Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
File:                     946cb195-9b9a-4836-9152-b97e9e831144.cer (raw, json)
Hash identifier:          BIouKgC3MHRxIYJw9pUE3um43zbeYdXggBodk/PcoRU=
Subject key identifier:   D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584E2ACCD7C6A6629903BAC93580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Jun 2026 08:45:11 +0000
Certificate not after:    Sat 16 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 21935
                          AS: 396292
                          IP: 142.54.0.0/21
                          IP: 142.54.16.0/23
                          IP: 142.54.32.0 -- 142.54.41.255
                          IP: 142.54.200.0/23
                          IP: 142.54.240.0/20
                          IP: 2606:2d80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:cc:d7:c6:a6:62:99:03:ba:c9:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 14 08:45:11 2026 GMT
            Not After : Sep 16 08:45:11 2028 GMT
        Subject: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:3d:72:2b:11:9f:e6:61:3e:68:1a:3c:9c:
                    5b:a1:60:95:0b:d1:fa:4b:8f:e5:3d:a9:c4:ba:d7:
                    35:6c:db:2e:a8:14:ea:ce:fe:f5:d0:f0:21:37:17:
                    2b:7d:35:23:50:e2:c5:10:7b:0c:40:7d:2f:e8:ff:
                    79:c5:68:bd:e1:0e:e3:d8:b6:24:8e:ba:28:a8:51:
                    18:80:cb:b8:2d:ba:a0:a2:23:ac:e3:5b:4e:81:54:
                    07:a1:50:ad:15:b2:dd:2e:a1:e9:dc:1b:6f:c2:51:
                    84:4e:31:08:52:cc:28:a8:48:df:f8:5b:32:51:dd:
                    3f:8d:b6:72:24:69:83:6b:93:f3:4a:2c:78:fb:a0:
                    f0:56:aa:81:43:f8:4c:b7:fc:8f:56:38:1c:0b:94:
                    f2:ba:c4:67:1f:78:73:f7:6e:56:56:7a:34:ca:6a:
                    0c:e2:ec:7b:2d:07:ee:b4:31:60:dc:37:69:9c:6d:
                    f6:a2:1b:aa:fe:25:bb:7f:c6:6d:96:49:2c:39:42:
                    28:78:1d:33:1b:a6:e0:be:29:a0:d7:ec:f5:88:d7:
                    e1:17:9e:86:28:32:55:c4:db:d7:a0:c5:3f:50:8e:
                    5f:fc:34:f9:e9:60:6d:b8:34:40:b8:7b:f3:b9:93:
                    a9:37:78:8d:8e:03:79:3f:18:24:13:5e:f9:eb:f4:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.0.0/21
                  142.54.16.0/23
                  142.54.32.0-142.54.41.255
                  142.54.200.0/23
                  142.54.240.0/20
                IPv6:
                  2606:2d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21935
                  396292

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:82:c1:ca:42:7d:2c:cb:33:e0:42:92:f3:09:31:bb:76:1d:
         6c:00:41:29:58:68:72:b1:1b:a5:ae:16:90:5a:49:93:10:e6:
         11:35:80:86:16:4d:49:f0:46:54:f8:02:20:9b:5c:86:05:59:
         80:ae:e5:f1:10:13:46:12:d5:c4:bc:ce:31:e1:0d:83:a7:b6:
         a8:f2:c2:c5:2f:f1:84:7f:03:ad:96:73:af:3a:97:62:b9:ee:
         e7:3a:e4:55:04:63:11:f8:95:17:8c:ca:3c:02:f6:f5:8f:db:
         72:dc:08:83:68:78:73:89:f0:27:26:e7:e9:e7:0b:92:d4:30:
         88:6a:da:63:84:77:f4:27:0f:b4:29:65:0e:c5:12:f9:95:50:
         c9:55:53:2f:e4:7a:04:14:74:ec:76:3c:22:3d:c7:da:4b:73:
         5a:8f:59:68:30:94:a6:81:a1:1a:36:74:f6:d2:57:24:74:24:
         78:2a:24:b1:13:aa:5e:c4:47:95:81:5d:65:e5:69:c4:3e:92:
         16:78:d0:52:f3:6c:3f:8a:53:20:12:7d:6d:a8:f3:fb:3d:ca:
         8e:b5:40:de:ab:d5:4f:91:55:04:e4:2f:c9:d9:59:41:ec:06:
         bd:9a:20:79:f0:5e:41:51:55:57:7b:aa:34:57:08:66:31:a8:
         de:ac:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:25:03 2026 by rpki-client