Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
File:                     e201ba8b-eda4-4920-948d-160d561b0e16.cer (raw, json)
Hash identifier:          68tfKC5fTDd3G7Mt02DiuhFPuT754rbLaqanu9M2GZw=
Subject key identifier:   65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584B3A06D966DF6D63A1A2EEA400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Sep 2025 17:18:23 +0000
Certificate not after:    Thu 17 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 17252
                          AS: 21769
                          AS: 33708
                          AS: 47007
                          AS: 47013
                          IP: 43.255.188.0/22
                          IP: 45.40.96.0/19
                          IP: 45.73.160.0/19
                          IP: 45.250.8.0/22
                          IP: 45.252.80.0/22
                          IP: 64.69.96.0/19
                          IP: 64.83.64.0/20
                          IP: 66.78.0.0/18
                          IP: 67.203.0.0/18
                          IP: 67.207.160.0/19
                          IP: 67.219.16.0/20
                          IP: 67.227.0.0/17
                          IP: 69.171.208.0 -- 69.171.219.255
                          IP: 74.114.116.0/22
                          IP: 76.9.96.0/20
                          IP: 89.208.52.0/22
                          IP: 89.208.180.0/22
                          IP: 92.38.208.0/22
                          IP: 95.163.148.0/22
                          IP: 103.48.32.0/22
                          IP: 103.51.32.0/22
                          IP: 103.56.86.0/23
                          IP: 103.76.186.0/23
                          IP: 103.87.252.0/23
                          IP: 103.108.96.0/23
                          IP: 103.219.16.0/22
                          IP: 103.251.220.0/22
                          IP: 104.129.240.0/20
                          IP: 104.143.96.0/20
                          IP: 104.224.64.0/19
                          IP: 104.247.152.0/21
                          IP: 147.185.114.0/23
                          IP: 173.46.80.0/20
                          IP: 173.211.0.0/17
                          IP: 173.214.176.0/20
                          IP: 174.140.192.0/18
                          IP: 180.131.144.0/22
                          IP: 180.149.32.0/22
                          IP: 184.174.0.0/17
                          IP: 185.176.48.0/22
                          IP: 185.185.28.0/22
                          IP: 185.188.76.0/22
                          IP: 185.193.72.0/22
                          IP: 185.194.116.0/22
                          IP: 185.194.228.0/22
                          IP: 185.197.16.0/22
                          IP: 185.201.228.0/22
                          IP: 185.202.168.0/22
                          IP: 185.205.196.0/22
                          IP: 185.206.220.0/22
                          IP: 185.207.96.0/22
                          IP: 185.210.76.0/22
                          IP: 198.89.96.0/21
                          IP: 198.89.120.0/21
                          IP: 198.102.8.0/21
                          IP: 199.182.168.0/21
                          IP: 205.147.236.0/22
                          IP: 205.196.128.0/19
                          IP: 206.206.64.0/18
                          IP: 207.8.240.0/22
                          IP: 208.70.248.0/21
                          IP: 208.76.248.0/21
                          IP: 208.86.196.0/22
                          IP: 208.93.4.0/22
                          IP: 208.94.224.0/21
                          IP: 209.92.160.0/19
                          IP: 209.137.160.0/19
                          IP: 209.236.192.0/19
                          IP: 213.219.252.0/22
                          IP: 216.10.0.0/19
                          IP: 216.74.64.0/18
                          IP: 216.75.64.0/19
                          IP: 216.107.128.0/20
                          IP: 216.122.160.0/19
                          IP: 216.183.224.0/19
                          IP: 2604:4840::/32
                          IP: 2605:a240::/32
                          IP: 2606:e7c0::/32
                          IP: 2607:f188::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:06:d9:66:df:6d:63:a1:a2:ee:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 17 17:18:23 2025 GMT
            Not After : Dec 17 01:45:26 2026 GMT
        Subject: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:4a:4a:a4:47:f8:eb:dd:b3:37:58:30:ec:
                    7b:4b:91:30:87:23:d0:a2:2e:1a:0b:46:a1:bc:27:
                    3b:ff:9f:f8:d2:6c:12:be:e6:b4:1d:93:e4:66:dc:
                    d9:18:e3:47:5a:c2:18:3a:66:d7:ec:de:bf:8e:6b:
                    1f:de:89:02:be:48:25:c4:c2:e4:80:dc:f0:af:54:
                    7d:03:d3:b5:7f:48:31:d1:cd:be:4b:bc:66:47:64:
                    4d:16:b0:fc:24:8e:d6:aa:0a:4a:b4:6d:8c:62:82:
                    e5:97:a3:6c:9b:1b:d1:d9:d8:4f:5d:f8:db:23:45:
                    4b:f4:5e:14:ed:07:d0:6d:6b:53:bf:d3:94:c1:a2:
                    73:46:ed:02:3a:19:16:9c:c0:e8:40:c9:08:8b:93:
                    7d:87:0a:f6:1a:ee:c2:9d:da:7f:7e:e2:d8:88:29:
                    94:56:ac:2b:a7:12:da:5e:23:de:7a:e0:96:c5:10:
                    ac:89:d0:82:4a:1d:e9:5c:86:31:38:2e:9f:67:cd:
                    8e:f4:24:22:1c:92:73:e6:f6:2a:5e:bc:62:50:0a:
                    ac:38:25:e0:24:b8:ef:fc:d6:4b:b4:c4:6b:1f:93:
                    f7:6c:9a:41:7f:7d:57:c4:91:20:aa:0f:a2:08:9c:
                    cd:43:d6:cf:eb:fd:22:60:7f:de:3e:37:28:4d:8a:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.188.0/22
                  45.40.96.0/19
                  45.73.160.0/19
                  45.250.8.0/22
                  45.252.80.0/22
                  64.69.96.0/19
                  64.83.64.0/20
                  66.78.0.0/18
                  67.203.0.0/18
                  67.207.160.0/19
                  67.219.16.0/20
                  67.227.0.0/17
                  69.171.208.0-69.171.219.255
                  74.114.116.0/22
                  76.9.96.0/20
                  89.208.52.0/22
                  89.208.180.0/22
                  92.38.208.0/22
                  95.163.148.0/22
                  103.48.32.0/22
                  103.51.32.0/22
                  103.56.86.0/23
                  103.76.186.0/23
                  103.87.252.0/23
                  103.108.96.0/23
                  103.219.16.0/22
                  103.251.220.0/22
                  104.129.240.0/20
                  104.143.96.0/20
                  104.224.64.0/19
                  104.247.152.0/21
                  147.185.114.0/23
                  173.46.80.0/20
                  173.211.0.0/17
                  173.214.176.0/20
                  174.140.192.0/18
                  180.131.144.0/22
                  180.149.32.0/22
                  184.174.0.0/17
                  185.176.48.0/22
                  185.185.28.0/22
                  185.188.76.0/22
                  185.193.72.0/22
                  185.194.116.0/22
                  185.194.228.0/22
                  185.197.16.0/22
                  185.201.228.0/22
                  185.202.168.0/22
                  185.205.196.0/22
                  185.206.220.0/22
                  185.207.96.0/22
                  185.210.76.0/22
                  198.89.96.0/21
                  198.89.120.0/21
                  198.102.8.0/21
                  199.182.168.0/21
                  205.147.236.0/22
                  205.196.128.0/19
                  206.206.64.0/18
                  207.8.240.0/22
                  208.70.248.0/21
                  208.76.248.0/21
                  208.86.196.0/22
                  208.93.4.0/22
                  208.94.224.0/21
                  209.92.160.0/19
                  209.137.160.0/19
                  209.236.192.0/19
                  213.219.252.0/22
                  216.10.0.0/19
                  216.74.64.0/18
                  216.75.64.0/19
                  216.107.128.0/20
                  216.122.160.0/19
                  216.183.224.0/19
                IPv6:
                  2604:4840::/32
                  2605:a240::/32
                  2606:e7c0::/32
                  2607:f188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17252
                  21769
                  33708
                  47007
                  47013

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:12:56:12:c5:f3:bb:f5:88:bb:06:64:64:d7:30:0f:6d:
         63:aa:2c:cd:7d:1f:1e:07:9e:78:e1:1e:da:93:c1:93:67:f0:
         d5:00:80:28:04:d7:53:26:e1:e5:d8:43:9f:42:15:1c:37:64:
         db:5d:12:ab:cf:3a:d5:f6:5a:1c:5c:4f:65:56:ea:ad:1d:b2:
         cb:02:3e:ec:13:e5:b5:40:12:ef:8b:03:f8:fe:b8:94:8d:19:
         76:44:53:71:30:e9:27:24:07:33:ba:e6:0c:37:65:e2:eb:a0:
         ab:bb:8b:5c:10:41:37:d9:64:5f:50:60:33:b2:5f:c2:5c:ad:
         8b:f0:9c:9e:5a:a2:c4:75:5e:ee:9e:d0:08:e8:cb:58:54:0f:
         af:83:08:b5:5c:85:b6:1b:c0:98:d3:77:87:f0:4b:fb:4d:04:
         9a:b5:79:b6:33:60:c1:66:f7:25:5d:28:b2:ae:fc:96:e8:84:
         78:86:1f:78:41:72:7f:4e:52:f4:0f:5c:31:34:85:51:d3:57:
         a6:34:fe:1a:d4:f2:4f:45:c5:86:6a:8b:b3:15:60:c9:c4:aa:
         d7:e4:91:86:ef:c3:42:47:ec:5d:fb:fb:08:a5:e7:ac:a9:0c:
         3e:58:19:c5:63:03:d9:59:93:18:80:af:d8:a8:cd:b6:a4:d9:
         08:6b:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:12:09 2025 by rpki-client