Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904.cer
File:                     4cf61af5-37b2-4fa5-a702-19a29bc38904.cer (raw, json)
Hash identifier:          gtA22vcCVRCMzTSrPvKIu1tMiHcHB6MkqKjzZxZoBvQ=
Subject key identifier:   C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584CCE6A4FF5392F4A7DCAAEE750
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Feb 2026 13:45:21 +0000
Certificate not after:    Sun 14 May 2028 12:45:21 +0000
Subordinate resources:    AS: 6188
                          AS: 11555
                          AS: 19066
                          AS: 21679
                          AS: 22558
                          AS: 32244
                          AS: 36444
                          AS: 40819
                          AS: 53824
                          IP: 50.28.0.0/17
                          IP: 50.56.148.0/22
                          IP: 50.57.240.0/20
                          IP: 64.91.224.0/19
                          IP: 67.20.48.0/20
                          IP: 67.43.0.0/20
                          IP: 67.225.128.0/17
                          IP: 67.227.128.0/17
                          IP: 68.66.211.0/24
                          IP: 69.16.192.0/18
                          IP: 69.160.48.0/20
                          IP: 69.167.128.0/18
                          IP: 72.44.80.0/20
                          IP: 72.52.128.0/17
                          IP: 96.30.0.0/18
                          IP: 98.129.229.0/24
                          IP: 104.207.224.0/19
                          IP: 159.135.0.0/18
                          IP: 162.212.134.0/24
                          IP: 162.252.104.0/22
                          IP: 173.199.128.0/18
                          IP: 173.249.144.0/20
                          IP: 184.106.55.0/24
                          IP: 192.64.52.0/22
                          IP: 192.126.88.0/22
                          IP: 192.138.16.0/21
                          IP: 192.190.220.0/22
                          IP: 192.240.160.0/19
                          IP: 199.48.252.0/22
                          IP: 199.189.224.0/22
                          IP: 199.195.118.0/24
                          IP: 199.201.88.0/22
                          IP: 205.174.24.0/22
                          IP: 206.198.224.0/21
                          IP: 207.32.176.0/20
                          IP: 207.246.240.0/20
                          IP: 208.69.120.0/21
                          IP: 208.75.148.0/22
                          IP: 208.79.232.0/21
                          IP: 208.86.152.0/21
                          IP: 208.86.248.0/21
                          IP: 209.59.128.0/18
                          IP: 209.87.144.0/20
                          IP: 209.124.89.0/24
                          IP: 209.126.16.0/20
                          IP: 209.188.80.0/20
                          IP: 2604:d700::/32
                          IP: 2607:f7c0::/32
                          IP: 2607:fad0::/32
                          IP: 2607:fd60::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:6a:4f:f5:39:2f:4a:7d:ca:ae:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb  9 13:45:21 2026 GMT
            Not After : May 14 12:45:21 2028 GMT
        Subject: CN=4cf61af5-37b2-4fa5-a702-19a29bc38904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:7b:27:d0:91:92:c9:dc:c0:3b:4c:45:c4:
                    6a:71:d5:b0:c6:26:d0:b2:b4:93:62:e9:d5:52:02:
                    9e:f0:89:ba:4d:25:a6:fb:a9:60:43:f7:71:aa:57:
                    a8:c8:92:d0:79:ba:8b:a5:31:c4:a5:89:d8:94:0b:
                    aa:04:b5:e2:93:c6:91:d7:38:e6:cc:82:9e:6b:b1:
                    64:c0:ee:9a:f4:83:c9:df:5f:14:81:1c:7b:4a:7a:
                    2c:a9:5a:22:29:7d:a4:57:c8:35:9e:b0:3e:5d:ad:
                    c9:09:c6:2a:7b:0c:bf:ec:2a:be:e0:30:13:11:b2:
                    df:39:7b:0d:ce:24:86:0c:58:1e:bd:bc:06:5c:78:
                    bb:51:10:84:12:fa:56:0d:3c:0f:ad:82:e5:b8:71:
                    9e:7b:d3:9d:b7:4a:67:07:4d:22:e1:ec:4f:96:6a:
                    29:e3:30:9c:b7:77:26:64:0a:0e:5d:e2:3d:e2:1a:
                    be:f7:bd:5e:d2:3d:78:4b:8a:c4:c6:fc:38:0e:37:
                    60:80:1b:45:28:59:d4:a6:b8:c6:eb:1f:a2:8d:c4:
                    b9:9c:52:68:a3:63:50:b3:5f:14:3a:a5:f5:38:08:
                    c1:a1:49:85:d7:2a:e7:12:15:4e:3b:5a:25:a0:c4:
                    f0:21:ca:92:ee:1f:12:f9:b9:3b:ab:30:78:e9:32:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.28.0.0/17
                  50.56.148.0/22
                  50.57.240.0/20
                  64.91.224.0/19
                  67.20.48.0/20
                  67.43.0.0/20
                  67.225.128.0/17
                  67.227.128.0/17
                  68.66.211.0/24
                  69.16.192.0/18
                  69.160.48.0/20
                  69.167.128.0/18
                  72.44.80.0/20
                  72.52.128.0/17
                  96.30.0.0/18
                  98.129.229.0/24
                  104.207.224.0/19
                  159.135.0.0/18
                  162.212.134.0/24
                  162.252.104.0/22
                  173.199.128.0/18
                  173.249.144.0/20
                  184.106.55.0/24
                  192.64.52.0/22
                  192.126.88.0/22
                  192.138.16.0/21
                  192.190.220.0/22
                  192.240.160.0/19
                  199.48.252.0/22
                  199.189.224.0/22
                  199.195.118.0/24
                  199.201.88.0/22
                  205.174.24.0/22
                  206.198.224.0/21
                  207.32.176.0/20
                  207.246.240.0/20
                  208.69.120.0/21
                  208.75.148.0/22
                  208.79.232.0/21
                  208.86.152.0/21
                  208.86.248.0/21
                  209.59.128.0/18
                  209.87.144.0/20
                  209.124.89.0/24
                  209.126.16.0/20
                  209.188.80.0/20
                IPv6:
                  2604:d700::/32
                  2607:f7c0::/32
                  2607:fad0::/32
                  2607:fd60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6188
                  11555
                  19066
                  21679
                  22558
                  32244
                  36444
                  40819
                  53824

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:66:0d:6e:d2:db:f4:91:ee:6a:a1:8f:c8:14:8f:f7:a0:
         0b:a1:0c:15:eb:38:ce:4e:02:23:6e:cf:a7:c0:a4:cd:90:a5:
         05:3d:06:fe:09:f5:90:1d:c9:ed:0d:60:84:99:11:b7:d6:ae:
         bc:7c:13:ca:e3:8a:a6:91:30:dd:4d:e2:1c:26:41:8c:43:5e:
         94:c9:ac:e0:ee:e7:4b:3e:33:b5:c0:93:e5:26:0a:af:67:d8:
         e6:a9:e8:7d:e9:da:2e:0e:37:fc:2a:88:d8:ba:2c:34:83:f7:
         c7:9d:ba:91:b5:e4:09:b7:77:f6:2f:ff:18:89:42:19:75:28:
         40:78:10:d1:a1:24:d2:c1:17:b1:eb:f2:37:7b:43:5e:01:23:
         36:60:44:aa:4e:8f:e9:cd:d0:e2:11:64:6b:d7:56:94:23:ec:
         d3:ed:c3:f7:0f:de:45:93:e4:45:47:19:12:5d:a1:0b:60:51:
         de:6f:eb:97:c4:41:04:ee:7a:da:7d:1a:d7:e1:32:ba:80:18:
         e1:0c:35:74:e3:52:46:7b:89:bb:4d:dc:fa:46:13:71:57:d3:
         95:c8:26:13:0d:b3:c6:9b:07:52:1f:24:9e:92:85:66:47:5f:
         58:24:6e:b3:91:91:1f:32:13:ea:f6:68:26:90:3e:27:4a:35:
         81:39:a1:7a
-----BEGIN CERTIFICATE-----
MIIIZzCCB0+gAwIBAgIUAQ0Mn0MoWEzOak/1OS9Kfcqu51AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MDIwOTEzNDUyMVoXDTI4MDUxNDEyNDUyMVowLzEtMCsGA1UEAxMk
NGNmNjFhZjUtMzdiMi00ZmE1LWE3MDItMTlhMjliYzM4OTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8l7J9CRksncwDtMRcRqcdWwxibQsrSTYunV
UgKe8Im6TSWm+6lgQ/dxqleoyJLQebqLpTHEpYnYlAuqBLXik8aR1zjmzIKea7Fk
wO6a9IPJ318UgRx7SnosqVoiKX2kV8g1nrA+Xa3JCcYqewy/7Cq+4DATEbLfOXsN
ziSGDFgevbwGXHi7URCEEvpWDTwPrYLluHGee9Odt0pnB00i4exPlmop4zCct3cm
ZAoOXeI94hq+971e0j14S4rExvw4DjdggBtFKFnUprjG6x+ijcS5nFJoo2NQs18U
OqX1OAjBoUmF1yrnEhVOO1oloMTwIcqS7h8S+bk7qzB46TJUWQIDAQABo4IFeTCC
BXUwHQYDVR0OBBYEFMKT21o8nEXOKZzJCCzdYDQBTFggMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80
Y2Y2MWFmNS0zN2IyLTRmYTUtYTcwMi0xOWEyOWJjMzg5MDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzRjZjYxYWY1LTM3YjItNGZhNS1h
NzAyLTE5YTI5YmMzODkwNC80Y2Y2MWFmNS0zN2IyLTRmYTUtYTcwMi0xOWEyOWJj
Mzg5MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwggFZBggrBgEF
BQcBBwEB/wSCAUgwggFEMIIBHAQCAAEwggEUAwQHMhwAAwQCMjiUAwQEMjnwAwQF
QFvgAwQEQxQwAwQEQysAAwQHQ+GAAwQHQ+OAAwQARELTAwQGRRDAAwQERaAwAwQG
RaeAAwQESCxQAwQHSDSAAwQGYB4AAwQAYoHlAwQFaM/gAwQGn4cAAwQAotSGAwQC
ovxoAwQGrceAAwQErfmQAwQAuGo3AwQCwEA0AwQCwH5YAwQDwIoQAwQCwL7cAwQF
wPCgAwQCxzD8AwQCx73gAwQAx8N2AwQCx8lYAwQCza4YAwQDzsbgAwQEzyCwAwQE
z/bwAwQD0EV4AwQC0EuUAwQD0E/oAwQD0FaYAwQD0Fb4AwQG0TuAAwQE0VeQAwQA
0XxZAwQE0X4QAwQE0bxQMCIEAgACMBwDBQAmBNcAAwUAJgf3wAMFACYH+tADBQAm
B/1gMDwGCCsGAQUFBwEIAQH/BC0wK6ApMCcCAhgsAgItIwICSnoCAlSvAgJYHgIC
ffQCAwCOXAIDAJ9zAgMA0kAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjaNmDW7S2/SR7mqhj8gUj/egC6EM
Fes4zk4CI27Pp8CkzZClBT0G/gn1kB3J7Q1ghJkRt9auvHwTyuOKppEw3U3iHCZB
jENelMms4O7nSz4ztcCT5SYKr2fY5qnofenaLg43/CqI2LosNIP3x526kbXkCbd3
9i//GIlCGXUoQHgQ0aEk0sEXsevyN3tDXgEjNmBEqk6P6c3Q4hFka9dWlCPs0+3D
9w/eRZPkRUcZEl2hC2BR3m/rl8RBBO562n0a1+EyuoAY4Qw1dONSRnuJu03c+kYT
cVfTlcgmEw2zxpsHUh8knpKFZkdfWCRus5GRHzIT6vZoJpA+J0o1gTmheg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:35 2026 by rpki-client