Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/261d9943-2089-4437-bb91-f3a835ca8df6.cer
File:                     261d9943-2089-4437-bb91-f3a835ca8df6.cer (raw, json)
Hash identifier:          DBN7TdP+4ym3BHMHHzOC1jUXrI7yU2NllukxkGHIQgE=
Subject key identifier:   54:1E:32:BB:0B:58:57:D0:C3:5E:C2:FF:7D:19:E5:E6:D4:88:BE:A5
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584EE107DDA5D66A576A1FF4E880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/261d9943-2089-4437-bb91-f3a835ca8df6/261d9943-2089-4437-bb91-f3a835ca8df6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/261d9943-2089-4437-bb91-f3a835ca8df6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Aug 2026 15:21:14 +0000
Certificate not after:    Wed 01 Nov 2028 18:49:20 +0000
Subordinate resources:    AS: 32773
                          AS: 46300
                          AS: 395755
                          AS: 396420
                          AS: 397561
                          IP: 23.133.208.0/24
                          IP: 23.134.48.0/24
                          IP: 64.209.216.0/21
                          IP: 67.209.32.0/21
                          IP: 74.120.4.0/22
                          IP: 136.228.186.0/23
                          IP: 138.84.208.0/20
                          IP: 144.86.144.0/22
                          IP: 144.86.196.0/22
                          IP: 161.199.196.0/22
                          IP: 162.253.20.0/23
                          IP: 169.197.164.0/22
                          IP: 173.214.196.0/22
                          IP: 198.28.132.0/22
                          IP: 199.19.60.0/22
                          IP: 199.34.98.0 -- 199.34.105.255
                          IP: 200.50.136.0/21
                          IP: 205.203.220.0/22
                          IP: 208.64.56.0/21
                          IP: 208.72.168.0/21
                          IP: 208.81.141.0/24
                          IP: 216.122.128.0/20
                          IP: 2602:fcf9::/36
                          IP: 2604:4b40::/28
                          IP: 2604:6e40::/32
                          IP: 2605:4040::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e1:07:dd:a5:d6:6a:57:6a:1f:f4:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Aug 18 15:21:14 2026 GMT
            Not After : Nov  1 18:49:20 2028 GMT
        Subject: CN=261d9943-2089-4437-bb91-f3a835ca8df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:33:c2:12:15:b9:82:fb:73:31:d0:1e:23:
                    06:6d:07:45:aa:25:95:7d:e0:9b:20:b0:34:b1:ae:
                    14:3e:69:8a:62:80:c1:0b:bf:5a:20:88:3d:27:7a:
                    df:dd:54:04:9b:75:8a:3f:30:80:9a:3b:52:c2:20:
                    c2:08:86:d7:35:c8:ea:e7:85:1f:4d:44:01:df:e1:
                    ce:89:e6:ec:63:56:a9:95:ee:52:b0:50:84:a0:b8:
                    70:70:37:a3:6e:54:28:35:a4:10:4d:41:a8:ce:e4:
                    7a:e0:86:b6:71:67:e9:07:25:87:de:e3:b9:a7:68:
                    d3:e0:d4:2c:d6:f6:c1:20:fd:92:f2:16:3c:8d:da:
                    d2:07:c7:3c:1b:77:83:a0:cf:2f:78:be:d6:07:c2:
                    27:07:20:2c:76:f4:6a:09:b1:44:1f:1a:b2:ac:0e:
                    4d:80:ff:7d:97:e3:2e:ca:d4:d3:9b:10:f7:59:40:
                    ec:cc:25:9e:36:f2:10:2e:96:b6:ac:db:c9:05:d9:
                    93:f1:c2:85:15:88:b6:c5:93:1d:69:8f:73:63:7c:
                    2b:df:0c:7c:70:9f:c4:80:08:03:f0:24:fd:29:b2:
                    37:2e:d0:11:40:f7:0a:78:bf:c0:86:b1:76:66:ad:
                    1a:de:ee:d9:30:2a:b0:da:61:8d:fa:3f:4f:eb:9c:
                    0c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1E:32:BB:0B:58:57:D0:C3:5E:C2:FF:7D:19:E5:E6:D4:88:BE:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/261d9943-2089-4437-bb91-f3a835ca8df6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/261d9943-2089-4437-bb91-f3a835ca8df6/261d9943-2089-4437-bb91-f3a835ca8df6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.208.0/24
                  23.134.48.0/24
                  64.209.216.0/21
                  67.209.32.0/21
                  74.120.4.0/22
                  136.228.186.0/23
                  138.84.208.0/20
                  144.86.144.0/22
                  144.86.196.0/22
                  161.199.196.0/22
                  162.253.20.0/23
                  169.197.164.0/22
                  173.214.196.0/22
                  198.28.132.0/22
                  199.19.60.0/22
                  199.34.98.0-199.34.105.255
                  200.50.136.0/21
                  205.203.220.0/22
                  208.64.56.0/21
                  208.72.168.0/21
                  208.81.141.0/24
                  216.122.128.0/20
                IPv6:
                  2602:fcf9::/36
                  2604:4b40::/28
                  2604:6e40::/32
                  2605:4040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32773
                  46300
                  395755
                  396420
                  397561

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:33:ea:fc:00:e4:95:f1:2b:2b:0f:06:91:c6:6c:66:5b:b7:
         7f:9e:5f:17:ba:8d:56:37:40:da:0b:75:cb:cc:fa:a5:15:ca:
         5e:1c:77:b1:e7:52:8d:ac:7a:a3:cf:1e:18:6c:e7:ea:8d:fc:
         2d:ea:e4:65:6f:51:2d:6d:47:65:44:d3:5f:ae:71:7d:02:49:
         38:f2:b8:43:9d:3e:29:56:6b:11:b6:44:61:21:7c:ee:69:a0:
         3c:1a:44:df:31:89:ee:82:3a:a4:ca:a2:d1:fc:d7:86:04:01:
         a7:c3:4d:1b:69:7f:78:d7:84:76:a1:56:18:68:dc:ee:ec:15:
         fc:6e:8e:11:05:9a:49:0b:dd:36:74:57:08:56:cb:f6:62:16:
         b3:b2:5f:59:e3:43:d5:c9:62:3d:d1:8c:27:9f:fa:95:73:ef:
         e3:16:51:c2:b6:d3:1d:1d:a5:c2:8e:2f:85:fa:7a:3f:8c:c8:
         03:c8:17:92:8a:31:10:e0:23:16:33:50:0a:d8:b7:d3:97:ff:
         3f:5f:7e:24:d2:bc:bc:4c:90:24:e4:b6:dc:89:f7:e9:ca:95:
         66:c7:e2:1b:8e:e8:6f:e0:a6:b2:bf:d9:87:b6:60:5d:a0:c1:
         d2:1c:8b:a3:cf:40:c0:f9:34:16:fe:3b:d7:17:03:6f:ab:72:
         3a:8a:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:56:15 2026 by rpki-client