Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
File:                     8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer (raw, json)
Hash identifier:          mhxIiYvy3y+vptRO0JqOXoEQsR/DxwqV8T4FvFfa4Mc=
Subject key identifier:   2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584CD134FF36543551581D01AEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Feb 2026 13:45:21 +0000
Certificate not after:    Mon 15 May 2028 12:45:21 +0000
Subordinate resources:    AS: 1429
                          AS: 25875
                          AS: 32527
                          AS: 36818
                          IP: 69.165.96.0/20
                          IP: 208.88.176.0/21
                          IP: 2607:9f00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:34:ff:36:54:35:51:58:1d:01:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 10 13:45:21 2026 GMT
            Not After : May 15 12:45:21 2028 GMT
        Subject: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:c6:d7:94:66:40:9e:0f:d1:98:e9:4f:9b:
                    13:3e:4c:71:5d:bd:a2:47:95:33:d8:3a:4f:fe:96:
                    44:a7:c0:e1:da:a6:24:26:52:b1:08:68:94:4b:4b:
                    0f:aa:da:89:72:c2:a8:d9:71:db:de:c1:f5:65:e4:
                    03:fc:db:38:66:c9:b1:ef:fc:fc:42:19:73:d9:27:
                    b0:fb:ca:77:9e:76:37:8c:fd:0b:75:72:9d:f6:a9:
                    7e:7c:42:a1:c6:28:cc:9c:a5:ad:20:aa:71:42:f3:
                    21:6b:57:ad:2c:31:9b:07:2d:f0:9f:11:3b:7c:c5:
                    c3:cc:07:c9:44:81:7a:94:8d:a2:9e:0e:31:cc:21:
                    97:37:f2:c2:e1:e2:fd:74:0c:74:9f:d6:a6:13:98:
                    bb:5b:cb:d4:9f:ea:9a:3d:4a:f2:e6:97:2e:d1:7f:
                    e7:c0:40:bf:b0:40:70:70:a2:ec:10:ed:4a:30:8d:
                    5b:d7:d4:9b:32:2c:9e:ed:a1:ce:a7:77:64:f7:3b:
                    7c:d7:c4:4e:4a:e3:b5:f8:a7:82:34:eb:71:c7:c0:
                    1c:f7:59:9c:e8:ce:15:b8:24:a9:fc:a7:39:41:ba:
                    d3:0e:00:fa:ab:1a:16:c0:c3:7a:89:5a:77:06:1e:
                    1f:36:4f:e8:2f:27:04:c4:45:b0:21:dd:57:e8:39:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.96.0/20
                  208.88.176.0/21
                IPv6:
                  2607:9f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1429
                  25875
                  32527
                  36818

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:97:4d:b5:cf:c5:15:1e:90:1e:4b:76:26:b9:5a:2a:87:28:
         3a:de:ce:8f:84:11:53:15:66:b6:1e:d0:f2:29:72:c1:7e:fa:
         f2:da:fd:31:9e:49:b7:75:80:33:8f:d7:18:04:c0:78:0f:52:
         83:8a:0c:c1:1f:75:f2:77:f1:97:5a:bb:c8:15:a9:ae:ac:51:
         fb:76:e6:c1:ef:04:b4:76:d1:87:75:c1:3a:f7:86:c6:ab:f3:
         a2:06:ef:64:a8:07:8e:2e:26:f8:fa:d4:c4:5e:a4:9d:3f:af:
         4e:47:bd:6f:1d:45:95:0a:46:11:6e:8f:20:ff:d2:d3:2c:e6:
         47:88:7a:3e:b6:4c:7e:a7:7f:be:c7:ab:b7:ff:b5:51:9f:b4:
         b3:a4:b6:af:b4:c7:21:a7:85:a3:12:1c:90:82:f9:1e:8e:bc:
         21:24:5a:cd:db:54:18:00:ca:7a:cf:9c:03:82:60:23:c3:b0:
         dd:f1:86:44:6e:76:44:ea:64:e8:68:b7:e5:e5:70:e0:74:9e:
         d6:28:b0:0c:6b:ff:19:3a:ab:c8:a2:75:3f:2f:3e:be:f4:59:
         94:88:32:eb:50:a8:1c:4f:5f:c4:b0:b1:52:83:99:0a:3d:4e:
         f6:06:82:3d:66:f9:13:48:35:e5:b8:f4:ba:73:e1:58:64:e0:
         78:5f:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:26 2026 by rpki-client