjdKCwOTZW3MqTB8PPCCtvJFRM9mpbUUCgCoIvC2KZgaCff1vr
YDu/g61EMZ6t1WdyDuceGYLrIy6/JUiOZMnhavrxB14kkDfMzkJRDfnTblU0nftx
aQ+jOKo5JmMbZNZAFY+ph+8sYY2PEXYQKnp4d6IMkE8svVjoLXR82SlPB6JeASNG
0iRoxo1IIh4qzQsisFDwZ/U+RTxlE11dw8RPntD9j+4HYqY0owIDAQABo4IGHzCC
BhswHQYDVR0OBBYEFF+LYTCSZqTqgvnNWA8nkFVyAaq9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z
YjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1MWYwNjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzNiOWI4MDI4LTcyZTUtNDg4ZS05
NzFjLTU0YmQxZTUxZjA2NC8zYjliODAyOC03MmU1LTQ4OGUtOTcxYy01NGJkMWU1
MWYwNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwggI9BggrBgEF
BQcBBwEB/wSCAiwwggIoMIICJAQCAAEwggIcMAwDBAdBYoADBAJBYpADBABBYpYw
DAMEA0FimAMEAEFimjAMAwQCQWKcAwQAQWKwMAwDBAJBYrQDBANBYuAwDAMEAEFi
8QMEAEFi/DAMAwQBQlECAwQAQlEGMAwDBABCUQkDBAFCUQwwDAMEAEJRDwMEAkJR
GAMEAUJRHgMEAUJRJgMEAUJRMDAMAwQDQlE4AwQAQlFQAwQBQlFSMAwDBANCUVgD
BABCUV4wDAMEBUJRYAMEAEJRZjAMAwQBQlFqAwQEQlFgMAwDBAJCUXwDBAJCUYAw
DAMEAEJRhQMEA0JRgDAMAwQDQlGYAwQAQlGeAwQCQlHQMAwDBAVCUeADBABCUeIw
DAMEAkJR5AMEBEJR4DAMAwQFQvmgAwQCQvmoAwQEQvmwMAwDBABDy0EDBAJDy1gw
DAMEAEPLXQMEAEPLYDAMAwQBQ8tiAwQAQ8tkMAwDBABDy2cDBABDy2wwDAMEAUPL
bgMEAEPLeAMEAEPLejAMAwQCQ8t8AwQAQ8t+MAwDBAdFE4ADBABFE4YwDAMEBEUT
kAMEAEUToDAMAwQBRRO6AwQBRRO8MAwDBABFE78DBABFE9gwDAMEBUUT4AMEAEUT
5DAMAwQBRRPmAwQARRPqAwQBRRPsMAwDBABFE/EDBAFFE/QwDAMEAEUT+QMEAkUT
+AMEAEUT/QMEA0VVgDAMAwQARVWJAwQARVWOAwQBRVWYAwQBRVWeMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AF5UAw0+pfnYzT1kGXq8Hxe3J3av6O0BzN8xwThMiMUibJ8Rdw7547vq/uGstiVf
yzTeqOkfLRhS+q8k3GqyAp7P8YPueUBXWpfJSxh28+X9vFlBON7sKBoNW5dquXtQ
p7FTD96Wg0UbpW5Waei/psk7P2p4V02BRN5sHiuReXkMOWi1oeXbHeQHLcvkp7Fy
hxmvtcoH50lTZcwaep97JUupRPZ7b2luzLohMnnasigbcynxEQMBzgmPKwbnL8lo
OuCgZbs7np+lpcKoeY2r+8RQDt/RrELm90CQXTwLCxF/rgZQ20E3MpPKTSEqvqIt
C3g77yuShsT6vTTmJWtWrlk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:21:00 2025 by rpki-client