Certificate

$ rpki-client -vvvf ta/arin/arin-rpki-ta.cer
File:                     arin-rpki-ta.cer (raw, json)
Hash identifier:          8gyfu8XrMRk+FeEPteIPDPt/6+1mXHtDEfcq41Cty3M=
TAL:                      arin
Subject key identifier:   13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer:       /CN=arin-rpki-ta
Certificate serial:       010D0C9F4328584EF47E6004A554FE8B81AFB380
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Aug 2026 14:40:23 +0000
Certificate not after:    Mon 27 Nov 2028 15:40:23 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0
Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:7e:60:04:a5:54:fe:8b:81:af:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=arin-rpki-ta
        Validity
            Not Before: Aug 25 14:40:23 2026 GMT
            Not After : Nov 27 15:40:23 2028 GMT
        Subject: CN=arin-rpki-ta
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:4f:8d:b1:ef:31:15:79:b0:30:ea:7c:b7:
                    3f:eb:ce:6d:87:91:67:ad:e1:cc:26:38:3c:a4:46:
                    54:6c:6f:18:f1:34:31:48:1b:03:79:b6:ec:0e:99:
                    77:3a:fd:c2:8f:55:ad:76:b2:77:08:87:d0:38:30:
                    8f:ae:b2:5d:38:14:ab:30:04:de:51:b3:c2:f8:99:
                    4d:7f:64:91:3f:75:01:f9:52:45:82:d4:e3:d1:13:
                    7c:70:46:08:ba:10:56:e6:de:80:c5:06:c7:85:d3:
                    50:1f:e0:35:17:f3:89:77:0d:2a:f5:d6:b6:53:6f:
                    4b:c7:ce:67:7c:5c:6f:9c:2d:44:a4:af:42:6c:b2:
                    52:e2:6d:fb:f9:19:69:35:b4:f5:71:b6:be:6f:e9:
                    68:5e:9c:74:41:c6:f5:0b:85:29:24:21:83:cb:bb:
                    8d:7f:9c:3a:ff:e9:7b:46:90:13:00:7a:aa:b1:7e:
                    2a:0a:dc:30:0d:89:5b:1f:3a:76:c6:4f:68:c0:5d:
                    e6:90:2c:73:97:41:f0:9d:c3:be:b0:41:c7:79:a2:
                    f7:3a:3b:70:74:81:ab:44:67:87:8b:63:29:b7:e9:
                    af:58:78:6d:42:a5:46:fb:9d:4c:1d:3c:a0:fa:72:
                    23:58:52:8a:1b:1d:50:f7:e2:83:c7:8c:09:4a:dc:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:57:3d:6c:e3:9d:1a:2c:27:77:f0:33:ad:78:71:78:b3:f6:
         f8:3d:9e:75:b1:07:b3:65:21:8f:ea:6c:6c:72:c8:00:88:ba:
         6d:68:69:38:eb:70:35:4b:27:46:f7:c0:53:e1:fc:a7:6f:7c:
         e5:03:63:61:86:9a:b2:e7:39:a3:47:1d:ef:4c:9c:e9:eb:6b:
         b0:e2:33:93:bf:4d:0c:91:72:ba:75:32:82:0b:44:7e:fd:6d:
         4d:2c:d4:2e:c2:6e:b9:9f:53:3e:88:11:27:e6:70:a4:e3:28:
         1f:5f:b9:c6:b0:89:f7:2b:41:a9:2c:73:eb:1c:12:10:68:f7:
         49:ee:9f:9c:f1:bd:e9:5b:bf:d1:93:33:6b:bf:26:af:69:00:
         34:50:3b:5a:27:0f:93:3e:96:2b:15:62:52:10:61:7c:9b:42:
         23:72:dd:c7:27:43:5f:4e:dd:8e:4e:5f:aa:61:20:dc:b6:38:
         a5:a5:9e:05:6d:09:25:5a:07:d3:94:fd:44:3d:8b:17:fe:de:
         0a:23:3a:e7:da:6d:5a:f7:ba:e1:17:35:72:fc:58:f8:d7:95:
         f0:33:77:ed:db:3f:ba:83:fa:d9:19:28:fa:de:83:e8:45:08:
         f5:ff:7f:06:55:73:0b:05:e7:0f:56:a8:60:7f:6b:3b:07:a2:
         04:62:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:44:16 2026 by rpki-client