Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347.cer
File:                     68677a92-18fb-44c0-8de6-e0e703359347.cer (raw, json)
Hash identifier:          aIsgzE3cQGu14c4lVJH3alYPKoTYk8FTT2TXSBAaBnU=
Subject key identifier:   47:41:99:8B:7F:43:3A:1D:6C:79:DA:65:C4:9A:2A:98:1A:B0:0F:E0
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer:       /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial:       010D0C9F4328584F4B86268829E2D8C4D0C0F780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/68677a92-18fb-44c0-8de6-e0e703359347.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Sep 2026 18:51:22 +0000
Certificate not after:    Thu 28 Dec 2028 19:51:22 +0000
Subordinate resources:    AS: 19635
                          IP: 24.233.192.0/21
                          IP: 96.45.96.0/20
                          IP: 140.82.248.0/21
                          IP: 162.247.10.0/23
                          IP: 2604:91c0::/32
                          IP: 2607:b380::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:86:26:88:29:e2:d8:c4:d0:c0:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
        Validity
            Not Before: Sep 25 18:51:22 2026 GMT
            Not After : Dec 28 19:51:22 2028 GMT
        Subject: CN=68677a92-18fb-44c0-8de6-e0e703359347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:47:f4:8a:5e:11:a6:65:0e:4d:af:36:55:
                    3b:fb:57:ab:c2:1b:4f:17:02:15:eb:d4:90:90:73:
                    c3:ce:eb:2e:56:76:91:e3:72:46:1b:ba:93:a8:8a:
                    1d:be:5c:70:8a:c7:9c:36:96:13:dc:08:7d:92:02:
                    b3:80:4a:2b:30:cc:21:f9:14:06:ae:69:ae:6e:67:
                    b4:9b:b0:76:b2:01:d0:fa:70:ba:76:93:92:0f:67:
                    bc:56:d0:61:af:79:d4:2f:13:f4:55:77:26:bd:b9:
                    02:9a:91:a8:ca:11:e8:fb:36:3e:ae:15:fe:51:96:
                    0a:5b:a0:75:aa:93:2c:c7:ab:c9:e5:94:66:26:0e:
                    64:76:8d:2e:4a:58:42:98:40:a6:35:4c:d2:94:c6:
                    e2:d7:9a:45:85:84:43:c7:80:ac:3a:63:83:b5:2a:
                    3b:10:53:66:93:56:9d:36:93:69:06:b6:ab:2a:fd:
                    76:5c:e0:55:27:c6:c3:ed:b5:bf:8b:78:74:e0:1d:
                    be:6d:da:18:5e:a5:84:50:20:32:53:08:b9:eb:27:
                    1a:e0:99:37:4c:d2:07:a8:0e:aa:1e:77:92:a5:c0:
                    8b:4e:5a:f5:8c:19:a4:7c:f9:a3:69:08:ec:fd:6e:
                    d0:4a:00:0e:bc:88:64:ac:bd:52:21:71:b4:9d:7b:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:41:99:8B:7F:43:3A:1D:6C:79:DA:65:C4:9A:2A:98:1A:B0:0F:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/68677a92-18fb-44c0-8de6-e0e703359347/68677a92-18fb-44c0-8de6-e0e703359347.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl

            X509v3 Authority Key Identifier:
                keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.233.192.0/21
                  96.45.96.0/20
                  140.82.248.0/21
                  162.247.10.0/23
                IPv6:
                  2604:91c0::/32
                  2607:b380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a7:30:a8:d4:2f:27:4d:54:8c:89:28:a8:5c:e2:49:9a:5b:
         9a:76:8a:f0:70:6d:08:bf:8d:54:90:3d:e9:2c:1c:9a:47:4b:
         65:eb:57:83:23:9c:56:11:02:06:ff:bd:8b:13:ec:d8:9b:46:
         7b:50:72:f9:4c:c7:76:76:93:2b:74:25:61:6f:45:4b:0c:de:
         63:42:99:80:01:b2:67:7c:86:d3:49:f2:73:b8:93:35:00:0d:
         82:f5:24:d6:e4:d5:f1:93:e5:dd:8e:ab:a5:ce:6e:6b:79:47:
         7b:66:f7:d4:61:bb:cb:b4:b1:57:38:67:f6:ab:b3:7c:14:09:
         d3:f6:f6:9f:1e:c6:cc:5d:0c:8e:e1:33:f7:79:3b:5d:fe:88:
         b1:fd:d2:d8:ba:28:71:29:7d:84:b1:a7:94:31:b7:b6:45:44:
         0f:9f:36:d0:59:54:6c:ea:f9:fb:a1:5a:00:c9:30:bd:36:a6:
         56:5f:35:91:05:96:5c:c5:4f:48:22:a5:ec:0c:a7:8d:37:65:
         59:46:67:36:c5:c3:f0:23:d6:aa:19:e3:5f:ef:a6:d8:b4:84:
         fd:7e:8a:70:4e:9e:f3:1f:ac:40:55:97:a1:d9:36:92:fb:21:
         2d:bf:d9:b0:db:86:df:0e:7c:36:66:f0:6c:5e:fc:e6:e1:9b:
         b7:4e:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:32:20 2026 by rpki-client