Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
File:                     a90f006a-b108-4757-9dfd-b36376534658.cer (raw, json)
Hash identifier:          w1hfTnTOvL6vycm3ORw44vff6Meb7x0JJm1GXdVzmOM=
Subject key identifier:   56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584EA2D840E573C13D58EBFACAE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Jul 2026 08:45:11 +0000
Certificate not after:    Sun 29 Oct 2028 08:45:11 +0000
Subordinate resources:    AS: 32288
                          IP: 45.43.0.0/19
                          IP: 66.11.112.0/20
                          IP: 104.192.100.0/22
                          IP: 104.255.224.0/21
                          IP: 162.253.64.0/22
                          IP: 2605:fb80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:d8:40:e5:73:c1:3d:58:eb:fa:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul 27 08:45:11 2026 GMT
            Not After : Oct 29 08:45:11 2028 GMT
        Subject: CN=a90f006a-b108-4757-9dfd-b36376534658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:5b:03:ae:7b:52:7f:d6:7a:6f:8d:cf:a7:
                    42:08:15:4f:26:a5:09:5b:2f:6a:c8:e5:67:0a:3a:
                    cc:10:ad:e5:46:9d:50:f8:6a:b1:05:8e:4c:14:48:
                    46:bd:4d:43:55:18:36:19:6b:96:8b:5b:fa:9e:a7:
                    56:cf:3f:e5:58:31:55:e4:89:1e:a8:c8:57:b2:4c:
                    05:51:0e:5f:86:6d:42:b2:65:5c:98:aa:a3:e7:cd:
                    c3:21:2e:7e:b7:c7:e5:04:13:74:20:40:d5:b9:26:
                    58:3c:06:84:48:71:d6:7b:34:1c:0d:54:12:3a:ea:
                    dc:0a:93:16:70:62:06:5f:1a:9a:3b:1d:26:a4:57:
                    ec:7d:54:0f:7f:f0:c4:b1:71:5b:6d:24:d3:c7:36:
                    4c:c3:45:fc:80:17:7e:ad:95:87:bd:d3:dd:e2:5e:
                    d8:21:50:39:41:ef:ba:01:59:06:a8:21:38:83:31:
                    05:bd:9b:6e:7e:fd:e1:52:05:be:39:83:dd:38:9d:
                    f6:46:85:13:99:b5:28:5f:4c:de:f7:b6:2e:00:f2:
                    81:42:f7:4b:c3:79:53:38:75:b0:68:00:3d:d4:60:
                    7f:9d:24:5e:5d:b9:55:df:4c:ee:2d:33:db:57:00:
                    e4:af:24:9f:05:4d:5d:bd:01:c5:a1:49:30:06:6e:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.0.0/19
                  66.11.112.0/20
                  104.192.100.0/22
                  104.255.224.0/21
                  162.253.64.0/22
                IPv6:
                  2605:fb80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32288

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:da:17:34:4f:bb:a8:d1:8e:b6:fa:44:a7:14:7b:ea:0d:3c:
         de:99:28:04:03:19:f1:2d:52:53:32:dc:5e:a9:82:35:dc:3e:
         c8:2b:09:16:63:60:12:fa:07:0b:25:11:95:f7:a4:95:0b:b9:
         c9:34:b7:8a:ea:13:66:a2:26:96:a6:ba:25:dc:2d:68:de:0d:
         07:3a:9f:4b:87:cc:a3:d5:57:35:df:b8:f5:71:76:59:a4:5d:
         0e:23:05:20:56:c3:9e:b5:15:02:45:3e:d1:63:3a:6a:49:72:
         40:7d:ae:6f:4c:09:dc:fc:ce:01:67:f2:f9:23:96:0c:22:67:
         8d:4c:ff:7e:92:a2:cd:f3:c5:d9:bb:ab:64:8e:ab:28:58:9d:
         6d:ed:f5:01:a4:e4:30:b6:ab:d5:82:a0:f4:ec:49:ed:25:26:
         cb:57:7e:7d:66:8d:ad:dd:77:9a:42:c2:58:a4:47:61:69:ec:
         3a:bd:7b:a7:28:4b:95:70:c2:fd:7e:88:fd:0d:00:04:07:7e:
         2c:40:42:0e:2e:1b:59:85:e8:b5:2a:dd:a6:8c:f1:59:25:52:
         05:6f:c3:bc:cf:d9:f2:82:be:32:66:72:c1:54:32:58:57:ae:
         ef:9d:69:6f:aa:c5:d8:cd:cd:59:ac:97:bb:ca:12:65:71:3e:
         38:0d:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:50 2026 by rpki-client