Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
File:                     b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer (raw, json)
Hash identifier:          1Mrig5igUMxOZgOTXL8xWoN2CsXf5UDC7T03EUnqrxM=
Subject key identifier:   D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority key identifier: 80:3E:91:C6:B2:5A:07:2A:85:5F:CE:3A:5C:0A:A9:3C:89:48:10:0F
Certificate issuer:       /CN=2945dfb7-bd07-4995-89ee-f1ff169d4bd4
Certificate serial:       010D0C9F4328584F8B2BB731504C3A09E0876640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
caRepository:             rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 18 Oct 2026 14:00:54 +0000
Certificate not after:    Sat 20 Jan 2029 15:00:54 +0000
Subordinate resources:    AS: 403067
                          IP: 156.9.88.0/22
                          IP: 2602:f2b6::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:2b:b7:31:50:4c:3a:09:e0:87:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2945dfb7-bd07-4995-89ee-f1ff169d4bd4
        Validity
            Not Before: Oct 18 14:00:54 2026 GMT
            Not After : Jan 20 15:00:54 2029 GMT
        Subject: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:3c:0e:61:20:69:9e:2c:2d:d5:64:d0:27:
                    90:f4:e5:2f:a6:2e:7b:b5:6f:b1:b3:be:bf:63:cf:
                    4f:7e:c4:eb:94:11:79:24:86:5b:32:87:24:ee:c3:
                    80:9c:3c:23:97:21:ff:60:99:5a:14:66:6c:e5:3e:
                    d1:7d:1c:03:f5:71:2c:17:4e:ce:4d:bd:9f:6d:0d:
                    2b:8e:a9:95:ce:89:42:31:0c:b4:61:db:86:aa:f6:
                    07:b7:91:60:3a:69:80:6b:db:9c:09:6a:e8:59:b5:
                    20:8a:1e:c9:c4:78:3e:76:9a:ca:e1:74:c4:ac:f8:
                    50:24:d5:b6:ae:01:0e:df:f5:ad:15:c2:d6:2d:9d:
                    e4:5b:b2:dd:ca:55:b0:5b:9e:f7:69:19:1f:ae:ae:
                    92:ef:5d:6a:d9:58:b6:87:c1:db:85:41:17:3d:0e:
                    72:35:a8:d7:e5:cc:63:6a:49:50:30:e5:c7:34:7c:
                    dd:4b:9a:b3:ae:1f:34:a9:10:14:44:f2:e9:7f:0d:
                    9f:17:7f:cc:07:46:a2:f4:ed:d0:51:21:e8:78:f2:
                    b8:0a:37:75:b9:10:8e:2b:4c:e9:6a:b9:83:63:52:
                    10:56:3a:0c:64:f5:6b:bb:d9:9d:15:e1:ab:77:0b:
                    65:48:1e:5b:0e:77:21:79:9d:84:18:6d:74:27:42:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl

            X509v3 Authority Key Identifier:
                keyid:80:3E:91:C6:B2:5A:07:2A:85:5F:CE:3A:5C:0A:A9:3C:89:48:10:0F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.88.0/22
                IPv6:
                  2602:f2b6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  403067

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:f2:9e:b9:c8:bd:37:e3:45:90:6e:97:f6:d8:18:59:b9:
         4a:af:e0:a6:45:05:c8:93:38:dd:44:d6:ae:96:fb:1d:7e:3d:
         85:85:10:c8:dc:a4:47:42:3c:81:4f:31:60:ff:75:4a:14:0a:
         66:2d:6c:ee:cd:32:ef:5f:32:77:33:f6:6d:75:04:ee:68:34:
         98:b2:ba:b4:16:65:f7:37:59:2e:67:6d:f3:10:98:85:5f:5d:
         e4:83:1c:dc:71:f4:40:21:7b:0b:0d:cf:9d:45:a5:59:9f:38:
         90:ed:fd:75:fe:3f:1f:2f:b7:97:5d:50:92:2f:31:0b:91:31:
         82:45:26:86:6e:38:04:ba:69:e6:58:77:44:06:a6:6f:b5:bc:
         88:f4:a4:d0:4e:3c:46:c3:96:f2:33:54:69:4d:81:40:bb:c3:
         08:15:ff:83:79:fc:a3:9e:c1:32:8b:d1:3f:94:be:34:8c:0d:
         1f:59:aa:cd:4d:bd:05:ee:58:1d:91:12:54:df:26:57:11:0f:
         e2:d5:1e:57:06:86:d7:3e:1e:5c:db:23:d2:c9:97:9e:01:4c:
         17:a7:6a:b9:c2:4d:ff:86:8f:64:9c:c3:a1:ba:1e:42:4e:5a:
         8b:c1:a0:64:85:e3:76:dd:f6:03:8a:67:10:7f:a2:0f:27:b6:
         f3:b9:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:07:56 2026 by rpki-client