Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/C2A29F890B4BA854C140D7922D924183BE3DEB07.cer
File:                     C2A29F890B4BA854C140D7922D924183BE3DEB07.cer (raw, json)
Hash identifier:          S42pg2qJJNQymgYHHjZsY8kh+UNgDkW3XCbFvlz+4n8=
Subject key identifier:   C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Certificate issuer:       /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial:       487AB1C63F81EBD1EF5C3EE3D941A011FF7A7037
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Manifest:                 rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
caRepository:             rsync://rsync.rpki.as205941.org/repo/AS205941/4/
Notify URL:               https://rsync.rpki.as205941.org/rrdp/notification.xml
Certificate not before:   Tue 03 Nov 2026 10:11:07 +0000
Certificate not after:    Tue 02 Nov 2027 10:16:07 +0000
Subordinate resources:    IP: 142.249.174.0/24
                          IP: 2602:fa86:ffe::/48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
                          rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/3ce84811-817f-451f-816f-42649a6940cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:b1:c6:3f:81:eb:d1:ef:5c:3e:e3:d9:41:a0:11:ff:7a:70:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
        Validity
            Not Before: Nov  3 10:11:07 2026 GMT
            Not After : Nov  2 10:16:07 2027 GMT
        Subject: CN=C2A29F890B4BA854C140D7922D924183BE3DEB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:57:4a:73:5a:ea:51:20:69:90:22:a5:b2:
                    25:7c:e7:b2:53:db:9d:a7:09:0c:36:14:9a:98:5c:
                    2a:13:ff:67:02:9c:4e:21:11:09:e9:8f:7e:47:26:
                    bd:8e:fa:06:f4:e0:bb:41:b0:b5:9f:37:b9:30:a7:
                    c1:45:fc:17:ec:7f:5c:82:3b:48:a1:5c:db:45:27:
                    51:7c:0c:e3:47:6b:87:08:69:07:c4:7c:93:6d:f5:
                    1f:3f:13:a2:1c:3d:00:da:fb:7d:fe:ac:7e:d7:29:
                    b3:f2:21:ab:30:a6:da:16:e2:01:66:56:68:dd:c0:
                    c7:6f:0a:e2:ba:1b:49:92:33:5e:46:61:1b:dc:15:
                    cc:1c:a3:c7:85:bd:49:41:a6:92:c6:a6:86:63:42:
                    ce:a9:26:70:a0:ac:69:c3:87:4a:8a:79:01:a8:8e:
                    f0:77:75:2b:fa:27:b5:8c:57:d3:06:1b:63:87:25:
                    14:6a:ea:ee:93:46:b8:15:a0:00:3a:3a:e6:2d:c4:
                    f9:71:f5:67:8f:f4:ef:79:4a:80:a8:a0:5c:4f:fa:
                    d0:2f:93:bc:57:a8:c7:8b:97:98:d8:31:c5:9d:68:
                    c0:9a:24:e5:ad:3a:0c:57:fc:d6:1a:72:97:9e:9b:
                    3f:83:22:71:e3:73:d3:e7:63:30:46:7b:05:96:f0:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
            X509v3 Authority Key Identifier:
                keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/
                RPKI Manifest - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
                RPKI Notify - URI:https://rsync.rpki.as205941.org/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.174.0/24
                IPv6:
                  2602:fa86:ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:0b:1b:91:06:7b:27:3a:fc:86:9d:e7:24:c4:6e:29:73:
         b5:fa:65:89:df:d1:42:5e:3b:a8:29:14:b7:1f:40:e6:d7:df:
         8b:52:e9:06:ae:05:bd:c0:01:8c:3a:0d:33:e2:13:2c:b6:39:
         25:6b:4b:92:2d:b4:7d:1f:bc:1a:fc:5d:a8:13:4d:cb:c2:9a:
         84:a8:0c:a7:74:e9:8e:b0:ac:a9:ec:26:8c:93:77:01:c1:c1:
         4f:c2:f8:e3:b9:9e:79:68:b7:9c:f4:53:94:77:53:1a:4a:9d:
         2b:93:92:46:21:2b:c1:9f:f8:97:9e:90:19:fd:60:76:d0:15:
         d7:d9:3c:be:7c:15:2a:a4:79:b3:86:d1:25:50:aa:be:3d:97:
         4b:7e:ab:06:5e:56:cc:ac:1f:04:c6:4b:1b:f8:b5:a5:d6:9c:
         8b:f0:fb:6f:95:2e:cc:74:3a:0c:09:ef:fe:15:34:c1:87:74:
         59:e3:b2:3f:63:9d:f9:8a:b7:52:60:d5:d9:70:4a:ea:eb:ae:
         7f:4b:73:93:6d:16:79:bc:1e:51:a6:22:b8:d1:f5:b8:8e:c2:
         0e:b7:c1:35:95:41:5e:0a:70:02:7b:62:77:54:55:4d:81:cb:
         17:12:d9:32:fd:85:20:94:e4:33:f1:fa:96:7c:c7:6b:ac:b4:
         a3:75:db:e8
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIUSHqxxj+B69HvXD7j2UGgEf96cDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQzNmFkOWIzZDhkNDYwODAwYjNkZDUwYzYyMGIxZDQz
ZWNmOGM3ZGQwMWFlYjBjYzIwHhcNMjYxMTAzMTAxMTA3WhcNMjcxMTAyMTAxNjA3
WjAzMTEwLwYDVQQDEyhDMkEyOUY4OTBCNEJBODU0QzE0MEQ3OTIyRDkyNDE4M0JF
M0RFQjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyVXSnNa6lEg
aZAipbIlfOeyU9udpwkMNhSamFwqE/9nApxOIREJ6Y9+Rya9jvoG9OC7QbC1nze5
MKfBRfwX7H9cgjtIoVzbRSdRfAzjR2uHCGkHxHyTbfUfPxOiHD0A2vt9/qx+1ymz
8iGrMKbaFuIBZlZo3cDHbwriuhtJkjNeRmEb3BXMHKPHhb1JQaaSxqaGY0LOqSZw
oKxpw4dKinkBqI7wd3Ur+ie1jFfTBhtjhyUUauruk0a4FaAAOjrmLcT5cfVnj/Tv
eUqAqKBcT/rQL5O8V6jHi5eY2DHFnWjAmiTlrToMV/zWGnKXnps/gyJx43PT52Mw
RnsFlvB3ZwIDAQABo4IDLTCCAykwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
wqKfiQtLqFTBQNeSLZJBg7496wcwHwYDVR0jBBgwFoAUorTp0GFsthcpYmkqd0o5
UF4SeVQwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvYmY0YzljOGI1ZDAwNDBiOTgw
OGQwYTk5MWQyYzNkYzcvMS9BMkI0RTlEMDYxNkNCNjE3Mjk2MjY5MkE3NzRBMzk1
MDVFMTI3OTU0LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1lZGZl
LTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvM2NlODQ4MTEtODE3Zi00NTFmLTgxNmYt
NDI2NDlhNjk0MGNjLzhkMzZhZDliM2Q4ZDQ2MDgwMGIzZGQ1MGM2MjBiMWQ0M2Vj
ZjhjN2RkMDFhZWIwY2MyLmNlcjCB+wYIKwYBBQUHAQsEge4wgeswPAYIKwYBBQUH
MAWGMHJzeW5jOi8vcnN5bmMucnBraS5hczIwNTk0MS5vcmcvcmVwby9BUzIwNTk0
MS80LzBoBggrBgEFBQcwCoZccnN5bmM6Ly9yc3luYy5ycGtpLmFzMjA1OTQxLm9y
Zy9yZXBvL0FTMjA1OTQxLzQvQzJBMjlGODkwQjRCQTg1NEMxNDBENzkyMkQ5MjQx
ODNCRTNERUIwNy5tZnQwQQYIKwYBBQUHMA2GNWh0dHBzOi8vcnN5bmMucnBraS5h
czIwNTk0MS5vcmcvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBACO+a4wDwQC
AAIwCQMHACYC+oYP/jANBgkqhkiG9w0BAQsFAAOCAQEAHsULG5EGeyc6/Iad5yTE
bilztfplid/RQl47qCkUtx9A5tffi1LpBq4FvcABjDoNM+ITLLY5JWtLki20fR+8
GvxdqBNNy8KahKgMp3TpjrCsqewmjJN3AcHBT8L447meeWi3nPRTlHdTGkqdK5OS
RiErwZ/4l56QGf1gdtAV19k8vnwVKqR5s4bRJVCqvj2XS36rBl5WzKwfBMZLG/i1
pdaci/D7b5UuzHQ6DAnv/hU0wYd0WeOyP2Od+Yq3UmDV2XBK6uuuf0tzk20Webwe
UaYiuNH1uI7CDrfBNZVBXgpwAntid1RVTYHLFxLZMv2FIJTkM/H6lnzHa6y0o3Xb
6A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:59:23 2026 by rpki-client