Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
File:                     abf1f0ec-0f56-4356-9ce5-9c637405f386.cer (raw, json)
Hash identifier:          j0NdoRrJpuX2cnj1W7OrvnfwhuHNkaUtMbS9TfMXdeo=
Subject key identifier:   97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584A984F529AAB70FE4A05207000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Jul 2025 19:03:27 +0000
Certificate not after:    Sun 06 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 22423
                          AS: 54777
                          AS: 64254
                          AS: 396338
                          AS: 396363
                          IP: 23.154.0.0 -- 23.154.2.255
                          IP: 24.231.96.0/20
                          IP: 45.42.72.0/21
                          IP: 45.58.96.0/20
                          IP: 65.23.128.0 -- 65.23.151.255
                          IP: 65.38.64.0/19
                          IP: 66.97.64.0/19
                          IP: 69.9.64.0/18
                          IP: 104.159.0.0/17
                          IP: 104.192.208.0/21
                          IP: 104.244.64.0/22
                          IP: 108.175.128.0/20
                          IP: 138.229.16.0/20
                          IP: 142.90.192.0/18
                          IP: 144.208.96.0/21
                          IP: 144.208.112.0/22
                          IP: 160.20.232.0/22
                          IP: 162.222.80.0/22
                          IP: 162.223.116.0/22
                          IP: 162.246.52.0/22
                          IP: 166.48.0.0/16
                          IP: 170.100.160.0/19
                          IP: 170.100.208.0/21
                          IP: 180.181.160.0/19
                          IP: 192.83.128.0/20
                          IP: 192.214.128.0/19
                          IP: 192.214.224.0/19
                          IP: 198.72.48.0/20
                          IP: 199.166.219.0/24
                          IP: 199.189.76.0/22
                          IP: 199.189.164.0/23
                          IP: 199.202.146.0/24
                          IP: 199.202.200.0/24
                          IP: 199.202.204.0/24
                          IP: 199.241.128.0/21
                          IP: 205.233.150.0/24
                          IP: 205.236.43.0/24
                          IP: 205.236.80.0/24
                          IP: 205.236.89.0/24
                          IP: 205.236.104.0/22
                          IP: 205.236.120.0/22
                          IP: 205.236.226.0/24
                          IP: 206.180.240.0/20
                          IP: 209.182.228.0/22
                          IP: 2604:a8c0::/32
                          IP: 2607:9500::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:4f:52:9a:ab:70:fe:4a:05:20:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 21 19:03:27 2025 GMT
            Not After : Dec  6 01:45:27 2026 GMT
        Subject: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:81:5d:70:20:8a:67:fa:f6:aa:65:d1:94:
                    59:91:b8:8d:a1:7f:f8:38:ea:b9:0e:4c:b4:7a:58:
                    cd:d7:b8:8b:06:15:a2:03:63:fb:55:bd:f3:42:e2:
                    ed:e3:3d:79:b2:a4:69:8f:d5:a2:45:31:62:7c:26:
                    c8:b8:28:07:97:eb:bf:c9:ab:64:d3:ed:a7:6f:89:
                    22:53:5b:de:02:67:71:85:f3:9c:43:f4:df:55:8f:
                    2d:82:44:42:af:b0:4a:b9:d5:74:36:53:39:37:74:
                    5b:06:01:6d:ee:2e:8e:6b:9f:a6:ea:e9:d0:e7:2d:
                    7b:f4:23:31:06:6b:c2:4e:98:6a:ac:64:55:f5:9c:
                    4e:d4:13:a3:45:47:2e:3d:4e:f3:22:a0:0e:4b:40:
                    6e:21:f2:c4:5f:1f:e7:28:c9:1f:cb:07:e9:b7:1d:
                    c8:6c:aa:f7:cc:1e:a5:ad:f1:ab:9b:bb:2a:f7:f9:
                    df:23:5d:98:b0:6a:c5:09:35:38:66:8f:8d:42:55:
                    c0:97:4d:b6:96:8a:2b:ac:0a:5e:a7:56:03:d3:0d:
                    10:da:b1:22:a8:ed:4c:7b:5d:1f:75:a7:aa:72:f3:
                    2b:64:d2:c3:32:7f:b8:f5:61:78:2b:9a:00:44:3b:
                    bf:c7:8e:90:c2:71:a3:77:b4:e9:78:39:5c:a4:fa:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.0.0-23.154.2.255
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.23.128.0-65.23.151.255
                  65.38.64.0/19
                  66.97.64.0/19
                  69.9.64.0/18
                  104.159.0.0/17
                  104.192.208.0/21
                  104.244.64.0/22
                  108.175.128.0/20
                  138.229.16.0/20
                  142.90.192.0/18
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  162.222.80.0/22
                  162.223.116.0/22
                  162.246.52.0/22
                  166.48.0.0/16
                  170.100.160.0/19
                  170.100.208.0/21
                  180.181.160.0/19
                  192.83.128.0/20
                  192.214.128.0/19
                  192.214.224.0/19
                  198.72.48.0/20
                  199.166.219.0/24
                  199.189.76.0/22
                  199.189.164.0/23
                  199.202.146.0/24
                  199.202.200.0/24
                  199.202.204.0/24
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.104.0/22
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/22
                IPv6:
                  2604:a8c0::/32
                  2607:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22423
                  54777
                  64254
                  396338
                  396363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:87:12:ef:c2:94:bb:35:c2:a7:8d:ac:d5:34:36:f9:4d:97:
         fb:b2:4b:64:15:2b:c9:86:ac:71:89:a3:cc:19:e2:15:5e:69:
         6c:74:83:b4:3b:05:f6:ad:a0:b8:31:26:f1:bc:9e:dc:5b:6b:
         f9:9f:f8:a4:61:87:8f:37:64:28:0f:50:bd:9c:b8:c2:49:f7:
         f0:62:db:79:5e:30:0c:49:48:01:f4:f0:f9:64:ab:1d:f5:64:
         4f:9c:08:a1:c6:69:89:4e:1c:3a:fc:f7:c9:fa:c5:fa:18:b4:
         3d:bd:2c:cd:30:12:ef:f6:e8:54:31:03:52:f4:4a:90:b3:11:
         e4:77:86:99:83:3f:49:c9:50:12:3a:0e:9e:d6:22:d2:ff:7a:
         87:f5:15:50:bb:7f:4e:2f:ac:c7:ab:b4:5b:72:df:46:9e:19:
         b1:4e:cd:3c:3c:50:f3:51:70:5f:11:ac:3f:0b:3e:ee:29:5a:
         a9:a9:7f:e4:8b:65:6f:ef:b1:52:e7:81:52:2a:dd:bb:b9:6d:
         29:a5:ea:45:55:38:9d:eb:08:47:31:2a:08:ce:6e:ad:19:6d:
         f0:f1:5c:f4:64:9b:58:60:69:e0:1d:de:11:af:53:9c:e2:50:
         07:c7:8e:89:bf:48:c4:25:e5:a9:72:eb:e8:e4:62:48:83:33:
         3f:6a:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:46 2025 by rpki-client