Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File:                     baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier:          SYGPnFbf5V1DN92C8579eNS5qRGtH6jkWpYRd4/kZOs=
Subject key identifier:   50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584F71E5FF4D1B21790FBB979780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Oct 2026 12:45:12 +0000
Certificate not after:    Thu 11 Jan 2029 13:45:12 +0000
Subordinate resources:    AS: 11539
                          AS: 11858
                          AS: 16751
                          AS: 18442
                          AS: 19139
                          AS: 19554
                          AS: 21563
                          AS: 22591
                          AS: 26547
                          AS: 26575
                          AS: 26704
                          AS: 27495
                          AS: 27570
                          AS: 30446
                          AS: 31917
                          AS: 32216
                          AS: 32263
                          AS: 33459
                          AS: 33737
                          AS: 35888
                          AS: 46371
                          AS: 46675
                          AS: 46858
                          AS: 395509
                          AS: 395791
                          AS: 397717
                          AS: 398848
                          AS: 399973
                          IP: 64.56.208.0/24
                          IP: 66.159.106.0/23
                          IP: 67.202.160.0/20
                          IP: 74.112.144.0/21
                          IP: 137.236.0.0/16
                          IP: 142.75.0.0/16
                          IP: 150.105.0.0/16
                          IP: 162.252.12.0/22
                          IP: 173.243.48.0/20
                          IP: 192.67.53.0/24
                          IP: 192.80.54.0/24
                          IP: 192.138.191.0/24
                          IP: 199.71.120.0/24
                          IP: 199.85.101.0/24
                          IP: 199.87.216.0/22
                          IP: 199.182.176.0/21
                          IP: 199.201.226.0 -- 199.201.229.255
                          IP: 199.231.96.0/22
                          IP: 204.107.28.0/22
                          IP: 204.138.115.0/24
                          IP: 205.141.236.0/22
                          IP: 205.142.224.0/22
                          IP: 205.211.178.0/24
                          IP: 206.197.31.0/24
                          IP: 206.253.128.0/21
                          IP: 207.195.160.0/19
                          IP: 208.87.136.0/22
                          IP: 2604:8b00::/32
                          IP: 2620:0:1a40::/48
                          IP: 2620:10c:f000::/40
                          IP: 2620:134:d000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:e5:ff:4d:1b:21:79:0f:bb:97:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct  9 12:45:12 2026 GMT
            Not After : Jan 11 13:45:12 2029 GMT
        Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
                    3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
                    b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
                    bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
                    9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
                    23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
                    48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
                    5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
                    df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
                    8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
                    f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
                    77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
                    ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
                    9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
                    79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
                    bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
                    e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.208.0/24
                  66.159.106.0/23
                  67.202.160.0/20
                  74.112.144.0/21
                  137.236.0.0/16
                  142.75.0.0/16
                  150.105.0.0/16
                  162.252.12.0/22
                  173.243.48.0/20
                  192.67.53.0/24
                  192.80.54.0/24
                  192.138.191.0/24
                  199.71.120.0/24
                  199.85.101.0/24
                  199.87.216.0/22
                  199.182.176.0/21
                  199.201.226.0-199.201.229.255
                  199.231.96.0/22
                  204.107.28.0/22
                  204.138.115.0/24
                  205.141.236.0/22
                  205.142.224.0/22
                  205.211.178.0/24
                  206.197.31.0/24
                  206.253.128.0/21
                  207.195.160.0/19
                  208.87.136.0/22
                IPv6:
                  2604:8b00::/32
                  2620:0:1a40::/48
                  2620:10c:f000::/40
                  2620:134:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11539
                  11858
                  16751
                  18442
                  19139
                  19554
                  21563
                  22591
                  26547
                  26575
                  26704
                  27495
                  27570
                  30446
                  31917
                  32216
                  32263
                  33459
                  33737
                  35888
                  46371
                  46675
                  46858
                  395509
                  395791
                  397717
                  398848
                  399973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:16:d0:b5:20:f3:bd:6e:7e:85:69:5f:3c:1d:b0:e2:95:
         39:54:f6:0c:8f:7e:e5:44:01:5a:63:ed:30:80:c3:a7:aa:ef:
         a6:0e:dc:bd:6a:7a:0d:43:b2:93:59:3f:dc:58:9e:8f:85:59:
         eb:51:2e:05:c9:f5:2a:e1:97:a9:b0:74:ef:10:d1:ae:52:65:
         83:47:18:2c:9d:8a:cb:e5:8d:2a:d9:f3:6f:35:4d:40:59:94:
         5d:b3:1d:b1:2e:56:3f:9b:ce:3b:d8:05:87:14:87:79:09:c1:
         6a:4e:16:26:e7:46:c3:73:a1:8e:be:9b:bb:19:e0:ff:fb:e9:
         a9:13:55:70:0d:f9:67:46:3d:7e:e6:08:44:22:6b:1e:5d:ca:
         87:1d:6a:af:e7:bb:ee:7f:fe:d1:39:64:4e:a0:a9:29:15:de:
         0b:70:a6:21:9f:9c:33:96:f3:4a:e3:0b:25:23:75:0e:93:a3:
         d5:fa:2f:96:3f:b8:d7:43:c8:66:2e:23:78:4b:3b:15:85:3e:
         de:9b:98:da:8c:42:c4:bd:25:99:0d:57:a2:f1:29:d1:ec:4c:
         4c:a3:c0:5a:bd:b7:62:fd:7e:9b:1a:9f:ed:ba:cc:25:e3:1d:
         93:e5:a9:9b:79:25:02:fd:df:b4:05:a9:b1:e5:23:54:dd:37:
         de:65:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:15:04 2026 by rpki-client