Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
File:                     871da40f-793a-4a45-a0a9-978148321a07.cer (raw, json)
Hash identifier:          bI+WCS5pcBG846VOkcLiqzmfsbrwsMMNy0/GxVXtcrw=
Subject key identifier:   95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F4328584D59E2AFEB780195FC8F6B9800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Mar 2026 12:45:16 +0000
Certificate not after:    Mon 03 Jul 2028 12:45:16 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:e2:af:eb:78:01:95:fc:8f:6b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Mar 31 12:45:16 2026 GMT
            Not After : Jul  3 12:45:16 2028 GMT
        Subject: CN=871da40f-793a-4a45-a0a9-978148321a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:b8:14:01:d6:ab:bd:ed:28:af:b9:92:9f:
                    17:84:9f:24:5d:a4:1c:e2:b9:72:44:88:21:8a:9c:
                    74:24:3e:3c:3a:f1:7a:6b:6d:06:b2:17:ab:3f:6c:
                    c7:e0:46:b0:95:e8:03:0e:ec:a9:ce:41:97:fb:ac:
                    3d:c9:c4:0a:7e:38:4e:77:69:45:5f:00:e9:92:a3:
                    0a:a4:85:17:7a:91:39:c4:85:22:95:c0:0d:d8:41:
                    b4:c6:90:0d:f4:0c:86:6a:fd:0f:de:1a:2f:05:d0:
                    6c:00:9f:c2:d9:74:15:20:52:18:52:ea:eb:f7:22:
                    c6:1f:65:39:f0:a4:f7:36:db:cf:99:25:44:d0:2a:
                    79:c7:6f:5e:95:64:5c:58:04:2d:be:c5:8a:51:38:
                    81:85:81:e2:75:bd:c8:2b:03:65:8d:7f:90:cd:6b:
                    cb:b9:6d:85:ef:47:22:8d:6e:d3:1f:c6:1d:f3:b4:
                    cc:c5:84:46:eb:54:d2:ad:d6:42:bc:1e:12:f6:5e:
                    ca:ed:5f:fc:b8:fe:31:8f:20:c8:b3:bb:3b:20:b0:
                    1b:95:38:2e:67:06:37:94:43:f6:ef:63:58:f1:a1:
                    df:b7:14:4f:b3:8d:7c:a8:67:22:c1:41:6a:38:26:
                    d9:74:21:66:e7:da:a6:c2:83:d0:3b:30:00:27:e3:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:78:03:73:a9:29:d0:55:8a:b4:4f:25:b8:b9:8a:eb:ea:2b:
         d1:ac:67:0d:79:74:1e:e6:1e:b9:55:35:a7:8a:27:c8:62:2e:
         b9:7f:2e:76:d9:11:b5:70:86:b7:82:83:58:50:4f:60:c6:90:
         7f:d2:54:4a:6b:10:88:a0:13:6b:2b:06:75:57:3e:d9:14:19:
         47:1e:d9:95:6a:83:78:aa:3f:00:00:9a:ba:10:38:11:e0:29:
         9b:da:91:5f:8b:a1:d9:f8:74:7f:01:76:f7:75:ee:b5:92:9e:
         17:ad:0e:67:d6:4d:72:fe:ee:e5:a0:ad:45:73:2e:7e:24:a6:
         67:3a:14:c9:29:6e:28:83:1e:a8:32:4a:5c:63:e8:0a:fe:70:
         6b:fa:a2:da:27:ed:db:36:2d:8d:dc:dc:c0:d1:15:fb:25:88:
         be:19:1f:f3:66:3a:61:5c:a0:bf:f1:6f:2c:c7:49:59:68:9e:
         84:5a:88:a8:ab:db:8d:d0:34:ad:0d:68:07:8c:cd:9c:dd:03:
         df:7a:22:f5:f9:10:82:19:88:b6:c8:d5:f2:df:de:11:e8:78:
         c9:16:01:68:d4:84:6d:13:6c:05:69:ef:27:f7:83:8f:2e:33:
         d0:1e:07:ba:96:e2:08:2a:95:af:e7:5f:95:c9:23:fb:1f:24:
         59:a6:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:20 2026 by rpki-client