Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
File:                     8314711c-e263-425a-adda-3995b7095d9d.cer (raw, json)
Hash identifier:          W+LTXoXxLC3lwr6KS7JP1a76hK6xaeVaDv+zGH2iy6I=
Subject key identifier:   D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584EA98D01B84BE48DA3D10B7080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Jul 2026 18:24:14 +0000
Certificate not after:    Thu 14 Oct 2027 00:45:37 +0000
Subordinate resources:    AS: 16550
                          AS: 19527
                          AS: 26910
                          AS: 36561
                          AS: 55023
                          AS: 394089
                          AS: 395973
                          AS: 396178
                          AS: 396982
                          AS: 402726 -- 402727
                          IP: 8.228.0.0 -- 8.237.255.255
                          IP: 23.236.48.0/20
                          IP: 23.251.128.0/19
                          IP: 34.0.0.0 -- 34.3.2.255
                          IP: 34.3.4.0 -- 34.4.3.255
                          IP: 34.4.5.0 -- 34.191.255.255
                          IP: 35.184.0.0 -- 35.247.255.255
                          IP: 35.252.0.0/14
                          IP: 104.154.0.0/15
                          IP: 104.196.0.0/14
                          IP: 107.167.160.0/19
                          IP: 107.178.192.0/18
                          IP: 108.59.80.0/20
                          IP: 130.211.0.0/16
                          IP: 136.22.2.0 -- 136.22.5.255
                          IP: 136.22.8.0/22
                          IP: 136.22.187.0 -- 136.22.191.255
                          IP: 136.23.64.0/18
                          IP: 136.64.0.0/11
                          IP: 136.107.0.0 -- 136.127.255.255
                          IP: 146.148.0.0/17
                          IP: 152.238.0.0/16
                          IP: 152.239.128.0/17
                          IP: 162.216.148.0/22
                          IP: 162.222.176.0/21
                          IP: 173.255.112.0/20
                          IP: 177.176.0.0/16
                          IP: 177.178.0.0/15
                          IP: 177.208.0.0/15
                          IP: 179.67.0.0/17
                          IP: 179.69.128.0/17
                          IP: 179.193.128.0/17
                          IP: 179.199.0.0/17
                          IP: 186.242.0.0/17
                          IP: 186.245.0.0/16
                          IP: 187.78.0.0/17
                          IP: 187.79.0.0/17
                          IP: 187.126.128.0/17
                          IP: 189.24.128.0/17
                          IP: 189.48.0.0/16
                          IP: 189.49.128.0/17
                          IP: 189.70.0.0/15
                          IP: 189.82.0.0/15
                          IP: 189.105.128.0 -- 189.107.255.255
                          IP: 191.0.128.0/17
                          IP: 191.2.0.0/15
                          IP: 191.40.128.0/17
                          IP: 191.44.128.0/17
                          IP: 191.45.128.0 -- 191.47.255.255
                          IP: 191.212.0.0/15
                          IP: 191.216.128.0/17
                          IP: 191.218.0.0/17
                          IP: 191.220.0.0/15
                          IP: 192.158.28.0/22
                          IP: 199.192.112.0/22
                          IP: 199.223.232.0/21
                          IP: 201.4.128.0/17
                          IP: 201.8.128.0 -- 201.9.255.255
                          IP: 201.19.0.0/16
                          IP: 201.50.128.0/17
                          IP: 201.51.128.0/17
                          IP: 201.78.0.0/17
                          IP: 201.94.0.0/17
                          IP: 207.175.0.0/16
                          IP: 2600:1900::/28
                          IP: 2600:2d00::/28
                          IP: 2602:ff11::/36
                          IP: 2620:84::/47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:8d:01:b8:4b:e4:8d:a3:d1:0b:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 29 18:24:14 2026 GMT
            Not After : Oct 14 00:45:37 2027 GMT
        Subject: CN=8314711c-e263-425a-adda-3995b7095d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:39:e3:2b:a9:be:a5:0b:31:3a:ad:9c:1a:
                    5b:d7:ad:79:48:5e:1e:58:77:bc:04:5c:34:cc:f1:
                    75:28:22:16:df:4a:23:b4:47:00:ae:9d:e6:36:fb:
                    ce:00:44:87:41:d3:75:2d:29:d8:dd:48:ce:11:3a:
                    5a:2a:5d:b2:97:bd:18:6a:77:51:71:1e:b9:81:c8:
                    22:c0:2d:d6:ac:50:d8:fc:a5:94:c1:b6:05:e7:e7:
                    c3:41:c9:55:66:92:11:a2:a2:7d:b9:d2:81:61:4d:
                    e4:00:bd:55:5b:1f:61:6e:04:18:b6:30:9e:d5:1f:
                    a6:de:79:47:e8:d2:9e:f6:a1:d4:53:1e:54:20:5d:
                    bd:c9:cf:71:55:ba:7b:22:db:3d:00:7e:bc:36:92:
                    bd:0e:f2:a1:cd:81:08:c2:fd:47:3a:58:81:3c:a7:
                    32:30:01:4a:ce:a4:7a:d2:76:64:ba:5a:14:fc:b8:
                    18:dc:e6:d9:0b:c1:19:9d:38:e2:3a:f9:9e:e6:3e:
                    c6:12:f8:24:00:6d:60:a7:66:c1:dd:cc:8a:24:fc:
                    cd:44:c3:a2:d6:5e:cb:9c:cd:2e:56:1a:ae:d2:47:
                    8d:08:c0:a5:48:f2:22:ba:0c:4e:90:fb:c6:2f:4e:
                    15:8c:81:e9:56:6f:65:7c:cc:9e:c0:7b:da:b1:f7:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.228.0.0-8.237.255.255
                  23.236.48.0/20
                  23.251.128.0/19
                  34.0.0.0-34.3.2.255
                  34.3.4.0-34.4.3.255
                  34.4.5.0-34.191.255.255
                  35.184.0.0-35.247.255.255
                  35.252.0.0/14
                  104.154.0.0/15
                  104.196.0.0/14
                  107.167.160.0/19
                  107.178.192.0/18
                  108.59.80.0/20
                  130.211.0.0/16
                  136.22.2.0-136.22.5.255
                  136.22.8.0/22
                  136.22.187.0-136.22.191.255
                  136.23.64.0/18
                  136.64.0.0/11
                  136.107.0.0-136.127.255.255
                  146.148.0.0/17
                  152.238.0.0/16
                  152.239.128.0/17
                  162.216.148.0/22
                  162.222.176.0/21
                  173.255.112.0/20
                  177.176.0.0/16
                  177.178.0.0/15
                  177.208.0.0/15
                  179.67.0.0/17
                  179.69.128.0/17
                  179.193.128.0/17
                  179.199.0.0/17
                  186.242.0.0/17
                  186.245.0.0/16
                  187.78.0.0/17
                  187.79.0.0/17
                  187.126.128.0/17
                  189.24.128.0/17
                  189.48.0.0/16
                  189.49.128.0/17
                  189.70.0.0/15
                  189.82.0.0/15
                  189.105.128.0-189.107.255.255
                  191.0.128.0/17
                  191.2.0.0/15
                  191.40.128.0/17
                  191.44.128.0/17
                  191.45.128.0-191.47.255.255
                  191.212.0.0/15
                  191.216.128.0/17
                  191.218.0.0/17
                  191.220.0.0/15
                  192.158.28.0/22
                  199.192.112.0/22
                  199.223.232.0/21
                  201.4.128.0/17
                  201.8.128.0-201.9.255.255
                  201.19.0.0/16
                  201.50.128.0/17
                  201.51.128.0/17
                  201.78.0.0/17
                  201.94.0.0/17
                  207.175.0.0/16
                IPv6:
                  2600:1900::/28
                  2600:2d00::/28
                  2602:ff11::/36
                  2620:84::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16550
                  19527
                  26910
                  36561
                  55023
                  394089
                  395973
                  396178
                  396982
                  402726-402727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:1a:8f:b8:c6:33:20:7f:dd:c5:99:7f:b8:da:34:9a:f9:
         47:d5:fc:d5:2c:20:e1:55:05:c9:e8:d3:81:b2:83:ff:ea:e1:
         42:a7:7f:98:96:97:33:41:58:a8:e9:3f:1a:75:73:46:b1:0e:
         78:bc:06:da:26:31:7e:76:49:cb:e1:3b:8d:0a:ca:8b:6b:64:
         05:7c:27:24:9e:93:81:19:9d:66:5d:02:e5:f7:66:39:d8:79:
         58:1a:18:c3:6b:19:4f:b6:35:9f:18:69:cc:a5:80:b2:c6:b6:
         09:68:4a:2a:6e:23:df:da:17:1b:f4:20:e6:07:bb:eb:c9:13:
         4e:ab:84:ff:e7:43:2e:11:05:b1:b3:5c:46:d2:8d:9f:4a:65:
         ed:30:b3:f7:9b:a2:d0:a1:81:a7:88:6a:49:90:2f:a5:be:17:
         02:fd:cd:dc:0a:59:02:eb:3e:7e:bb:28:01:43:a6:88:22:94:
         3f:52:66:a9:1d:78:16:13:1a:60:cf:5f:8c:2c:be:dc:48:fa:
         a0:7a:05:a9:fd:0f:07:db:73:72:2d:f8:1a:3b:11:c8:89:fc:
         65:c7:ab:c9:19:9a:70:27:d1:ac:9f:73:a4:be:1b:d9:c3:0d:
         eb:c4:1c:69:f3:50:52:c5:35:09:37:25:05:ca:19:8a:2f:ae:
         17:09:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:22:11 2026 by rpki-client