Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13.cer
File:                     a9bcb725-be6c-4abe-9005-26137d096c13.cer (raw, json)
Hash identifier:          CsW4nDzK4NohdWOPjqL+JubjirDsz4cAdHWbdWmD6ys=
Subject key identifier:   E9:62:02:EF:AC:83:FE:7E:9A:D8:E1:33:15:7D:35:CE:D9:02:E9:52
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584CD174C60E5C7EEC107036A580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/a9bcb725-be6c-4abe-9005-26137d096c13.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 15:53:52 +0000
Certificate not after:    Mon 15 May 2028 14:53:52 +0000
Subordinate resources:    IP: 23.174.200.0/24
                          IP: 2602:fed8::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:74:c6:0e:5c:7e:ec:10:70:36:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 10 15:53:52 2026 GMT
            Not After : May 15 14:53:52 2028 GMT
        Subject: CN=a9bcb725-be6c-4abe-9005-26137d096c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:ed:99:0d:6b:86:56:c0:9c:6d:7c:6e:10:
                    fd:0f:09:92:aa:33:b3:b7:e6:00:ba:70:e8:da:2e:
                    80:50:81:07:2a:6d:8e:12:14:16:eb:6e:ac:2b:a4:
                    d2:8b:76:02:f0:8f:bb:fc:44:27:1e:fc:5a:cf:48:
                    f3:63:13:12:16:9b:8b:61:6d:e1:09:75:ce:fa:1f:
                    33:fe:fb:be:00:e5:05:a0:43:aa:dd:45:39:96:53:
                    22:08:a4:ef:29:d0:27:de:64:90:6d:dc:9a:35:63:
                    bb:b3:1d:9d:68:f7:d4:bc:45:e8:da:68:81:02:61:
                    ba:ef:a5:c6:35:fe:21:3e:e2:b2:bc:b7:6d:33:9a:
                    4f:a1:6b:e3:8a:6e:ff:88:66:a5:be:fd:21:cc:c8:
                    37:9e:a5:63:71:cf:f5:b8:0c:c4:f3:2b:a9:c5:57:
                    f8:09:bf:13:4a:2a:ab:36:9c:d0:d1:7a:83:3e:ec:
                    fa:6c:45:07:6f:f1:2b:5d:e7:85:fd:7e:81:80:ef:
                    e4:7f:00:14:e2:dc:67:4a:51:e0:44:63:3a:fd:de:
                    0e:d3:5a:8a:83:d1:21:66:f5:c6:4e:d0:ae:16:5b:
                    bf:3a:55:10:10:b6:9a:b7:93:18:47:81:78:76:eb:
                    a1:53:72:b4:c4:03:b6:70:c8:62:4e:f2:3c:1a:94:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:02:EF:AC:83:FE:7E:9A:D8:E1:33:15:7D:35:CE:D9:02:E9:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a9bcb725-be6c-4abe-9005-26137d096c13/a9bcb725-be6c-4abe-9005-26137d096c13.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.200.0/24
                IPv6:
                  2602:fed8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ac:57:fa:37:c7:4b:ec:16:7f:51:72:ac:9f:99:00:00:e2:
         0f:6a:0f:5f:67:04:ab:6e:5c:cf:19:96:1a:51:40:f2:cb:68:
         63:05:c9:11:25:d4:84:38:18:14:a0:40:98:80:fa:ec:77:57:
         de:05:5d:50:2e:02:c0:eb:59:cd:d3:4a:b5:d6:06:58:76:00:
         0f:84:23:64:5c:14:e1:66:8f:e3:55:e7:ac:54:db:58:12:b4:
         30:ba:24:12:8a:7b:ac:73:fd:04:34:2c:90:35:50:a4:f8:b8:
         79:b1:8f:0c:5f:1f:28:d4:3c:a7:13:a0:80:4e:9d:94:7d:14:
         bc:b0:16:04:15:6a:ca:42:8e:cd:6c:bd:bb:37:40:d1:d9:5e:
         60:d6:ec:aa:bc:db:d5:2a:c0:17:b5:8d:3a:b3:6d:28:e1:35:
         27:a7:ff:8d:81:a6:91:a6:fd:59:e4:3c:a3:2d:8f:9c:17:58:
         b3:91:9d:d5:8c:f6:2a:5f:7c:d1:0d:a3:29:37:3d:c5:62:53:
         c7:92:4d:69:00:42:7d:91:49:a4:29:d0:e7:e8:a4:38:59:be:
         b7:5e:0d:96:3c:cf:72:b2:d6:29:eb:31:b8:31:24:5a:43:c3:
         24:49:40:51:bf:dd:fe:73:34:a1:c8:c8:73:07:46:be:9f:d9:
         be:28:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:46 2026 by rpki-client