Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
File:                     10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer (raw, json)
Hash identifier:          HjtFgaPl3DGabXPLAH9Dw/SElv+mNRk0OaJG3YHuACw=
Subject key identifier:   77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584D00AAA1E9770F742111A90C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 27 Feb 2026 13:45:22 +0000
Certificate not after:    Thu 01 Jun 2028 12:45:22 +0000
Subordinate resources:    AS: 20119
                          IP: 23.151.96.0/24
                          IP: 142.202.12.0/22
                          IP: 144.208.88.0/24
                          IP: 172.83.127.0/24
                          IP: 2602:fe3a::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:aa:a1:e9:77:0f:74:21:11:a9:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 27 13:45:22 2026 GMT
            Not After : Jun  1 12:45:22 2028 GMT
        Subject: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:ce:85:4b:9a:d7:78:b5:49:1f:b9:72:68:
                    94:67:86:af:aa:2d:d1:44:0e:43:9a:93:d6:fd:df:
                    30:39:95:10:15:05:f7:82:f3:35:63:de:96:b7:a7:
                    c1:28:f2:a7:db:df:63:e4:13:a2:e4:40:f5:9c:4b:
                    6d:da:6e:04:71:51:64:a5:89:83:bb:a5:e4:0c:f7:
                    2b:61:07:ac:74:24:7c:47:67:40:2c:85:3e:98:0f:
                    5b:29:e9:97:4f:d8:6b:e5:2d:7c:1d:77:ca:09:1b:
                    69:5d:79:e8:d2:c1:ff:ab:30:dc:60:b8:70:4c:87:
                    64:06:67:66:7e:83:b7:cf:8a:b3:e6:a9:95:82:ae:
                    47:18:28:44:52:a2:1e:3c:64:0f:97:42:b4:6d:b1:
                    8e:c2:54:a3:29:9a:4a:9a:8b:64:bb:12:f3:58:76:
                    81:e0:d2:6f:d3:ad:16:32:4e:24:13:01:d4:b5:26:
                    7e:0f:9e:97:2d:da:92:2b:46:f4:3c:7b:b0:d1:55:
                    d5:31:d4:28:0f:4d:cc:a8:3d:ef:4b:05:63:15:a4:
                    dd:fa:30:e6:70:be:fa:bc:36:9c:e2:a7:18:47:f7:
                    1d:a2:75:8d:bf:4c:36:28:6c:6d:c9:88:59:df:3b:
                    0a:0d:3c:a2:da:91:3e:46:c2:7d:ee:04:e4:7b:a0:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.96.0/24
                  142.202.12.0/22
                  144.208.88.0/24
                  172.83.127.0/24
                IPv6:
                  2602:fe3a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20119

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:65:9e:51:f1:6d:16:38:8c:26:9c:f0:65:52:a8:5b:42:
         6d:e1:6e:8d:0d:f9:07:3c:da:07:a9:6d:19:cd:45:56:52:c7:
         95:cb:df:dc:16:6d:7e:f6:56:14:d4:9e:ba:0f:41:b9:43:ed:
         7b:60:eb:27:5e:78:5b:80:eb:2e:fe:f1:b2:3d:0b:c2:24:68:
         ab:5d:0e:61:62:c6:ea:ca:b3:83:31:4f:b6:c6:a7:d9:54:cb:
         0b:05:8e:db:32:2b:d4:e8:1f:8b:39:c3:7d:87:c3:d6:0f:db:
         6b:ab:69:3e:c1:00:6f:b4:2b:c4:63:f5:27:0c:b5:a6:21:02:
         25:c7:ac:cc:e4:06:ff:3b:e9:dc:f9:53:9e:f0:b0:da:18:2f:
         dc:63:c3:93:b3:d8:91:fd:19:2d:8a:b3:9d:df:b0:9c:c6:e3:
         fa:f6:60:ce:2f:de:2c:e5:9f:c9:9b:dc:89:2c:5c:57:e7:a1:
         ff:d3:5e:82:2a:e0:15:ae:c8:a8:c9:df:de:27:8d:79:a4:f7:
         41:51:d9:4d:7b:7c:e2:0c:ce:df:c0:21:cd:37:66:07:96:e2:
         e4:b3:e4:73:a8:1f:9e:e4:0e:e7:50:ce:49:ab:67:34:ec:48:
         d2:0d:d7:fe:47:8b:dd:1e:c5:84:cd:26:ea:7e:85:85:f1:08:
         73:f3:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:38 2026 by rpki-client