Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
File:                     8ed3050a-4605-4094-b331-bb0f8758defe.cer (raw, json)
Hash identifier:          sJRsibuxXE0PXc8G4qASYKxZ79rel2rGLGA9Q01kVBo=
Subject key identifier:   71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584F99CC0A3CF711BD3120FA1D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Oct 2026 19:45:15 +0000
Certificate not after:    Sat 23 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 181 -- 185
                          AS: 229 -- 230
                          AS: 233
                          AS: 235 -- 238
                          AS: 689
                          AS: 750 -- 759
                          AS: 2882 -- 2883
                          AS: 2885
                          AS: 4553
                          IP: 35.0.0.0 -- 35.16.255.255
                          IP: 35.20.0.0 -- 35.25.255.255
                          IP: 35.32.0.0 -- 35.33.127.255
                          IP: 35.34.0.0 -- 35.34.79.255
                          IP: 35.37.0.0 -- 35.39.95.255
                          IP: 35.39.128.0 -- 35.40.255.255
                          IP: 35.46.0.0/16
                          IP: 35.50.0.0/17
                          IP: 35.54.0.0/20
                          IP: 35.58.0.0/15
                          IP: 35.62.0.0 -- 35.71.63.255
                          IP: 35.128.216.0 -- 35.128.255.255
                          IP: 192.35.161.0 -- 192.35.170.255
                          IP: 192.41.229.0 -- 192.41.238.255
                          IP: 192.122.181.0 -- 192.122.200.255
                          IP: 192.203.195.0/24
                          IP: 198.108.0.0/14
                          IP: 204.38.0.0/16
                          IP: 204.39.128.0/17
                          IP: 207.72.0.0/14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:cc:0a:3c:f7:11:bd:31:20:fa:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 23 19:45:15 2026 GMT
            Not After : Sep 23 08:45:11 2028 GMT
        Subject: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:96:92:41:63:3f:c2:e2:26:32:e1:69:48:
                    16:9e:3e:23:55:92:07:04:e2:db:4d:5c:f6:75:ed:
                    b3:2c:00:c6:21:01:f3:f9:1d:7e:10:6d:1c:07:b7:
                    ce:cc:54:f9:cc:9e:c1:bc:88:ba:0f:e3:ac:cb:fa:
                    8d:15:8d:39:cc:6b:31:8b:70:14:ae:85:62:20:26:
                    cd:8c:46:0c:84:23:12:9d:a8:89:a1:a0:09:33:6c:
                    e6:61:5b:83:3a:ab:b4:1d:ea:c7:df:a0:92:d0:2b:
                    16:ce:a5:7f:f1:55:23:23:09:a4:e3:af:d7:a7:8f:
                    e1:17:7d:26:a9:7f:00:f0:71:4b:7a:1d:f5:9b:9a:
                    4a:80:d7:e4:ee:06:e1:bd:6f:22:71:14:57:8c:6a:
                    ac:78:51:c3:6e:7d:93:fb:c1:a2:82:bc:3f:90:68:
                    ba:52:db:fb:68:a5:02:6d:23:15:41:be:aa:70:a5:
                    0c:4a:88:c3:e5:6c:e1:76:e3:12:89:e1:fd:34:13:
                    53:73:08:c0:82:68:a0:25:9a:e9:12:25:db:dc:84:
                    10:57:1e:78:1d:98:c3:b3:54:1e:a8:9b:09:0a:ee:
                    3b:aa:3f:8b:44:11:5f:08:dc:a5:dc:da:87:f1:06:
                    7d:70:f6:1d:54:25:b3:4c:29:4c:df:cf:54:2a:e4:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.0.0.0-35.16.255.255
                  35.20.0.0-35.25.255.255
                  35.32.0.0-35.33.127.255
                  35.34.0.0-35.34.79.255
                  35.37.0.0-35.39.95.255
                  35.39.128.0-35.40.255.255
                  35.46.0.0/16
                  35.50.0.0/17
                  35.54.0.0/20
                  35.58.0.0/15
                  35.62.0.0-35.71.63.255
                  35.128.216.0-35.128.255.255
                  192.35.161.0-192.35.170.255
                  192.41.229.0-192.41.238.255
                  192.122.181.0-192.122.200.255
                  192.203.195.0/24
                  198.108.0.0/14
                  204.38.0.0/16
                  204.39.128.0/17
                  207.72.0.0/14

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  181-185
                  229-230
                  233
                  235-238
                  689
                  750-759
                  2882-2883
                  2885
                  4553

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:f0:26:43:4c:ab:ef:91:11:7e:92:29:18:db:05:4a:88:
         6d:64:0d:f1:21:99:1c:14:26:c2:04:bf:05:b4:e1:ea:d9:f5:
         c2:12:83:8f:f9:eb:ce:17:80:0f:ca:63:d5:6f:05:38:fd:82:
         41:01:32:ed:00:7d:54:bc:fc:62:19:20:0d:19:72:fd:80:16:
         b0:2f:f3:01:8b:4b:42:0a:e8:94:92:c0:70:9f:bb:1b:7e:ee:
         05:e2:e8:85:8a:bf:46:a0:ab:c1:b0:49:9f:3d:7a:c9:5a:55:
         be:5f:29:8a:21:0f:f9:db:cc:c3:20:43:49:e1:7c:ab:b2:aa:
         33:03:7b:fa:eb:f1:74:64:02:37:fb:6b:b5:1b:80:09:83:0d:
         93:0d:e0:8b:60:0c:d0:8d:97:de:92:a1:ac:6c:6f:9a:ea:27:
         45:1b:d6:7d:c1:f3:84:9f:be:7b:3c:7a:b9:3d:2b:3f:cb:16:
         23:14:61:a4:5f:c5:d8:8b:e8:0a:4d:68:e6:e0:6a:90:12:de:
         40:01:50:f2:08:ce:4f:42:ff:24:6d:95:90:f3:95:2f:4d:eb:
         c3:93:e7:2a:87:61:f2:03:97:ce:81:22:05:73:06:6a:09:7a:
         04:52:e2:06:cc:30:d2:3d:97:06:cf:96:4b:d0:2f:88:23:c1:
         c5:0b:55:eb
-----BEGIN CERTIFICATE-----
MIIIBTCCBu2gAwIBAgIUAQ0Mn0MoWE+ZzAo89xG9MSD6HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MTAyMzE5NDUxNVoXDTI4MDkyMzA4NDUxMVowLzEtMCsGA1UEAxMk
OGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThkZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVyWkkFjP8LiJjLhaUgWnj4jVZIHBOLbTVz2
de2zLADGIQHz+R1+EG0cB7fOzFT5zJ7BvIi6D+Osy/qNFY05zGsxi3AUroViICbN
jEYMhCMSnaiJoaAJM2zmYVuDOqu0HerH36CS0CsWzqV/8VUjIwmk46/Xp4/hF30m
qX8A8HFLeh31m5pKgNfk7gbhvW8icRRXjGqseFHDbn2T+8Gigrw/kGi6Utv7aKUC
bSMVQb6qcKUMSojD5WzhduMSieH9NBNTcwjAgmigJZrpEiXb3IQQVx54HZjDs1Qe
qJsJCu47qj+LRBFfCNyl3NqH8QZ9cPYdVCWzTClM389UKuQujwIDAQABo4IFFzCC
BRMwHQYDVR0OBBYEFHGfdZ658v03sk/5i+9jcY7ATkwPMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84
ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlZDMwNTBhLTQ2MDUtNDA5NC1i
MzMxLWJiMGY4NzU4ZGVmZS84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1
OGRlZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgd0GCCsGAQUF
BwEHAQH/BIHNMIHKMIHHBAIAATCBwDAJAwIAIwMDACMQMAoDAwIjFAMDASMYMAsD
AwUjIAMEByMhADALAwMBIyIDBAQjIkAwCwMDACMlAwQFIydAMAsDBAcjJ4ADAwAj
KAMDACMuAwQHIzIAAwQEIzYAAwMBIzowCwMDASM+AwQGI0cAMAsDBAMjgNgDAwAj
gDAMAwQAwCOhAwQAwCOqMAwDBADAKeUDBADAKe4wDAMEAMB6tQMEAMB6yAMEAMDL
wwMDAsZsAwMAzCYDBAfMJ4ADAwLPSDBXBggrBgEFBQcBCAEB/wRIMEagRDBCMAgC
AgC1AgIAuTAIAgIA5QICAOYCAgDpMAgCAgDrAgIA7gICArEwCAICAu4CAgL3MAgC
AgtCAgILQwICC0UCAhHJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFjp8CZDTKvvkRF+kikY2wVKiG1kDfEh
mRwUJsIEvwW04erZ9cISg4/5684XgA/KY9VvBTj9gkEBMu0AfVS8/GIZIA0Zcv2A
FrAv8wGLS0IK6JSSwHCfuxt+7gXi6IWKv0agq8GwSZ89eslaVb5fKYohD/nbzMMg
Q0nhfKuyqjMDe/rr8XRkAjf7a7UbgAmDDZMN4ItgDNCNl96Soaxsb5rqJ0Ub1n3B
84Sfvns8erk9Kz/LFiMUYaRfxdiL6ApNaObgapAS3kABUPIIzk9C/yRtlZDzlS9N
68OT5yqHYfIDl86BIgVzBmoJegRS4gbMMNI9lwbPlkvQL4gjwcULVes=
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:45:52 2026 by rpki-client