Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer
File:                     36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer (raw, json)
Hash identifier:          iA1EBD05mbK+vplYrJKiPogmgjqw7XH5VsRmN5WM178=
Subject key identifier:   4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584EE0BA6AB3E8DE12785AA81E54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Aug 2026 12:45:11 +0000
Certificate not after:    Mon 20 Nov 2028 13:45:11 +0000
Subordinate resources:    AS: 398876
                          IP: 2602:f5d9::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:ba:6a:b3:e8:de:12:78:5a:a8:1e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Aug 18 12:45:11 2026 GMT
            Not After : Nov 20 13:45:11 2028 GMT
        Subject: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:c7:76:1c:01:a2:de:f2:7c:7e:03:8d:76:
                    02:d1:07:17:b8:8c:c2:f2:91:31:87:76:8a:09:89:
                    94:db:39:ab:ee:d1:cd:9f:88:e6:57:27:b9:00:48:
                    19:30:ae:ea:50:43:d7:75:c9:01:15:2a:79:5e:1e:
                    e4:49:18:f7:a7:d8:01:c9:20:e1:e1:79:6a:a0:d9:
                    b7:43:ff:40:8e:0b:38:63:6b:d6:57:77:24:6f:3e:
                    ee:12:38:80:c8:25:c3:ad:de:70:c7:b8:9d:11:df:
                    58:3d:4c:b0:16:05:dd:c8:fe:48:6c:39:dc:14:8e:
                    85:1f:04:74:d6:aa:77:32:bf:fb:1b:c7:1b:1c:db:
                    0b:de:89:4a:19:0d:27:0d:7f:0a:4b:ff:d4:37:8a:
                    26:4e:b1:a0:74:91:c0:70:9d:1c:e3:42:36:4e:7b:
                    51:42:62:0b:6d:46:c5:5b:c7:63:19:b2:ef:5e:38:
                    3a:e5:f0:3b:20:17:26:ae:4b:94:e2:1f:0a:0f:df:
                    ee:f2:e9:01:46:0f:23:f7:dd:c1:61:f4:42:b1:d1:
                    bc:77:af:fa:01:d5:d0:ae:41:40:14:97:e0:e0:76:
                    20:78:40:e0:51:03:09:9f:f1:92:22:d3:82:e0:7a:
                    38:9e:e5:26:2d:d3:08:35:e7:a9:db:88:51:dc:fa:
                    2f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5d9::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398876

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:e4:6d:aa:54:58:07:3a:97:2a:4f:a5:55:b2:9a:4f:5c:
         25:93:77:e5:19:ea:a4:00:e9:40:fe:5d:36:79:7a:78:0d:f6:
         8f:ad:37:18:46:df:bf:92:91:05:a9:81:a9:84:6a:0f:ed:24:
         52:d7:a9:d7:58:7a:e6:a9:d7:c9:ae:1b:c4:93:04:0b:c2:63:
         87:51:75:e8:96:fc:9c:b3:30:9a:b0:3e:11:48:f5:64:6d:48:
         6d:81:50:ce:01:b5:15:6d:6a:1d:39:1e:dc:fd:ca:92:c6:45:
         0a:77:0c:b5:e0:72:65:aa:9d:8a:b0:0a:f0:8f:c1:d8:fc:5a:
         a0:e0:ac:91:6a:77:5e:36:95:df:cf:5a:0e:3b:f4:46:8f:e0:
         ed:88:83:0d:c6:77:43:26:cc:15:bf:2e:6f:53:f2:90:b2:12:
         32:a9:0b:c8:6f:b0:d9:e4:58:67:3e:f1:1a:61:7d:72:c8:96:
         03:9e:b9:e0:5c:90:f6:f0:e1:31:f3:23:0c:28:c3:12:39:5c:
         9c:51:7e:85:90:28:1b:b6:62:d3:87:b7:e1:af:57:1d:3e:b9:
         6d:c8:a9:41:6c:87:f1:38:1a:69:3e:51:2c:2a:7e:e8:af:4b:
         c8:5b:aa:1c:f0:51:44:b9:63:82:d9:a6:24:46:ba:3d:a2:67:
         d8:2a:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:33:46 2026 by rpki-client