Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5.cer
File:                     3d8dd457-4641-4633-bb2c-ade38d76edd5.cer (raw, json)
Hash identifier:          Nfh/36xtyca2t2PK2s5mOeHaQuVPfmta1HxrFeWVVkU=
Subject key identifier:   25:80:DF:D3:7F:D1:C6:5D:24:01:67:21:B2:A1:85:CF:10:76:38:EA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B5BB82C1E2EDA907F6DFA0F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/3d8dd457-4641-4633-bb2c-ade38d76edd5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Sep 2025 18:57:21 +0000
Certificate not after:    Sun 12 Dec 2027 01:45:24 +0000
Subordinate resources:    AS: 5742
                          AS: 6300
                          AS: 10664
                          AS: 11401
                          AS: 12042
                          AS: 12112
                          AS: 13333
                          AS: 14051
                          AS: 25660
                          IP: 64.30.96.0/19
                          IP: 64.61.192.0/18
                          IP: 64.92.0.0/18
                          IP: 64.113.96.0/19
                          IP: 64.254.176.0/20
                          IP: 65.78.128.0/18
                          IP: 66.37.48.0/20
                          IP: 66.60.128.0/18
                          IP: 66.116.0.0/18
                          IP: 66.170.192.0/19
                          IP: 66.205.128.0/19
                          IP: 66.212.128.0/19
                          IP: 67.20.224.0/19
                          IP: 67.58.224.0/19
                          IP: 67.159.128.0/19
                          IP: 67.218.16.0/20
                          IP: 68.232.224.0/19
                          IP: 69.4.128.0/19
                          IP: 69.24.160.0/19
                          IP: 69.62.128.0/17
                          IP: 70.9.0.0/16
                          IP: 72.22.0.0/19
                          IP: 72.26.0.0/19
                          IP: 72.46.176.0/22
                          IP: 72.46.183.0/24
                          IP: 72.251.160.0/19
                          IP: 76.164.64.0/18
                          IP: 104.193.76.0/22
                          IP: 135.26.0.0 -- 135.26.223.255
                          IP: 156.47.32.0 -- 156.47.255.255
                          IP: 162.217.208.0/22
                          IP: 173.233.0.0/19
                          IP: 174.34.192.0/19
                          IP: 192.159.88.0/24
                          IP: 192.241.48.0/20
                          IP: 198.144.0.0/20
                          IP: 198.190.226.0/24
                          IP: 204.11.72.0/21
                          IP: 204.154.216.0/21
                          IP: 205.166.20.0/24
                          IP: 206.51.192.0/19
                          IP: 206.123.240.0/20
                          IP: 206.193.224.0/19
                          IP: 206.221.144.0/21
                          IP: 206.221.156.0/22
                          IP: 207.70.128.0/18
                          IP: 207.183.224.0/19
                          IP: 207.231.64.0/19
                          IP: 208.92.196.0/22
                          IP: 208.124.64.0/18
                          IP: 209.23.128.0/18
                          IP: 209.34.0.0/18
                          IP: 209.107.224.0/19
                          IP: 209.169.64.0/18
                          IP: 209.195.128.0/18
                          IP: 209.240.224.0/19
                          IP: 216.70.0.0/18
                          IP: 216.93.192.0 -- 216.93.239.255
                          IP: 216.114.192.0/18
                          IP: 216.176.64.0/19
                          IP: 216.251.160.0/19
                          IP: 2605:d00::/32
                          IP: 2605:7e00::/32
                          IP: 2605:9400::/32
                          IP: 2605:b380::/32
                          IP: 2605:db80::/32
                          IP: 2606:400::/32
                          IP: 2607:f7e0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:b8:2c:1e:2e:da:90:7f:6d:fa:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Sep 29 18:57:21 2025 GMT
            Not After : Dec 12 01:45:24 2027 GMT
        Subject: CN=3d8dd457-4641-4633-bb2c-ade38d76edd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:c6:0e:a8:af:22:8e:7f:49:2c:b6:ca:af:
                    ff:be:77:cd:fe:26:cd:4e:f9:d6:5c:49:ea:d4:bc:
                    18:c0:d5:47:6e:06:01:3d:43:4f:16:3f:1f:cc:77:
                    03:2d:00:24:e3:e2:b4:aa:18:4a:1b:4f:52:4c:44:
                    49:33:be:e5:b9:b6:55:1d:e9:4e:68:58:8b:ce:aa:
                    50:31:64:81:0f:1d:76:90:0f:6f:2a:99:0f:74:3f:
                    8d:5d:af:ca:35:93:83:02:d2:49:84:d3:6e:91:f6:
                    13:a0:0b:68:19:96:32:35:21:67:ba:62:d8:b6:88:
                    1d:f2:6b:81:6e:85:9a:24:f2:f6:91:89:1d:66:b1:
                    a1:88:ff:dc:63:80:a0:c3:27:fc:83:f0:5a:ac:8c:
                    a4:91:e6:4d:c0:2f:c6:78:f8:cd:7c:71:49:af:7e:
                    0d:5e:11:a1:87:70:45:75:28:c7:bd:9c:be:ed:82:
                    2f:a3:5c:28:12:77:a3:d4:75:27:1b:e5:99:9c:98:
                    a1:df:0c:2c:45:c3:45:6c:03:21:4d:3e:2c:3d:e6:
                    cb:c8:98:9a:30:16:c5:c5:9d:0e:53:89:3b:23:a2:
                    db:b9:80:52:4c:34:0c:bf:92:b2:b5:9a:23:26:5f:
                    d5:05:a9:2d:cf:35:97:2f:24:35:f9:1d:1e:bb:9d:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:80:DF:D3:7F:D1:C6:5D:24:01:67:21:B2:A1:85:CF:10:76:38:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/3d8dd457-4641-4633-bb2c-ade38d76edd5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.96.0/19
                  64.61.192.0/18
                  64.92.0.0/18
                  64.113.96.0/19
                  64.254.176.0/20
                  65.78.128.0/18
                  66.37.48.0/20
                  66.60.128.0/18
                  66.116.0.0/18
                  66.170.192.0/19
                  66.205.128.0/19
                  66.212.128.0/19
                  67.20.224.0/19
                  67.58.224.0/19
                  67.159.128.0/19
                  67.218.16.0/20
                  68.232.224.0/19
                  69.4.128.0/19
                  69.24.160.0/19
                  69.62.128.0/17
                  70.9.0.0/16
                  72.22.0.0/19
                  72.26.0.0/19
                  72.46.176.0/22
                  72.46.183.0/24
                  72.251.160.0/19
                  76.164.64.0/18
                  104.193.76.0/22
                  135.26.0.0-135.26.223.255
                  156.47.32.0-156.47.255.255
                  162.217.208.0/22
                  173.233.0.0/19
                  174.34.192.0/19
                  192.159.88.0/24
                  192.241.48.0/20
                  198.144.0.0/20
                  198.190.226.0/24
                  204.11.72.0/21
                  204.154.216.0/21
                  205.166.20.0/24
                  206.51.192.0/19
                  206.123.240.0/20
                  206.193.224.0/19
                  206.221.144.0/21
                  206.221.156.0/22
                  207.70.128.0/18
                  207.183.224.0/19
                  207.231.64.0/19
                  208.92.196.0/22
                  208.124.64.0/18
                  209.23.128.0/18
                  209.34.0.0/18
                  209.107.224.0/19
                  209.169.64.0/18
                  209.195.128.0/18
                  209.240.224.0/19
                  216.70.0.0/18
                  216.93.192.0-216.93.239.255
                  216.114.192.0/18
                  216.176.64.0/19
                  216.251.160.0/19
                IPv6:
                  2605:d00::/32
                  2605:7e00::/32
                  2605:9400::/32
                  2605:b380::/32
                  2605:db80::/32
                  2606:400::/32
                  2607:f7e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5742
                  6300
                  10664
                  11401
                  12042
                  12112
                  13333
                  14051
                  25660

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:7a:01:23:c0:0c:14:9a:0c:7f:48:1d:30:bf:f2:06:2b:
         11:15:dd:74:9e:d0:63:f5:82:a4:4b:b4:c9:8a:3f:5a:88:c0:
         8d:70:2e:8c:ca:33:ff:f7:42:65:17:be:bd:dc:7e:b5:7d:6d:
         bf:d3:b2:32:2d:98:10:61:9d:c9:d8:72:1d:93:c6:8e:1f:e4:
         e9:e7:76:61:7f:60:25:10:1e:07:7e:c2:43:7e:4f:ed:6f:46:
         08:ca:20:22:02:65:fd:fc:89:dc:a8:65:5c:c1:95:d7:67:da:
         9a:93:ed:7b:2b:a2:57:1e:00:74:bf:99:b0:f4:ef:29:5a:9f:
         dd:36:ca:3d:e3:26:72:31:4c:e1:60:28:13:4d:80:58:cd:4d:
         2e:0c:51:1c:9e:c0:28:31:f0:d8:88:b0:cf:60:3f:14:04:41:
         85:09:49:b4:fd:8a:db:7f:62:71:e4:ed:95:e8:50:16:64:fd:
         ca:67:14:df:cb:b2:1f:15:de:87:20:ca:22:9e:81:25:96:ea:
         67:4f:1b:a8:29:8d:ad:dc:54:2f:cb:77:6a:3c:56:96:0a:8b:
         8a:74:a7:d0:51:0e:2d:b6:62:a3:33:a5:1b:f9:1e:36:ca:af:
         b0:5e:21:83:92:c7:b1:fb:f1:18:03:9b:1b:ce:73:0d:51:3a:
         5f:cd:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 15:22:45 2025 by rpki-client