Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
File:                     fbe3f91d-911a-4397-956a-9925c68f0a94.cer (raw, json)
Hash identifier:          YzcaQdq32/vOlBEDPcWuUpfSjQSuM2ThZ/Tm7KJ+PpE=
Subject key identifier:   BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584E73F1954D64B331D80DDC93C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Jul 2026 13:33:14 +0000
Certificate not after:    Mon 13 Mar 2028 12:45:22 +0000
Subordinate resources:    AS: 7786
                          AS: 15301
                          AS: 19353
                          AS: 19907
                          AS: 19910
                          AS: 32978 -- 32981
                          AS: 46823
                          AS: 53708
                          AS: 62545
                          AS: 395492
                          AS: 397151
                          IP: 52.129.64.0/19
                          IP: 66.175.240.0/20
                          IP: 74.121.28.0/22
                          IP: 156.154.0.0 -- 156.154.33.255
                          IP: 156.154.42.0 -- 156.154.52.255
                          IP: 156.154.56.0/23
                          IP: 156.154.59.0/24
                          IP: 156.154.81.0 -- 156.154.83.255
                          IP: 156.154.88.0/22
                          IP: 156.154.93.0/24
                          IP: 156.154.114.0 -- 156.154.117.255
                          IP: 156.154.134.0/24
                          IP: 156.154.136.0/22
                          IP: 156.154.147.0 -- 156.154.149.255
                          IP: 156.154.185.0 -- 156.154.189.255
                          IP: 156.154.192.0 -- 156.154.203.255
                          IP: 172.83.72.0/21
                          IP: 192.124.159.0/24
                          IP: 198.47.90.0/23
                          IP: 198.202.204.0/24
                          IP: 198.202.243.0/24
                          IP: 209.173.48.0 -- 209.173.57.255
                          IP: 209.173.59.0 -- 209.173.63.255
                          IP: 2610:a0::/32
                          IP: 2610:a4::/30
                          IP: 2620:c8::/48
                          IP: 2620:10a:c000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:f1:95:4d:64:b3:31:d8:0d:dc:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 10 13:33:14 2026 GMT
            Not After : Mar 13 12:45:22 2028 GMT
        Subject: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:19:b0:4f:06:19:77:6d:8d:e0:83:d6:eb:
                    84:e5:4a:22:ae:08:f6:54:a4:e4:b9:89:9f:55:ca:
                    f1:90:4b:99:ee:e8:ca:1c:9f:bc:93:3b:48:49:12:
                    37:20:bb:be:53:77:81:98:85:19:36:08:c7:a5:99:
                    d9:ba:be:4e:12:44:45:c1:a8:0b:55:8a:bd:e7:26:
                    1b:9d:d6:a9:74:f2:c3:4b:bc:88:8e:67:9f:0d:d7:
                    94:6c:d0:e6:84:07:5c:fc:51:17:90:91:85:9d:e4:
                    6a:bd:8e:7d:a7:66:7c:ff:ec:da:ba:df:a8:bf:e3:
                    52:40:ca:26:3e:21:07:eb:25:26:cc:dc:5a:c7:23:
                    65:d4:27:fe:23:29:4d:1e:49:2e:88:68:54:dd:db:
                    04:17:69:8e:7f:b0:fd:e6:2f:d9:4e:05:cb:97:c2:
                    df:7c:f2:92:dd:db:ab:2e:81:38:ac:85:5f:0b:12:
                    36:57:18:19:d0:a3:70:10:ae:5b:c8:6e:d3:26:b1:
                    78:38:5f:eb:fc:79:a8:7e:a9:a8:a1:4f:f9:a4:37:
                    db:ee:80:69:d0:a5:5e:19:31:36:cc:c8:e2:f6:f1:
                    62:ec:b1:87:71:d6:c7:d3:0e:5e:53:6b:12:77:1b:
                    6e:d0:c0:75:82:30:21:d3:b9:0a:e0:9d:bc:b3:c8:
                    d7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.64.0/19
                  66.175.240.0/20
                  74.121.28.0/22
                  156.154.0.0-156.154.33.255
                  156.154.42.0-156.154.52.255
                  156.154.56.0/23
                  156.154.59.0/24
                  156.154.81.0-156.154.83.255
                  156.154.88.0/22
                  156.154.93.0/24
                  156.154.114.0-156.154.117.255
                  156.154.134.0/24
                  156.154.136.0/22
                  156.154.147.0-156.154.149.255
                  156.154.185.0-156.154.189.255
                  156.154.192.0-156.154.203.255
                  172.83.72.0/21
                  192.124.159.0/24
                  198.47.90.0/23
                  198.202.204.0/24
                  198.202.243.0/24
                  209.173.48.0-209.173.57.255
                  209.173.59.0-209.173.63.255
                IPv6:
                  2610:a0::/32
                  2610:a4::/30
                  2620:c8::/48
                  2620:10a:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7786
                  15301
                  19353
                  19907
                  19910
                  32978-32981
                  46823
                  53708
                  62545
                  395492
                  397151

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:3a:65:8e:8f:de:cd:70:a6:b8:2b:34:59:5e:7f:1c:36:27:
         1e:1a:6f:0c:cf:d3:0d:06:f1:3b:0c:fe:e1:13:ea:59:f5:60:
         79:98:af:85:53:79:3e:5f:63:07:b9:13:ea:ee:3c:cb:4f:bb:
         c2:c3:01:ef:73:81:50:87:a0:ce:b0:3e:71:e1:80:72:7c:c6:
         02:0e:0a:ef:7a:82:5e:ed:c1:fc:a0:af:5e:81:47:86:18:d6:
         71:2b:aa:61:ff:d6:cf:8d:d8:61:ee:9c:04:35:2a:d4:7f:8d:
         41:f1:fa:aa:11:7f:b7:d0:c5:a1:f2:7d:62:9b:5c:ee:b6:64:
         47:1d:1a:f2:88:78:0c:88:d6:62:4f:f6:91:97:1b:f6:5a:8b:
         37:c8:29:e7:32:29:3c:61:4c:e8:1f:24:6f:2c:80:2c:8e:b6:
         c8:55:14:d9:7d:0a:cc:ef:44:5e:de:e1:27:c8:4d:e2:9e:11:
         be:a2:3b:d1:05:48:ba:45:31:9a:28:e1:cb:41:fb:ec:ba:b3:
         27:3a:b5:c0:74:8f:58:c8:84:3b:a6:ce:ff:0d:51:34:1e:ec:
         36:fa:e7:fd:b0:76:11:b6:79:c7:ea:9c:8a:4e:3f:e9:87:f2:
         3c:7c:dd:b4:31:f3:aa:26:ad:06:74:66:f4:e3:f6:e2:5c:61:
         1e:73:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:25 2026 by rpki-client