Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec2b368b-b906-45c2-a204-cdaf330abe72.cer
File:                     ec2b368b-b906-45c2-a204-cdaf330abe72.cer (raw, json)
Hash identifier:          gA0hQfG6k8NIwHlXhZIwBBS2z482/sokElRVD/vO/kU=
Subject key identifier:   F1:93:49:76:49:5D:FF:1E:3F:5E:C1:F6:FC:C8:DB:93:D4:18:C3:0C
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584E4551CD147E018B5121E0BB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec2b368b-b906-45c2-a204-cdaf330abe72/ec2b368b-b906-45c2-a204-cdaf330abe72.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec2b368b-b906-45c2-a204-cdaf330abe72/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jun 2026 20:44:06 +0000
Certificate not after:    Mon 25 Sep 2028 20:44:06 +0000
Subordinate resources:    AS: 11174
                          AS: 19563
                          AS: 36738
                          AS: 40515
                          AS: 46903
                          AS: 54593
                          AS: 55169
                          IP: 162.208.24.0/22
                          IP: 162.220.216.0/22
                          IP: 198.36.120.0/21
                          IP: 199.168.56.0/22
                          IP: 208.78.140.0/22
                          IP: 216.162.40.0/22
                          IP: 2620:10c:a000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:51:cd:14:7e:01:8b:51:21:e0:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Jun 23 20:44:06 2026 GMT
            Not After : Sep 25 20:44:06 2028 GMT
        Subject: CN=ec2b368b-b906-45c2-a204-cdaf330abe72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:db:af:e9:8c:d2:8e:65:61:bc:08:55:09:
                    2e:47:dd:c0:bb:66:b5:07:94:16:02:11:74:d7:b8:
                    4d:ec:c0:99:d5:c7:ba:9b:ed:bc:93:e5:91:89:12:
                    e6:e2:ed:17:dc:27:6a:07:44:cf:88:98:51:db:a6:
                    d5:0c:6d:56:f4:ec:83:97:d1:d2:c2:5c:2b:8b:87:
                    b3:e7:16:71:87:5b:f8:b8:05:70:62:54:22:e0:62:
                    0a:29:7f:df:9e:48:b0:48:91:98:9a:ce:a4:8a:2c:
                    7a:2e:78:26:f8:51:93:9a:41:b2:b1:16:bd:c4:68:
                    46:a6:8c:1b:9f:73:71:20:39:36:19:42:33:6e:e7:
                    22:06:f3:3c:45:0c:c5:e6:36:28:1e:58:22:63:a3:
                    a6:43:60:34:de:a5:8c:18:41:f3:c9:7d:62:c7:55:
                    91:88:ef:95:95:b9:64:5e:dd:98:ce:61:5c:cc:4a:
                    24:b4:9e:b3:83:ce:a0:0d:18:de:70:a6:26:a9:c7:
                    5b:74:45:c8:c8:4a:84:7f:d2:a8:70:ec:3f:67:a1:
                    6b:f9:0a:e4:48:be:f4:2f:7c:55:d9:92:b8:44:88:
                    cc:78:a4:ec:5f:13:1b:3a:24:8d:42:33:03:f3:e7:
                    0a:3d:e1:6c:b1:41:49:d9:3f:4d:98:28:c2:eb:13:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:49:76:49:5D:FF:1E:3F:5E:C1:F6:FC:C8:DB:93:D4:18:C3:0C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec2b368b-b906-45c2-a204-cdaf330abe72/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec2b368b-b906-45c2-a204-cdaf330abe72/ec2b368b-b906-45c2-a204-cdaf330abe72.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.24.0/22
                  162.220.216.0/22
                  198.36.120.0/21
                  199.168.56.0/22
                  208.78.140.0/22
                  216.162.40.0/22
                IPv6:
                  2620:10c:a000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11174
                  19563
                  36738
                  40515
                  46903
                  54593
                  55169

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:60:3a:2d:78:15:e3:6d:c0:fd:e5:79:c2:5f:e2:d7:b6:
         8e:5f:2c:6a:19:20:99:68:f7:91:ef:69:bb:ac:c3:2f:04:d0:
         ec:ee:b5:50:ea:fa:3f:e2:71:05:02:5c:b2:aa:68:31:2c:0f:
         44:f0:89:b3:d0:26:29:05:b9:de:6e:a8:b5:34:8f:31:cb:0f:
         5c:f1:95:1f:53:1c:7e:81:b9:fe:47:f7:ff:2f:18:a8:e4:18:
         08:c2:e2:a0:ab:c7:b0:92:f7:a4:28:c2:00:a8:a6:ef:02:be:
         8b:04:42:32:55:18:c3:47:67:61:cd:6e:c5:17:e3:3a:72:78:
         c9:dd:d3:59:66:32:48:cc:38:af:e4:26:49:84:74:07:d5:10:
         63:05:34:ed:1b:b5:51:cf:79:c8:8b:5a:06:0e:ab:24:1f:9c:
         e7:6a:76:96:ef:8f:33:ab:77:63:33:a8:73:38:bb:4c:11:69:
         36:d6:fb:74:f4:77:3b:c8:b9:62:91:54:a4:73:8d:b6:07:a4:
         8a:71:0a:77:34:87:99:48:7f:b1:e3:89:13:66:d2:7f:9e:30:
         f3:ca:8b:62:70:2f:41:a1:78:d8:90:7f:89:c0:51:df:1d:87:
         9d:5a:5d:ef:fc:f4:83:c2:90:4e:5a:bb:4c:e5:a0:c9:f0:61:
         0f:1b:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:43 2026 by rpki-client