Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
File:                     ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer (raw, json)
Hash identifier:          PNhuDVV7rv9Odk359SrcLzGqznES4zBTjLw3yYbP47s=
Subject key identifier:   8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584A5494C9F796683270DEA94FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Jun 2025 12:48:27 +0000
Certificate not after:    Sun 09 May 2027 00:45:32 +0000
Subordinate resources:    AS: 3842
                          AS: 22611
                          AS: 54641
                          IP: 23.226.224.0/20
                          IP: 23.235.192.0/19
                          IP: 66.117.0.0/24
                          IP: 66.117.3.0 -- 66.117.5.255
                          IP: 66.117.14.0/23
                          IP: 74.124.193.0 -- 74.124.195.255
                          IP: 74.124.197.0 -- 74.124.198.255
                          IP: 74.124.200.0/24
                          IP: 74.124.202.0/23
                          IP: 74.124.210.0 -- 74.124.215.255
                          IP: 74.124.217.0 -- 74.124.219.255
                          IP: 91.92.38.0/23
                          IP: 104.152.108.0/22
                          IP: 104.193.140.0/22
                          IP: 104.244.120.0/21
                          IP: 104.247.72.0/21
                          IP: 107.161.16.0/20
                          IP: 107.191.96.0/19
                          IP: 144.208.64.0/20
                          IP: 167.17.160.0/20
                          IP: 167.88.112.0/20
                          IP: 168.235.64.0/18
                          IP: 172.81.116.0/22
                          IP: 173.231.192.0/18
                          IP: 173.247.240.0/20
                          IP: 192.30.32.0/22
                          IP: 192.73.232.0/21
                          IP: 192.145.232.0/21
                          IP: 192.184.80.0/20
                          IP: 192.249.56.0/21
                          IP: 192.249.112.0/20
                          IP: 198.46.80.0/20
                          IP: 199.223.114.0/23
                          IP: 199.241.28.0/22
                          IP: 199.250.192.0/19
                          IP: 200.225.32.0/20
                          IP: 205.134.234.0/24
                          IP: 205.134.238.0/23
                          IP: 205.134.241.0/24
                          IP: 205.134.249.0 -- 205.134.255.255
                          IP: 209.182.192.0 -- 209.182.215.255
                          IP: 213.165.224.0/19
                          IP: 216.194.160.0/20
                          IP: 2604:180::/32
                          IP: 2605:f400::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:94:c9:f7:96:68:32:70:de:a9:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun 27 12:48:27 2025 GMT
            Not After : May  9 00:45:32 2027 GMT
        Subject: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:cc:83:2d:cd:67:1b:0e:77:bd:47:76:77:
                    70:0b:bc:7d:54:65:4b:8a:b7:6f:a5:1b:be:ed:2e:
                    11:b8:0f:4d:c0:8f:80:e2:e1:60:ff:98:f0:12:30:
                    2b:54:ae:5b:0c:a0:36:ea:fa:01:3a:54:a6:12:01:
                    96:40:be:51:98:01:d3:f0:b3:d7:2e:15:a4:6c:fd:
                    76:69:13:09:11:cf:7a:7a:dd:66:51:7e:10:b5:13:
                    24:9b:bb:91:b2:6d:80:0e:68:b4:0a:ca:a7:45:af:
                    a4:c5:09:c8:14:e0:5c:6d:d3:3a:75:5b:c6:1f:b6:
                    03:1e:aa:1b:18:b2:fe:2b:a4:34:1c:be:96:79:79:
                    51:f4:0b:28:9f:59:71:4f:67:7a:7d:c1:9d:81:43:
                    19:20:f5:12:ee:85:33:cd:c4:24:73:09:97:79:d5:
                    07:12:e5:b5:43:8e:b9:63:bf:d3:63:6a:63:ee:57:
                    63:b8:a6:bc:e1:e6:da:33:99:39:1d:58:92:4b:4f:
                    00:e6:1b:3d:52:75:21:d6:7b:db:09:0e:18:3a:23:
                    ec:a5:a2:29:0f:12:f7:b2:79:fa:5c:40:2e:2c:0d:
                    25:ee:14:52:c6:ab:65:8f:29:f7:db:3b:e6:8a:fe:
                    4c:bb:ee:c3:96:89:a6:9d:81:7e:60:a6:81:13:97:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.224.0/20
                  23.235.192.0/19
                  66.117.0.0/24
                  66.117.3.0-66.117.5.255
                  66.117.14.0/23
                  74.124.193.0-74.124.195.255
                  74.124.197.0-74.124.198.255
                  74.124.200.0/24
                  74.124.202.0/23
                  74.124.210.0-74.124.215.255
                  74.124.217.0-74.124.219.255
                  91.92.38.0/23
                  104.152.108.0/22
                  104.193.140.0/22
                  104.244.120.0/21
                  104.247.72.0/21
                  107.161.16.0/20
                  107.191.96.0/19
                  144.208.64.0/20
                  167.17.160.0/20
                  167.88.112.0/20
                  168.235.64.0/18
                  172.81.116.0/22
                  173.231.192.0/18
                  173.247.240.0/20
                  192.30.32.0/22
                  192.73.232.0/21
                  192.145.232.0/21
                  192.184.80.0/20
                  192.249.56.0/21
                  192.249.112.0/20
                  198.46.80.0/20
                  199.223.114.0/23
                  199.241.28.0/22
                  199.250.192.0/19
                  200.225.32.0/20
                  205.134.234.0/24
                  205.134.238.0/23
                  205.134.241.0/24
                  205.134.249.0-205.134.255.255
                  209.182.192.0-209.182.215.255
                  213.165.224.0/19
                  216.194.160.0/20
                IPv6:
                  2604:180::/32
                  2605:f400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3842
                  22611
                  54641

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ec:e3:ae:fa:26:ee:36:47:ef:6e:78:48:bd:7e:30:ca:30:
         e4:1a:98:26:3a:71:ae:92:7c:80:64:0b:c8:fa:15:2f:8c:2b:
         c3:0c:24:07:14:38:91:57:89:21:16:30:02:72:28:3d:9e:a2:
         15:d7:18:b3:f6:19:77:b3:9f:4c:08:7d:f7:8e:2b:4f:35:78:
         1f:9e:84:b3:ec:8e:2a:3f:85:12:db:fc:14:cf:a3:98:3b:4b:
         fb:57:e3:ff:07:d7:e6:0c:be:b7:6a:eb:4f:8b:61:e5:60:cf:
         37:62:1e:c3:be:b9:f1:e9:12:15:4e:2c:81:8c:c7:52:30:7d:
         3c:e5:b2:fa:df:11:5a:4f:e8:2b:ee:12:4e:97:1c:88:83:52:
         2c:8d:6b:e8:e8:11:0f:85:3a:c3:c2:1c:5b:55:c9:a0:5a:36:
         a5:b4:6c:16:c9:68:da:c4:e3:c1:72:b4:82:d6:44:71:3e:db:
         02:18:a2:5f:37:07:01:1f:b0:81:a6:f4:e2:9c:47:18:af:77:
         b0:6e:c9:b8:89:ad:54:3f:c6:a9:7e:86:d1:6c:70:4b:a0:97:
         18:9a:38:c5:c8:7e:0e:8f:25:89:a5:f6:a3:23:e6:24:fe:d9:
         68:e5:23:8b:77:a6:cf:b8:e3:5c:d1:d9:89:5b:d3:31:d1:80:
         fe:85:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:27:07 2025 by rpki-client