Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad.cer
File:                     10168798-335a-4c18-979a-73ab0ca41bad.cer (raw, json)
Hash identifier:          G2EawBoBZ9aJJ6fm5jpZ/dhoiT+2CNeyC7u7LANny8I=
Subject key identifier:   A9:2B:3C:60:48:1E:EC:C6:BD:2F:22:0D:CD:3E:79:57:73:65:CA:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584E1E5277F834505A31D73E96E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/10168798-335a-4c18-979a-73ab0ca41bad.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Jun 2026 21:28:56 +0000
Certificate not after:    Mon 11 Sep 2028 21:28:56 +0000
Subordinate resources:    IP: 98.159.96.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:52:77:f8:34:50:5a:31:d7:3e:96:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun  9 21:28:56 2026 GMT
            Not After : Sep 11 21:28:56 2028 GMT
        Subject: CN=10168798-335a-4c18-979a-73ab0ca41bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:11:cf:09:5d:e5:f1:3a:32:13:9f:b8:ef:
                    50:8f:67:86:9d:cd:d1:2b:05:e8:fc:b4:52:3d:4a:
                    96:35:c7:66:b2:90:5f:7f:b2:33:bf:c8:b0:31:4e:
                    d0:ea:61:08:1f:be:9d:c6:3b:17:51:f0:00:6a:de:
                    f0:d5:40:84:ac:7a:30:d4:e8:76:0e:a0:79:b1:aa:
                    e2:24:e4:bb:05:2e:56:e6:9e:67:05:c9:bd:92:7f:
                    12:2b:e6:fe:07:07:80:4f:a4:d5:95:76:28:90:c3:
                    49:66:cb:ca:9d:f8:7e:ef:0c:2d:c1:34:e7:37:d9:
                    6f:90:f7:75:b5:42:75:df:96:9e:32:08:95:07:f9:
                    c2:e2:ea:24:ab:2f:63:85:28:71:96:de:03:88:31:
                    fa:fc:ae:5a:8c:9c:84:b4:13:93:7a:f6:33:b5:9e:
                    b7:27:54:ee:1e:44:1c:82:16:ea:81:a6:2b:8e:dd:
                    46:b7:8d:ba:3a:16:e4:5d:c4:40:34:f1:6c:82:eb:
                    16:89:ae:b2:f3:d5:7c:e2:91:93:b3:c2:90:97:e4:
                    d6:79:ae:00:3f:8b:2f:ba:0b:fa:dd:f7:05:5c:06:
                    ae:1d:97:39:10:4b:91:6f:22:32:9a:88:3b:98:09:
                    a8:c3:11:64:4b:71:21:27:17:b5:43:a4:32:32:df:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:3C:60:48:1E:EC:C6:BD:2F:22:0D:CD:3E:79:57:73:65:CA:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10168798-335a-4c18-979a-73ab0ca41bad/10168798-335a-4c18-979a-73ab0ca41bad.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:ee:22:ad:db:87:45:0b:f3:36:17:83:3e:65:a8:e3:e7:
         7d:a9:5e:07:18:dd:e4:f8:3f:73:ed:b8:1a:c7:ed:fa:41:c7:
         1d:30:50:c0:4b:1f:16:45:f5:40:7c:13:69:27:a3:b7:a4:0b:
         0b:dd:90:83:08:6d:64:3a:a9:75:b9:ad:81:38:04:52:6d:c2:
         c5:8c:bf:80:43:01:d0:a5:ae:17:f5:b7:98:c6:d9:89:71:d7:
         d9:43:d9:9f:ee:50:8d:47:1d:4b:ec:7b:de:74:0e:6b:35:bc:
         28:ed:11:2b:cd:40:a1:fa:ce:7f:c8:8a:93:17:ce:c7:20:d3:
         e6:9f:84:72:41:d5:55:e7:86:bf:a5:d3:bc:59:84:89:26:17:
         ba:5e:30:41:b2:c2:7e:a3:80:46:18:86:02:b1:9f:1e:25:ce:
         77:9d:2b:9f:9a:83:6d:ee:c6:44:6b:08:87:60:1a:a5:7f:b1:
         11:10:42:d4:08:9a:9c:e4:97:84:46:a7:0e:bc:71:78:88:bc:
         02:72:bc:5f:03:f4:18:a1:39:b2:59:3e:c9:68:22:6c:4f:1c:
         d9:4d:17:ba:b6:1b:84:5d:c0:ef:2f:38:19:b6:eb:48:aa:24:
         5e:b9:f6:e0:ad:db:3f:9d:5d:50:77:da:fb:7d:cf:c7:f0:65:
         4d:0e:89:c0
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4eUnf4NFBaMdc+lugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI2MDYwOTIxMjg1NloXDTI4MDkxMTIxMjg1NlowLzEtMCsGA1UEAxMk
MTAxNjg3OTgtMzM1YS00YzE4LTk3OWEtNzNhYjBjYTQxYmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+URzwld5fE6MhOfuO9Qj2eGnc3RKwXo/LRS
PUqWNcdmspBff7Izv8iwMU7Q6mEIH76dxjsXUfAAat7w1UCErHow1Oh2DqB5sari
JOS7BS5W5p5nBcm9kn8SK+b+BweAT6TVlXYokMNJZsvKnfh+7wwtwTTnN9lvkPd1
tUJ135aeMgiVB/nC4uokqy9jhShxlt4DiDH6/K5ajJyEtBOTevYztZ63J1TuHkQc
ghbqgaYrjt1Gt426OhbkXcRANPFsgusWia6y89V84pGTs8KQl+TWea4AP4svugv6
3fcFXAauHZc5EEuRbyIymog7mAmowxFkS3EhJxe1Q6QyMt+ilQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFKkrPGBIHuzGvS8iDc0+eVdzZcoKMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x
MDE2ODc5OC0zMzVhLTRjMTgtOTc5YS03M2FiMGNhNDFiYWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzEwMTY4Nzk4LTMzNWEtNGMxOC05
NzlhLTczYWIwY2E0MWJhZC8xMDE2ODc5OC0zMzVhLTRjMTgtOTc5YS03M2FiMGNh
NDFiYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBARin2AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQjruIq3bh0UL8zYXgz5l
qOPnfaleBxjd5Pg/c+24Gsft+kHHHTBQwEsfFkX1QHwTaSejt6QLC92QgwhtZDqp
dbmtgTgEUm3CxYy/gEMB0KWuF/W3mMbZiXHX2UPZn+5QjUcdS+x73nQOazW8KO0R
K81AofrOf8iKkxfOxyDT5p+EckHVVeeGv6XTvFmEiSYXul4wQbLCfqOARhiGArGf
HiXOd50rn5qDbe7GRGsIh2AapX+xERBC1AianOSXhEanDrxxeIi8AnK8XwP0GKE5
slk+yWgibE8c2U0XurYbhF3A7y84GbbrSKokXrn24K3bP51dUHfa+33Px/BlTQ6J
wA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:07 2026 by rpki-client