Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
File:                     d84d90bc-9144-4684-9270-edf2e53d3879.cer (raw, json)
Hash identifier:          OEAtiNn8kLva8jbo5ibdcQtuFLzsDKF+OomOgm4hjmI=
Subject key identifier:   9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584CAE4F73E100DF3A76E0B92A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Jan 2026 01:45:23 +0000
Certificate not after:    Wed 03 May 2028 00:45:23 +0000
Subordinate resources:    AS: 399674
                          IP: 104.247.104.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:4f:73:e1:00:df:3a:76:e0:b9:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 29 01:45:23 2026 GMT
            Not After : May  3 00:45:23 2028 GMT
        Subject: CN=d84d90bc-9144-4684-9270-edf2e53d3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:58:14:37:90:0e:92:ca:11:dc:34:4b:96:
                    38:f3:1e:09:26:b4:33:af:40:13:b9:6e:9c:b5:15:
                    4e:83:eb:d7:50:7e:da:66:ed:1c:69:0e:af:2d:12:
                    2d:b0:6e:75:ea:60:f0:c4:08:b8:8d:7e:3f:9d:b0:
                    ad:e0:47:4c:32:67:88:51:21:cd:1f:56:75:53:39:
                    97:e2:db:6f:61:5e:22:2a:7d:4a:4b:06:81:df:c9:
                    85:25:31:64:75:87:ba:67:6e:38:fb:d9:86:86:da:
                    05:7a:73:ab:ba:d6:93:b5:33:2f:be:cd:6a:61:54:
                    fd:4c:1d:50:c7:45:10:c2:d6:53:85:42:0c:bd:d8:
                    c7:02:3c:3d:31:c6:6a:e7:6e:f6:80:18:59:d6:f8:
                    91:f7:a3:3d:84:c2:20:af:10:90:de:96:9e:63:7f:
                    3d:ae:d2:f0:f8:58:47:6b:5d:42:b3:f6:4e:10:b5:
                    ba:e6:24:3b:8a:14:ad:ec:3d:e4:c5:ac:44:5b:c1:
                    6e:31:44:e1:da:89:a5:4d:76:f1:1a:45:29:d9:9f:
                    97:7d:67:00:41:2b:07:b8:6d:d1:fc:26:b3:ef:71:
                    95:e8:d6:1c:2a:ef:c3:c1:d4:af:a7:35:31:c0:6d:
                    13:aa:cb:23:7b:e2:40:20:23:a7:c8:6e:61:01:be:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.104.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399674

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:58:ee:57:34:4c:67:14:f3:07:a1:c8:f5:c6:df:d8:bd:
         41:da:c0:32:43:1a:3f:14:dc:94:97:a4:24:aa:4e:ea:1b:87:
         06:cf:da:dd:61:56:e0:41:6e:3b:f6:9d:88:31:57:ff:89:d9:
         8d:4e:db:fc:6a:d1:5e:b5:6d:9f:cd:b7:4e:48:7b:f3:3e:8b:
         5b:7f:8a:d5:9c:88:77:6e:52:cd:e4:6f:05:bd:2a:86:fb:99:
         99:c1:ac:ac:a9:f6:d9:9b:c0:3f:c0:da:f5:82:f0:5b:5c:be:
         de:a9:e1:fb:e3:5c:7a:6e:fd:bc:10:df:d4:c6:4f:18:88:fe:
         39:ed:cd:98:0e:78:01:8f:92:eb:69:4a:f6:8e:ff:67:79:b7:
         8d:59:ad:e0:90:79:72:73:13:38:7b:ed:8c:7b:c7:61:60:90:
         92:8f:52:bd:08:e5:6e:b3:19:3d:b7:d6:9a:37:9b:f8:79:40:
         19:b9:4a:92:de:ba:f7:85:a1:8f:a7:8b:d6:15:1e:9e:23:db:
         d9:a0:a9:d7:fb:5c:21:d5:43:c1:7c:01:b3:d7:c9:58:cf:43:
         83:f3:65:d1:39:4e:14:46:81:cf:b8:42:4a:aa:76:0a:e0:a4:
         e6:a3:35:dc:ab:a5:87:77:b2:ca:7f:f7:8c:d3:cf:4e:f0:79:
         7a:16:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:27 2026 by rpki-client