Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
File:                     4a6ba250-5086-4d58-8336-494a05894bf9.cer (raw, json)
Hash identifier:          u4F1wXgPJBbHCxJQSH8c1q8P4DB7MX+XDvndbPT8N5g=
Subject key identifier:   CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584DDFE38C13B89ED0336A33A970
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 May 2026 12:45:18 +0000
Certificate not after:    Sun 20 Aug 2028 12:45:18 +0000
Subordinate resources:    AS: 62809
                          IP: 23.128.144.0/22
                          IP: 104.152.136.0/22
                          IP: 104.244.20.0/22
                          IP: 130.51.4.0/22
                          IP: 162.222.28.0/22
                          IP: 162.251.124.0/22
                          IP: 199.184.14.0/23
                          IP: 199.202.232.0/23
                          IP: 2605:2a40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:e3:8c:13:b8:9e:d0:33:6a:33:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 18 12:45:18 2026 GMT
            Not After : Aug 20 12:45:18 2028 GMT
        Subject: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:38:a2:e3:99:ef:40:d1:57:22:93:16:72:
                    ef:f4:4c:f0:00:55:25:66:db:3c:7d:74:d4:18:b5:
                    f5:0b:3d:45:c6:b2:5c:4e:b5:ec:a7:ef:f2:cf:9f:
                    9d:88:9a:a8:f8:ab:36:bc:8f:0f:66:dd:fa:d0:cb:
                    b5:f3:f7:20:5b:5b:73:c4:5c:46:72:d1:1e:fa:ff:
                    9e:86:9c:b2:e1:36:47:49:3f:db:22:7a:c8:34:10:
                    2b:f1:d8:3b:65:ed:a8:5f:1a:a7:ca:d2:8c:4e:d4:
                    64:05:58:f9:96:e7:13:03:e0:4a:8d:25:ea:63:7d:
                    52:3a:3c:7b:f6:9d:4c:ae:91:6e:c8:ff:e5:6d:c0:
                    9b:ef:1f:e5:fa:46:c1:b6:4d:3d:d3:4d:32:0c:bc:
                    be:37:e3:5e:e4:6a:e6:75:be:f3:ce:a8:f8:0a:ff:
                    fe:44:7f:6f:e6:f5:c4:8c:9c:d6:91:e3:cd:c6:44:
                    a0:a8:49:df:ed:ae:72:d6:17:46:f0:9b:a6:b1:e0:
                    c1:95:57:75:f4:a8:86:29:39:84:0c:d5:ac:db:35:
                    d0:fc:1b:0a:1b:ed:ee:10:67:98:b3:6f:11:ad:df:
                    5d:3d:4e:5b:52:df:86:af:68:f7:e0:7d:a9:72:b8:
                    a9:da:95:31:ef:9a:7b:b4:e9:45:7f:6a:80:58:8f:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:69:8c:bb:cf:69:f8:7c:0e:de:46:cc:d3:c1:26:8e:d0:2e:
         5f:b4:4c:02:9a:98:9a:b9:55:4c:c6:48:fe:91:9a:9c:54:78:
         20:f1:b5:8b:f2:27:19:14:be:fe:cb:4e:3a:52:4a:48:29:58:
         ae:cd:05:4a:c4:b3:63:b0:b8:1d:8d:08:e7:5d:47:59:2f:e3:
         e5:d1:5d:26:60:b1:e4:96:bc:96:96:b1:a2:6d:aa:b3:1a:c5:
         44:dd:c3:93:be:82:64:0d:52:74:0a:58:a6:9d:d3:47:84:31:
         35:0f:1a:06:b4:77:2e:8b:4d:50:86:eb:9f:5c:99:dd:87:f4:
         b4:73:1d:04:9c:ac:66:1e:c5:fa:8f:d8:f5:58:56:ca:f8:ce:
         22:84:a7:3e:3d:bb:7b:83:5a:c8:81:89:94:13:fd:db:88:f6:
         b4:aa:3d:9a:07:d9:5c:15:2d:21:37:19:09:fc:a7:ab:29:25:
         50:7f:a4:ef:df:d3:10:f8:d1:a6:fa:34:83:89:07:43:50:58:
         95:93:88:ff:a8:64:4b:40:9e:e9:4c:f6:55:6b:a1:45:50:67:
         ff:46:c7:0c:95:97:47:ba:6b:fe:2a:7e:09:54:8e:5a:ed:58:
         c2:f3:76:e7:98:ed:2e:27:dd:87:04:8d:6d:02:c0:99:9d:0a:
         57:62:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:54 2026 by rpki-client