Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
File:                     5dd53d9e-382d-4f16-b9d4-08067d598d81.cer (raw, json)
Hash identifier:          VxEwW48pM4YT3qSTZYBBCwkusceMYXQdkU4bvmckhxc=
Subject key identifier:   8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584DFC309BC9FD14B410BDF41100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 May 2026 16:03:13 +0000
Certificate not after:    Mon 03 Jul 2028 12:45:15 +0000
Subordinate resources:    AS: 2635
                          IP: 66.6.32.0/20
                          IP: 87.250.160.0/19
                          IP: 192.0.64.0/18
                          IP: 198.181.116.0/22
                          IP: 2620:109:b000::/44
                          IP: 2620:115:c000::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:30:9b:c9:fd:14:b4:10:bd:f4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 28 16:03:13 2026 GMT
            Not After : Jul  3 12:45:15 2028 GMT
        Subject: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:50:f4:32:19:c3:f7:1d:18:63:5b:c8:0f:
                    63:46:53:d0:b5:1a:f8:ce:ce:3b:8e:16:88:56:89:
                    9a:2d:06:9c:3a:aa:61:3f:a3:b8:dc:02:55:6a:d8:
                    9b:de:15:17:24:b9:c3:71:25:a1:67:7d:58:8a:16:
                    09:2a:6d:28:43:45:76:e6:30:2c:b7:a0:65:5c:1d:
                    29:54:b9:87:e9:1f:23:fe:9e:7f:9f:05:d3:a4:fa:
                    0a:23:2b:1b:33:bc:03:09:18:9d:24:03:c2:30:06:
                    42:86:fc:27:72:ee:1e:c8:49:1e:cc:a8:6c:87:70:
                    57:31:4d:a8:be:ac:5c:65:fb:3b:b3:43:6e:fa:5f:
                    eb:4d:d7:05:d8:52:52:a2:fb:df:7b:0e:92:ce:b0:
                    fc:6f:e9:95:6b:1c:3e:29:93:18:48:b0:70:4e:b8:
                    d6:0f:84:c0:db:e4:05:4f:d4:f1:84:ba:06:0e:91:
                    c5:6d:7f:72:b1:6d:29:23:0d:78:da:f6:3d:71:56:
                    c9:59:4f:34:7d:40:80:0e:7e:0d:ff:fb:cd:fc:65:
                    7f:7a:9f:b8:21:fa:17:87:07:7e:31:ee:66:b3:e4:
                    cd:7b:45:8d:fb:e0:54:76:6f:f9:04:07:2b:70:98:
                    2b:db:76:57:cc:d3:71:8e:66:85:ef:dd:a9:3d:16:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.32.0/20
                  87.250.160.0/19
                  192.0.64.0/18
                  198.181.116.0/22
                IPv6:
                  2620:109:b000::/44
                  2620:115:c000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:75:9f:20:1b:28:8a:9c:04:3a:fa:04:e9:f2:d9:03:7b:
         94:b2:f0:8d:c5:34:21:e5:6e:86:d0:1a:92:80:36:4f:a4:98:
         ae:d4:96:91:c7:45:e6:56:10:45:6a:ca:31:a2:a5:7a:73:da:
         59:4c:d4:4d:4a:ba:d7:04:77:9c:b4:a8:16:4f:f8:46:75:ad:
         b8:9a:ac:17:35:73:70:e9:12:44:ed:39:2b:d4:7f:5d:82:8c:
         b7:0f:40:f0:23:84:2e:60:1d:98:92:46:0d:6d:7f:d4:28:c6:
         98:6b:ac:35:4a:b9:01:31:49:b0:d4:2f:23:ce:9b:1a:80:97:
         b3:34:84:4d:d2:8a:9c:fb:7c:b2:df:c4:02:e3:75:f0:28:3b:
         e1:cb:65:09:02:76:16:23:0a:ba:1a:ee:08:de:7c:40:b7:6b:
         1b:48:2d:13:77:a9:d0:a0:12:bf:ca:62:83:df:c7:45:03:fd:
         9b:3d:d5:a9:ab:7e:38:78:04:d2:6e:2b:60:f1:94:7d:e1:ab:
         b1:bd:43:c0:33:50:ea:0f:ef:62:f1:75:a6:fd:39:ef:9f:81:
         68:c6:8b:82:41:b4:fa:0e:29:0b:86:6b:c6:ca:9c:6c:53:ed:
         b4:98:86:99:a2:8e:8f:3d:d5:85:fd:30:b5:bb:40:d0:19:8a:
         cc:fb:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:56:08 2026 by rpki-client