Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
File:                     ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer (raw, json)
Hash identifier:          +FG1LTmuqBp0NpimJncUy/jpYbvZ1tUoc4zBbu/CfMk=
Subject key identifier:   A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584E5B58EF83C562290D0E966660
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 Jul 2026 18:06:16 +0000
Certificate not after:    Tue 13 Jun 2028 00:45:21 +0000
Subordinate resources:    AS: 13595
                          AS: 14086
                          AS: 15037
                          AS: 18655
                          AS: 18947
                          AS: 25616
                          AS: 25858
                          AS: 25870
                          AS: 55176
                          AS: 400598
                          AS: 401485
                          IP: 149.112.119.0/24
                          IP: 149.112.134.0 -- 149.112.137.255
                          IP: 149.112.181.0/24
                          IP: 192.40.40.0/23
                          IP: 198.49.14.0/24
                          IP: 198.179.18.0/24
                          IP: 206.82.110.0/23
                          IP: 206.126.112.0/24
                          IP: 2001:504:2d::/48
                          IP: 2001:504:96::/48
                          IP: 2602:f777::/36
                          IP: 2602:faf9::/36
                          IP: 2620:1f:4000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:58:ef:83:c5:62:29:0d:0e:96:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Jul  1 18:06:16 2026 GMT
            Not After : Jun 13 00:45:21 2028 GMT
        Subject: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:46:12:58:07:d7:99:41:98:e3:3b:c5:b2:
                    d9:30:6f:da:f5:93:75:eb:05:77:1a:f8:f1:51:17:
                    59:f3:ac:aa:c1:97:04:09:74:1b:86:ce:a6:fe:5f:
                    17:a3:7d:47:08:72:88:bc:7a:c8:6d:d1:a4:9d:91:
                    ce:50:4c:d6:13:8a:89:ff:6c:2e:d9:46:60:a0:ba:
                    4b:07:5f:cb:fe:bf:65:9b:8b:dd:b6:ee:77:29:22:
                    38:2b:8d:3c:00:76:13:78:3a:39:df:5b:d2:64:96:
                    f0:d4:ac:5b:57:c5:b8:dd:f9:60:fa:84:11:a4:0d:
                    e1:ab:85:23:af:41:42:51:77:a3:1d:b4:49:94:76:
                    85:9a:0d:f5:95:39:f0:27:d5:ae:60:b8:b7:e7:50:
                    70:ad:e1:e9:b0:92:93:99:68:e1:43:7c:84:7a:5c:
                    c6:25:c0:e7:9a:7d:11:85:4c:b8:ba:3f:63:ed:e3:
                    21:01:2c:4b:60:f1:c3:ed:fa:14:51:c9:23:21:15:
                    bf:32:f6:9e:db:a5:04:42:43:5f:d0:8f:11:35:13:
                    37:94:15:5b:c4:f6:cf:aa:65:bc:58:ec:c5:c8:f0:
                    ca:44:29:49:92:fb:a6:ce:20:f4:f5:d8:49:8d:55:
                    3e:d9:b2:2e:2a:88:4f:2b:ad:86:84:0b:59:ed:ae:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.119.0/24
                  149.112.134.0-149.112.137.255
                  149.112.181.0/24
                  192.40.40.0/23
                  198.49.14.0/24
                  198.179.18.0/24
                  206.82.110.0/23
                  206.126.112.0/24
                IPv6:
                  2001:504:2d::/48
                  2001:504:96::/48
                  2602:f777::/36
                  2602:faf9::/36
                  2620:1f:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13595
                  14086
                  15037
                  18655
                  18947
                  25616
                  25858
                  25870
                  55176
                  400598
                  401485

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:5b:94:58:fd:04:88:cf:9c:96:0f:7f:97:80:fa:56:8a:
         35:cb:67:fa:aa:88:49:dd:28:3e:75:4c:c6:18:c0:db:e7:6d:
         d6:a2:14:c1:1c:0a:1c:d8:c9:eb:48:05:03:12:b6:e9:f8:85:
         35:18:a4:63:8b:46:4a:e2:63:eb:fa:c7:c6:d2:fd:9b:8f:ad:
         c9:b1:45:85:66:3b:ab:70:26:31:1c:c6:37:31:ba:6e:b8:78:
         c6:2c:29:33:29:57:dc:1a:73:14:71:ef:80:6f:3f:0d:76:2a:
         6c:46:bc:9a:cd:13:52:94:ac:72:af:03:b1:34:e5:4e:2a:68:
         59:8b:a1:d1:05:0e:cd:f7:4f:ea:fd:e9:4f:41:a9:3b:a9:0b:
         a8:e2:98:5c:7f:cc:f1:64:17:64:64:54:4e:56:95:f4:c8:eb:
         f0:b7:cf:5f:ef:8d:a2:cf:87:fc:11:61:59:f9:ad:1b:ce:74:
         c1:54:3b:e7:8f:14:73:75:de:e4:b1:86:4c:79:b5:20:4d:55:
         7f:5d:92:61:c0:d7:7c:70:cb:a0:06:30:0c:78:9e:da:e7:d1:
         c6:7c:e6:79:b1:fd:aa:b7:2e:2d:98:c8:22:95:00:b1:6f:cb:
         8a:f7:68:7d:bf:1c:4e:dc:d3:23:e1:89:cb:a3:37:85:80:2c:
         1e:1a:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:58 2026 by rpki-client