Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
File:                     e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer (raw, json)
Hash identifier:          TqOQfCwqD8wbiznbesPAsjVQNFbFCNAEy9z1jsjzi28=
Subject key identifier:   DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584E43ECFEBC175D6D1A97B9D6E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jun 2026 08:45:11 +0000
Certificate not after:    Mon 25 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 6432
                          AS: 16591
                          AS: 19448
                          IP: 23.228.128.0/18
                          IP: 23.255.128.0/17
                          IP: 45.56.0.0/18
                          IP: 99.198.128.0/17
                          IP: 107.188.128.0/17
                          IP: 136.23.128.0/17
                          IP: 136.32.0.0/11
                          IP: 136.96.0.0 -- 136.106.255.255
                          IP: 192.119.16.0/20
                          IP: 192.200.224.0/19
                          IP: 216.21.160.0/20
                          IP: 2605:a600::/31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:ec:fe:bc:17:5d:6d:1a:97:b9:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jun 23 08:45:11 2026 GMT
            Not After : Sep 25 08:45:11 2028 GMT
        Subject: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:02:a5:5a:2e:fd:ad:20:03:e9:d6:9b:82:
                    b8:2e:fc:a4:52:55:7c:62:ea:3e:bf:cf:bf:32:3e:
                    fc:1d:ea:7c:2a:af:32:f2:ac:3e:57:62:86:d1:e0:
                    4e:45:aa:6e:9e:ae:50:fc:d9:6d:08:ff:24:d2:42:
                    fe:c6:bd:93:cb:ca:7f:1c:90:13:db:3d:aa:a4:fc:
                    92:6d:84:bd:bd:c3:7f:04:d9:3b:b7:bd:2b:01:d7:
                    62:1d:92:b2:fc:cd:0d:b4:fe:28:f5:0b:c7:00:13:
                    17:83:a2:9b:cc:88:54:22:e4:9a:1f:87:cd:ea:68:
                    c3:fb:92:09:7c:59:0d:14:d4:87:18:32:55:b7:3b:
                    66:0b:30:1f:1e:84:eb:8c:a1:f1:5f:ed:9c:43:28:
                    f7:6e:bd:7d:4a:a2:fc:d6:f7:e9:56:d9:e4:4c:47:
                    59:fc:c1:e6:11:06:ca:a6:90:62:d2:f1:d7:8b:02:
                    2d:2d:d3:b7:2c:dd:a1:71:7d:55:66:f8:fb:c6:4e:
                    58:68:09:05:55:d6:45:86:e1:2d:d6:fb:da:d2:ff:
                    87:de:02:c5:0b:f6:2f:1d:eb:8b:ab:8f:00:29:59:
                    9f:b0:1b:9c:44:fb:46:2d:5b:c7:9c:65:05:13:d8:
                    b9:0d:e7:43:3b:b0:1b:03:ed:e7:fa:36:2c:48:5d:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.228.128.0/18
                  23.255.128.0/17
                  45.56.0.0/18
                  99.198.128.0/17
                  107.188.128.0/17
                  136.23.128.0/17
                  136.32.0.0/11
                  136.96.0.0-136.106.255.255
                  192.119.16.0/20
                  192.200.224.0/19
                  216.21.160.0/20
                IPv6:
                  2605:a600::/31

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6432
                  16591
                  19448

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:00:ea:5f:17:ba:53:2a:83:6a:a6:a9:25:5d:e9:55:51:
         c8:6f:75:70:5f:28:54:d0:c5:ff:2b:a6:b1:4e:84:2b:d0:8e:
         ee:14:31:42:d0:59:10:bb:01:16:c1:be:ac:73:b9:ae:d3:34:
         71:50:6c:de:8d:4e:78:f2:ad:cd:fd:41:95:b7:b6:be:12:63:
         0a:be:16:1d:ce:db:78:ce:16:d8:7d:28:8b:27:9c:4b:31:c3:
         1f:ea:a4:6a:9d:ac:ca:6f:61:6e:8e:69:20:46:95:ef:31:62:
         1a:7e:3e:6d:1f:17:83:b7:d1:f6:03:d8:f4:ff:5a:21:01:1a:
         57:12:41:d1:cc:66:89:ad:72:fc:f4:f1:33:08:c0:88:93:9a:
         aa:e9:57:24:65:97:e2:a9:43:ee:bc:63:ab:df:ee:fe:71:c1:
         e6:c2:b6:db:46:4e:40:dd:06:01:a0:40:3b:34:72:38:95:7a:
         68:3e:da:6c:25:af:f8:78:60:36:8b:20:67:22:2b:8a:2e:37:
         64:3e:fb:4b:7e:02:d3:75:c0:6d:66:60:cd:0a:bb:6c:85:0f:
         29:11:c3:cf:84:f2:0c:d9:2f:cb:f2:69:b9:8f:23:76:fd:ad:
         da:d4:ee:d1:12:68:80:cd:54:61:1c:05:4e:e3:a2:73:fa:83:
         52:88:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:41 2026 by rpki-client