Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer
File:                     7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer (raw, json)
Hash identifier:          eys/6Ct5f1WkRZqliBAVMTk0WA+auMm8ZK8s0yJPvDU=
Subject key identifier:   AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584F74B0AC4BC330221C13A9EFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 10 Oct 2026 12:45:11 +0000
Certificate not after:    Fri 12 Jan 2029 13:45:11 +0000
Subordinate resources:    AS: 46886
                          IP: 104.36.252.0/22
                          IP: 104.193.128.0/22
                          IP: 158.51.192.0/22
                          IP: 165.140.16.0/22
                          IP: 170.178.140.0/22
                          IP: 2602:ffa4::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b0:ac:4b:c3:30:22:1c:13:a9:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Oct 10 12:45:11 2026 GMT
            Not After : Jan 12 13:45:11 2029 GMT
        Subject: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:86:d7:16:09:b6:9c:19:a2:ee:47:da:24:
                    0b:a8:f5:92:18:b9:28:6d:74:4d:1c:ad:93:30:1f:
                    0f:4f:b6:b0:70:c0:64:4e:fd:b3:4a:b6:fb:a8:a4:
                    13:d3:98:c3:c8:7d:67:e2:db:08:e7:7d:52:fe:93:
                    84:e4:55:b0:b3:3d:0c:6b:d8:4a:c7:9f:ff:34:df:
                    6f:50:e0:ec:60:95:e8:96:91:dd:8a:17:f2:87:0f:
                    f7:e2:68:ac:ca:3e:3f:fa:81:12:c0:4d:f5:41:f7:
                    3e:94:89:51:c4:f6:bf:6e:82:b9:c4:a5:da:fd:87:
                    31:41:71:d0:d2:be:ff:5e:08:59:bf:43:3d:e6:2e:
                    5e:d8:de:42:2c:49:3a:09:3b:34:08:4c:d9:87:cf:
                    46:3a:35:94:2a:97:88:9a:0b:26:c2:99:33:df:29:
                    64:47:1a:33:47:56:88:73:11:b1:c4:fe:e0:be:48:
                    c5:73:91:ef:e9:7b:e7:48:71:b3:e6:92:b1:7b:99:
                    21:54:fc:34:72:81:91:b7:e5:47:f0:58:b2:2a:8f:
                    7f:a4:13:b8:d1:d2:3f:ac:57:4d:02:3c:8d:bf:d2:
                    72:63:00:da:b5:c6:7f:11:dc:6d:be:37:27:33:de:
                    b4:3a:3e:06:b1:f7:ca:b1:f8:b2:ef:7a:10:d4:2f:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.252.0/22
                  104.193.128.0/22
                  158.51.192.0/22
                  165.140.16.0/22
                  170.178.140.0/22
                IPv6:
                  2602:ffa4::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46886

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:31:f8:12:a9:20:6a:e7:01:0f:74:07:5f:85:9c:d4:8c:
         2c:81:3e:83:45:46:37:d4:e0:98:1e:ff:db:d5:8e:66:63:0d:
         6c:18:50:55:48:b8:d4:f6:be:a2:3c:58:2e:dd:7d:da:a7:a8:
         c0:52:0b:e2:ea:10:ae:d4:3f:d5:c6:db:46:96:dd:9c:74:03:
         f5:78:77:99:d6:6f:0f:ec:ee:4f:5d:22:fd:49:b8:72:08:16:
         b6:74:e7:fb:83:89:1f:30:9a:db:51:38:bf:ec:4a:fa:81:33:
         2e:14:da:6f:0d:3f:30:8a:66:dc:2a:a9:06:1b:f1:30:ca:f0:
         77:24:89:85:5a:f9:74:c8:8e:d9:21:ec:44:78:37:62:c9:5d:
         37:2c:05:c8:a0:78:11:b2:bb:06:0d:35:47:3f:12:64:ff:f9:
         d6:5f:05:0d:2a:0e:96:37:7f:6f:ca:60:d4:8a:d8:b5:76:89:
         08:39:8e:f9:37:ac:57:6f:6a:46:48:d8:bb:ff:38:1c:0f:e3:
         75:de:14:fd:67:58:a9:aa:61:98:86:a7:c5:64:0a:d9:6d:9b:
         fa:75:d1:7e:09:a1:72:09:e6:cd:79:81:05:4c:a7:b8:e2:5f:
         77:53:4c:df:d6:2e:df:e2:4d:1a:27:99:01:6b:20:ae:5a:49:
         53:62:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:22 2026 by rpki-client