Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
File:                     92db335e-640b-4ae2-9650-c420af83089d.cer (raw, json)
Hash identifier:          Un+Ov9eI7deUl6NYX4TZZ6JEq3ytE9d0co8J8JDFn0k=
Subject key identifier:   9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584F055BB0E0918FD5B71DF0AFCC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 31 Aug 2026 15:39:14 +0000
Certificate not after:    Sun 19 Dec 2027 14:46:57 +0000
Subordinate resources:    AS: 6576
                          AS: 11062
                          AS: 19625
                          AS: 25610
                          AS: 40702
                          AS: 53608
                          AS: 53610
                          IP: 24.49.151.0/24
                          IP: 64.19.0.0/18
                          IP: 64.20.131.0/24
                          IP: 64.83.240.0/20
                          IP: 64.203.233.0/24
                          IP: 66.111.66.0/24
                          IP: 66.111.86.0/24
                          IP: 66.186.96.0/20
                          IP: 67.20.137.0/24
                          IP: 67.216.152.0/24
                          IP: 72.34.0.0/20
                          IP: 104.219.32.0/21
                          IP: 108.59.176.0/20
                          IP: 134.22.160.0 -- 134.22.179.255
                          IP: 134.22.192.0/20
                          IP: 134.22.224.0/20
                          IP: 144.86.156.0/22
                          IP: 157.185.64.0/18
                          IP: 162.218.148.0/22
                          IP: 162.251.96.0/21
                          IP: 162.255.8.0/21
                          IP: 192.26.140.0/22
                          IP: 192.35.200.0/22
                          IP: 192.102.0.0/24
                          IP: 199.30.60.0/22
                          IP: 199.43.198.0/24
                          IP: 199.116.80.0/22
                          IP: 207.179.192.0/18
                          IP: 209.113.128.0/17
                          IP: 209.177.192.0/18
                          IP: 216.107.160.0/20
                          IP: 2604:58c0::/32
                          IP: 2607:1380::/32
                          IP: 2607:5380::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:5b:b0:e0:91:8f:d5:b7:1d:f0:af:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Aug 31 15:39:14 2026 GMT
            Not After : Dec 19 14:46:57 2027 GMT
        Subject: CN=92db335e-640b-4ae2-9650-c420af83089d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:72:38:d1:3d:7f:04:46:78:3f:a4:dd:f8:
                    f6:90:9a:47:4e:e2:06:26:db:81:5e:ba:8f:48:b3:
                    1f:b3:85:43:4a:b7:67:ae:8c:ae:71:fe:58:ac:9e:
                    5f:4d:bd:25:f3:ba:2f:04:39:26:b1:d7:82:08:3b:
                    d7:8e:b8:f0:f6:b7:74:b0:2b:4f:f7:7a:ba:d3:6d:
                    19:ee:0d:d2:38:f0:7c:94:a4:57:f7:97:2d:4b:b6:
                    e0:dc:0c:f6:42:94:cb:db:66:1b:f9:62:d9:7c:37:
                    44:81:b3:20:4a:cb:9d:8b:37:cb:41:63:7e:95:26:
                    b5:d5:d2:d6:0d:90:0e:78:82:1c:50:5d:d9:d8:21:
                    39:78:db:55:c5:4e:54:66:85:09:fa:a1:66:56:f1:
                    84:1b:d2:c1:04:13:f9:5d:c3:dc:5f:3f:10:e7:84:
                    d3:af:41:9d:11:b0:7f:c7:57:2b:75:32:ef:29:6b:
                    65:48:42:e0:0e:0a:2c:23:cd:7a:a5:c1:0d:f6:81:
                    33:de:ab:ef:a1:3d:2d:9d:53:c3:6c:cc:18:e7:ad:
                    6c:93:14:a4:a7:f3:bc:98:77:57:a4:4b:f7:c3:b2:
                    bf:d2:b3:e9:cd:61:de:f4:e1:be:8a:17:b7:be:0f:
                    f2:42:98:69:04:c7:6d:e8:66:9b:dc:2c:18:71:41:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.151.0/24
                  64.19.0.0/18
                  64.20.131.0/24
                  64.83.240.0/20
                  64.203.233.0/24
                  66.111.66.0/24
                  66.111.86.0/24
                  66.186.96.0/20
                  67.20.137.0/24
                  67.216.152.0/24
                  72.34.0.0/20
                  104.219.32.0/21
                  108.59.176.0/20
                  134.22.160.0-134.22.179.255
                  134.22.192.0/20
                  134.22.224.0/20
                  144.86.156.0/22
                  157.185.64.0/18
                  162.218.148.0/22
                  162.251.96.0/21
                  162.255.8.0/21
                  192.26.140.0/22
                  192.35.200.0/22
                  192.102.0.0/24
                  199.30.60.0/22
                  199.43.198.0/24
                  199.116.80.0/22
                  207.179.192.0/18
                  209.113.128.0/17
                  209.177.192.0/18
                  216.107.160.0/20
                IPv6:
                  2604:58c0::/32
                  2607:1380::/32
                  2607:5380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6576
                  11062
                  19625
                  25610
                  40702
                  53608
                  53610

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:03:8e:c7:56:16:f3:f7:f4:e2:2b:28:dc:dc:0b:3a:87:
         47:fe:0d:3e:e6:c0:37:3c:56:ce:eb:c1:51:c6:7b:f1:9e:d9:
         83:f1:62:cf:90:6e:92:38:9e:6d:ed:32:27:f8:c1:d4:79:0b:
         b2:9e:8b:f2:05:a4:b6:e3:0c:25:55:b7:5b:57:ae:76:ce:65:
         38:00:58:44:e1:1e:a1:2c:7b:ae:c5:ed:4c:56:d9:0a:82:2b:
         58:5c:1c:89:41:7c:cf:47:ba:6e:1c:fa:08:2c:c8:d2:2d:89:
         6c:b1:ee:74:60:79:26:26:99:b3:d5:18:eb:d5:11:72:89:80:
         31:7f:95:0e:d0:62:8f:52:cb:80:6e:17:dc:1c:04:72:e1:27:
         49:b7:a3:df:a2:7d:9c:4f:f3:f5:f1:d1:63:ee:63:71:53:d0:
         2c:32:84:e9:7c:b6:b4:73:a0:3a:3a:8a:c7:d8:9f:c3:a8:48:
         1c:88:62:09:49:f6:09:ca:ac:fc:01:8c:9b:c0:4d:8c:31:d3:
         67:32:0f:8f:89:a6:68:dd:84:a4:cd:7b:7d:5d:e9:61:46:18:
         32:e9:4d:65:6f:a5:7d:f1:c9:36:51:5a:a3:b9:54:be:bf:f9:
         ac:1b:b7:7f:9d:de:1d:b0:33:c6:50:52:bb:2e:d2:14:d1:5a:
         c2:c8:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:41:29 2026 by rpki-client