Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
File:                     fdccefde-032f-46cb-9138-30e7726ea619.cer (raw, json)
Hash identifier:          iUJOmgaMkCUuppQ7+dX5mXFVRpWqUS05scsK0KqIgR8=
Subject key identifier:   5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584CAA1F69ED05B9390AA9430C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Jan 2026 13:45:21 +0000
Certificate not after:    Mon 01 May 2028 12:45:21 +0000
Subordinate resources:    AS: 32523
                          IP: 205.147.80.0/21
                          IP: 2604:f700::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:1f:69:ed:05:b9:39:0a:a9:43:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 27 13:45:21 2026 GMT
            Not After : May  1 12:45:21 2028 GMT
        Subject: CN=fdccefde-032f-46cb-9138-30e7726ea619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:44:4f:27:1b:8c:bb:0f:96:43:66:b1:40:
                    21:78:80:2f:91:23:07:13:33:1d:68:dc:0c:ea:10:
                    03:a8:45:13:8a:e5:3d:34:ef:8e:1c:66:18:11:70:
                    0b:11:cf:02:26:87:37:85:70:f4:47:19:ef:31:c5:
                    6a:13:05:ef:0c:c4:f4:32:29:3a:8e:47:36:b8:37:
                    d5:f1:a5:52:8c:26:cf:3a:bf:95:ed:95:b4:b1:6a:
                    68:06:db:ed:f3:bd:df:74:d8:b3:01:49:ee:90:9a:
                    3a:c4:27:96:71:e7:b5:2b:e9:aa:6a:94:f2:60:48:
                    5d:1c:a3:d6:5b:9b:ec:14:0e:19:b5:98:14:c9:aa:
                    ff:ca:ed:13:d1:33:66:20:42:0d:37:b3:ad:3b:79:
                    55:ff:91:a6:6c:c4:9d:79:58:d9:a5:39:b2:22:73:
                    ce:99:48:4c:97:e7:f9:67:4d:aa:6a:f4:7f:85:f0:
                    d3:c7:4c:d1:2b:a0:72:cb:5e:0a:8a:95:72:ee:62:
                    bf:d7:5b:76:37:70:7d:db:2c:d5:1f:56:ce:97:b5:
                    69:4a:1e:75:19:3b:75:63:ad:6b:42:73:53:00:98:
                    37:bf:6e:20:4d:ec:14:a0:ec:bd:75:05:34:79:b0:
                    d3:9a:d6:04:56:02:b7:4a:94:a9:59:a3:48:f4:95:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.80.0/21
                IPv6:
                  2604:f700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32523

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:fc:c8:a5:55:d3:ee:1b:d1:6f:a9:5b:6c:4e:9c:a2:42:
         80:fb:5b:4a:fa:a5:a9:27:fd:ba:84:53:86:75:da:89:e0:10:
         86:e8:31:0c:d3:ba:58:2b:fa:8d:6b:12:24:f5:b5:8b:c9:eb:
         88:02:fb:9b:9b:49:32:fb:68:32:0f:82:21:9a:51:55:e4:93:
         a7:60:f3:e5:26:1b:c5:8c:80:67:ad:69:1b:23:a9:75:d1:bf:
         25:5d:8f:fd:14:b9:2b:2d:a5:08:d1:fe:96:b5:b7:c2:d1:a1:
         e6:db:f0:7e:65:3c:94:ff:ae:77:77:59:8f:70:50:e9:61:99:
         64:32:d6:bc:cb:8d:bc:8d:52:37:29:54:11:4a:67:34:99:d8:
         e7:23:79:93:52:e5:18:38:c1:34:a8:ef:94:f9:8c:20:ca:ef:
         24:0d:00:ae:d9:42:6e:8f:d3:22:16:e5:93:df:15:bd:be:b1:
         88:a6:e1:f5:3e:1e:ba:0e:28:a5:16:79:36:36:57:87:06:0f:
         fc:7f:77:e0:2c:6b:8a:45:9a:55:4f:eb:46:93:76:5c:c1:2f:
         39:c4:9d:ee:05:2f:1d:aa:32:6a:a7:26:d5:21:9c:15:b6:32:
         0b:1c:86:88:ce:e7:9f:52:ae:ce:58:4c:c3:9e:9a:d7:85:10:
         90:c7:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:51 2026 by rpki-client