Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5.cer
File:                     bdccab16-a20e-43ba-a454-705ada07e8c5.cer (raw, json)
Hash identifier:          W99FaY6/a0tZQ2PIn6a0RhoQzWaQR+Pz07FV5hS2CW8=
Subject key identifier:   50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584E1735DE6721DD90A127191D60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Jun 2026 08:20:39 +0000
Certificate not after:    Sat 09 Sep 2028 08:20:39 +0000
Subordinate resources:    AS: 11649
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:35:de:67:21:dd:90:a1:27:19:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Jun  7 08:20:39 2026 GMT
            Not After : Sep  9 08:20:39 2028 GMT
        Subject: CN=bdccab16-a20e-43ba-a454-705ada07e8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:ac:5c:ad:cc:7c:f0:27:c1:fe:6a:6f:6c:
                    e4:1a:a8:0f:a0:84:ec:55:2b:bf:2f:9e:69:ee:7e:
                    b5:03:63:cd:32:ac:e2:e1:b6:e0:c1:a3:b7:2f:92:
                    dc:aa:0d:40:3d:40:da:b3:8e:75:bd:3a:1e:94:65:
                    30:89:85:d6:e2:e7:67:39:4c:62:dd:00:33:95:e0:
                    dd:c1:82:de:0a:ec:87:08:0e:d5:d8:d3:8b:e4:2e:
                    17:3d:a3:89:fb:e3:a3:9f:a8:3f:c8:29:08:08:d3:
                    fa:0e:6a:57:0e:9f:c5:45:9e:86:d4:af:94:0f:a1:
                    b3:88:87:e2:e1:af:51:8b:1a:57:97:f7:52:f8:af:
                    d7:f3:dc:5d:a4:47:9f:60:68:23:54:33:14:0f:8f:
                    ea:79:a4:8b:a1:56:12:62:b8:a8:b7:6a:ea:be:71:
                    a3:d8:e3:c1:93:b9:87:35:bd:d8:d4:03:3b:f9:c8:
                    1a:59:fd:5d:92:51:0e:38:02:b2:f0:cd:4c:6a:3a:
                    0d:7a:ad:b8:80:ab:86:f8:c8:cf:53:9c:46:8e:3e:
                    5e:64:23:d4:1b:26:f2:37:20:d6:9d:b3:42:fc:f3:
                    16:ff:bd:13:6b:9a:f4:d1:1e:a1:1f:5a:14:a5:08:
                    9a:67:1b:82:4d:2c:0d:fa:85:67:27:d9:3d:ea:da:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:7E:80:04:91:FD:A0:18:60:B1:C6:4F:2F:71:A0:1C:86:99:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/bdccab16-a20e-43ba-a454-705ada07e8c5/bdccab16-a20e-43ba-a454-705ada07e8c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11649

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:87:c3:a0:93:8a:40:19:69:d4:24:00:26:d6:30:b5:d8:e6:
         86:b1:4e:32:e0:51:93:0c:ed:41:92:a9:2d:93:d8:9f:23:2b:
         d2:2a:93:cb:d0:b7:d3:f7:56:91:ab:77:9c:fb:9f:59:9d:f3:
         8d:4b:5c:9b:9c:d9:cb:f6:51:c7:ce:8f:76:b9:b7:e2:c8:20:
         56:19:0c:7f:35:1a:26:fd:da:fa:59:4a:ac:74:e5:ff:71:1d:
         6b:79:80:3f:73:98:80:3c:2b:6e:00:c5:44:4f:53:d3:ea:51:
         23:60:10:65:f1:f4:1f:90:a6:55:8c:a5:b7:59:ad:fc:e7:28:
         de:0f:ed:95:59:3f:49:35:21:1b:34:09:7a:e4:34:0b:c0:c6:
         88:fd:52:88:60:24:f5:67:e2:6c:2c:07:2a:8f:d4:bc:44:56:
         ad:20:a4:a8:49:fc:23:24:4f:df:2e:5e:65:fc:15:ee:8a:80:
         96:3f:dd:9f:a3:9d:6f:2e:38:36:29:32:22:af:77:92:ce:c2:
         46:13:56:3b:ee:d9:ff:d0:a8:4e:a7:d4:e5:2c:26:c5:8a:c2:
         6b:eb:7d:5b:8f:ff:c3:05:ef:ee:f4:0a:db:a0:4c:e5:f0:d9:
         1f:89:4f:5e:bb:51:94:4a:c8:2b:e3:8d:f6:23:47:fb:6b:6d:
         e5:90:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:25 2026 by rpki-client