Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a8afc61f-566b-409c-9a22-4cb852b07f2b.cer
File:                     a8afc61f-566b-409c-9a22-4cb852b07f2b.cer (raw, json)
Hash identifier:          6/P8P4jAqHJxoxUfhbH9267qXfCg7YfEhRufPYLKVQ4=
Subject key identifier:   AC:C7:CE:23:23:88:A6:F0:6D:80:E5:C4:D9:DD:5B:8C:37:0B:A7:E9
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584F2C465E10A02F63AA525D7880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a8afc61f-566b-409c-9a22-4cb852b07f2b/a8afc61f-566b-409c-9a22-4cb852b07f2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a8afc61f-566b-409c-9a22-4cb852b07f2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 14 Sep 2026 14:12:48 +0000
Certificate not after:    Sun 17 Dec 2028 15:12:48 +0000
Subordinate resources:    AS: 13480
                          AS: 46415
                          IP: 63.143.0.0/20
                          IP: 74.119.44.0/22
                          IP: 199.180.160.0/22
                          IP: 204.108.28.0/22
                          IP: 208.95.56.0/22
                          IP: 2605:6100::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:46:5e:10:a0:2f:63:aa:52:5d:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Sep 14 14:12:48 2026 GMT
            Not After : Dec 17 15:12:48 2028 GMT
        Subject: CN=a8afc61f-566b-409c-9a22-4cb852b07f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:0d:0b:aa:ae:bc:5e:38:cb:54:14:5a:5e:
                    69:01:6b:67:7e:0d:ad:8a:6e:7b:dc:e0:ce:7f:a6:
                    2d:35:3e:20:3b:d9:4e:dc:fe:41:d6:51:81:f1:f9:
                    73:6a:bf:7a:20:0b:34:45:5c:be:34:d2:33:54:94:
                    f7:fb:a8:b0:d9:a7:bf:62:64:3e:9b:8f:d1:1f:fd:
                    ea:44:ea:97:5d:73:b3:ed:13:24:e4:8f:ce:7c:15:
                    1d:bd:0b:3b:22:62:89:ed:6a:21:30:6b:98:ea:ca:
                    0b:14:c2:5a:80:43:15:49:54:ee:20:d0:08:07:9e:
                    6a:ea:20:0a:48:05:c1:cf:a1:90:82:4e:d6:45:a9:
                    f9:b9:d4:17:68:4f:f5:12:a0:44:82:f9:29:61:15:
                    b9:cf:33:3a:d7:0e:d4:4c:9e:73:be:f9:be:20:c7:
                    81:8a:e8:0a:a1:93:93:4f:aa:d8:af:c2:a8:a5:90:
                    4f:4c:33:dd:79:06:93:67:6a:e1:b8:bd:da:6b:73:
                    8b:a5:b0:26:d3:47:ca:86:c5:82:80:d2:f5:da:61:
                    6e:06:b4:b0:fb:ff:aa:2b:3a:13:64:1f:1e:30:a7:
                    ab:bb:f7:ba:55:c7:dd:c3:f4:c7:e4:e5:67:88:75:
                    05:42:14:f2:40:5a:fa:a9:48:e4:fb:9f:c6:f4:f8:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:CE:23:23:88:A6:F0:6D:80:E5:C4:D9:DD:5B:8C:37:0B:A7:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a8afc61f-566b-409c-9a22-4cb852b07f2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a8afc61f-566b-409c-9a22-4cb852b07f2b/a8afc61f-566b-409c-9a22-4cb852b07f2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.0.0/20
                  74.119.44.0/22
                  199.180.160.0/22
                  204.108.28.0/22
                  208.95.56.0/22
                IPv6:
                  2605:6100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13480
                  46415

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:54:88:b0:25:5a:b6:9b:bf:c1:59:c5:93:36:ca:be:36:
         8b:85:06:20:3d:8d:97:77:44:d7:c1:b9:7f:4c:81:21:0b:f0:
         04:0e:eb:76:f1:a6:77:5f:ec:90:27:0b:53:73:5d:6e:9d:f8:
         15:ce:fc:fa:fa:03:5a:ab:46:19:de:ec:c2:a7:b6:a9:f7:e1:
         3f:0f:4d:e2:95:71:29:f5:d7:25:25:08:a8:56:17:b7:4a:a8:
         64:d9:6a:e4:aa:cc:77:4a:1b:51:0a:25:fd:c0:a7:30:90:59:
         e6:ac:8b:fa:06:9b:c3:18:23:6f:80:c3:cc:da:6b:99:d0:7a:
         7f:1a:3b:e3:ad:ed:bb:30:80:d6:1a:85:d3:1e:dd:f2:7d:6e:
         43:90:d9:34:8e:91:6e:c4:a4:5c:94:5b:00:e8:96:4e:84:01:
         7a:c5:cd:8c:25:bd:26:fc:97:fb:4e:89:ae:74:f6:3b:31:a4:
         9c:1d:11:b8:62:e4:3e:89:66:da:b3:fb:bc:c7:d0:a9:9b:89:
         55:7c:0b:49:fe:47:1c:d4:49:a0:d4:d3:97:4b:7d:2a:5c:e7:
         65:ba:37:b2:51:88:9e:73:28:85:80:eb:f4:55:6d:bb:72:12:
         6c:9f:09:85:6e:58:24:17:23:c1:38:2f:0b:65:0b:57:3e:ab:
         93:0d:70:20
-----BEGIN CERTIFICATE-----
MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWE8sRl4QoC9jqlJdeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz
YzQyMB4XDTI2MDkxNDE0MTI0OFoXDTI4MTIxNzE1MTI0OFowLzEtMCsGA1UEAxMk
YThhZmM2MWYtNTY2Yi00MDljLTlhMjItNGNiODUyYjA3ZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIYNC6quvF44y1QUWl5pAWtnfg2tim573ODO
f6YtNT4gO9lO3P5B1lGB8flzar96IAs0RVy+NNIzVJT3+6iw2ae/YmQ+m4/RH/3q
ROqXXXOz7RMk5I/OfBUdvQs7ImKJ7WohMGuY6soLFMJagEMVSVTuINAIB55q6iAK
SAXBz6GQgk7WRan5udQXaE/1EqBEgvkpYRW5zzM61w7UTJ5zvvm+IMeBiugKoZOT
T6rYr8KopZBPTDPdeQaTZ2rhuL3aa3OLpbAm00fKhsWCgNL12mFuBrSw+/+qKzoT
ZB8eMKeru/e6Vcfdw/TH5OVniHUFQhTyQFr6qUjk+5/G9PglAwIDAQABo4IERjCC
BEIwHQYDVR0OBBYEFKzHziMjiKbwbYDlxNndW4w3C6fpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9h
OGFmYzYxZi01NjZiLTQwOWMtOWEyMi00Y2I4NTJiMDdmMmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt
ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2E4YWZjNjFmLTU2NmItNDA5Yy05
YTIyLTRjYjg1MmIwN2YyYi9hOGFmYzYxZi01NjZiLTQwOWMtOWEyMi00Y2I4NTJi
MDdmMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl
MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj
ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj
PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx
NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwRgYIKwYBBQUH
AQcBAf8ENzA1MCQEAgABMB4DBAQ/jwADBAJKdywDBALHtKADBALMbBwDBALQXzgw
DQQCAAIwBwMFACYFYQAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICNKgCAwC1TzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA3wlSIsCVatpu/wVnFkzbKvjaLhQYgPY2Xd0TXwbl/TIEhC/AEDut2
8aZ3X+yQJwtTc11unfgVzvz6+gNaq0YZ3uzCp7ap9+E/D03ilXEp9dclJQioVhe3
Sqhk2Wrkqsx3ShtRCiX9wKcwkFnmrIv6BpvDGCNvgMPM2muZ0Hp/Gjvjre27MIDW
GoXTHt3yfW5DkNk0jpFuxKRclFsA6JZOhAF6xc2MJb0m/Jf7TomudPY7MaScHRG4
YuQ+iWbas/u8x9Cpm4lVfAtJ/kcc1Emg1NOXS30qXOdlujeyUYiecyiFgOv0VW27
chJsnwmFblgkFyPBOC8LZQtXPquTDXAg
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:34 2026 by rpki-client