Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
File:                     eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer (raw, json)
Hash identifier:          iBda4DFdxssYdf6qaUp+BvIbYg6bWk4BQ598n+7cuCU=
Subject key identifier:   40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584D7B62E9794A7519C6BA2D1000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 Apr 2026 12:45:18 +0000
Certificate not after:    Sat 15 Jul 2028 12:45:18 +0000
Subordinate resources:    AS: 291 -- 293
                          AS: 3425 -- 3445
                          IP: 128.55.0.0/16
                          IP: 134.55.0.0/16
                          IP: 192.74.210.0 -- 192.74.212.255
                          IP: 192.74.214.0/23
                          IP: 192.74.217.0/24
                          IP: 192.124.50.0 -- 192.124.59.255
                          IP: 192.188.22.0 -- 192.188.41.255
                          IP: 198.124.0.0 -- 198.131.255.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:62:e9:79:4a:75:19:c6:ba:2d:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr 12 12:45:18 2026 GMT
            Not After : Jul 15 12:45:18 2028 GMT
        Subject: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:f3:33:72:ba:b9:dc:56:0d:50:0b:1b:94:
                    46:a4:b9:4c:91:be:34:f7:e3:81:1a:1f:9c:d8:4f:
                    e7:77:60:53:26:46:b6:63:13:60:bf:68:50:02:61:
                    79:1e:bd:b4:17:bb:2c:3e:15:a5:c9:f5:a2:ee:3c:
                    80:ad:2e:4c:44:78:59:aa:d6:96:09:ca:d2:bb:71:
                    a7:3e:2e:7c:fa:65:3d:92:48:bd:94:b7:0f:bb:6f:
                    74:9a:52:e8:47:69:4f:ec:87:77:cd:93:7a:97:2e:
                    85:76:10:e7:4e:af:00:6b:eb:b3:b0:00:94:8a:aa:
                    55:df:03:e5:ac:ae:ba:39:5d:f5:28:59:e7:82:81:
                    3f:3a:b0:e3:7a:07:ba:53:7e:aa:7d:6b:d0:48:1e:
                    19:e1:17:fc:e1:c9:c8:30:ac:e2:c8:00:f7:38:4b:
                    95:d3:51:c9:0c:e7:4f:a1:3d:55:36:7b:f6:62:25:
                    b4:66:2e:06:3d:5c:9c:d2:91:28:1b:f6:6b:b5:a7:
                    ce:99:18:6f:cc:c5:2f:21:57:6f:35:05:6b:a7:c7:
                    a2:a8:4b:af:de:c9:55:1c:52:b3:e0:dc:8c:de:fa:
                    76:0c:dc:81:68:83:c4:6c:e3:9b:41:9e:90:8b:3d:
                    b1:87:aa:dd:3d:8c:29:e0:48:a1:31:11:b0:31:e7:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.55.0.0/16
                  134.55.0.0/16
                  192.74.210.0-192.74.212.255
                  192.74.214.0/23
                  192.74.217.0/24
                  192.124.50.0-192.124.59.255
                  192.188.22.0-192.188.41.255
                  198.124.0.0-198.131.255.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  291-293
                  3425-3445

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:05:3f:15:87:1d:a4:ed:91:b1:ef:da:56:50:e6:99:9e:
         3b:43:70:96:a1:d0:f8:c5:2e:d6:be:58:dd:3a:cf:b0:a4:17:
         85:18:1b:3c:65:50:e6:b5:62:1d:de:59:a0:9e:44:cf:1e:ce:
         4c:d8:5d:63:e0:aa:4b:e2:f9:a2:31:39:96:04:02:9a:9c:27:
         81:58:35:d0:07:5a:fd:bf:f0:86:85:8b:68:d8:e0:3b:19:fd:
         34:68:f3:72:76:38:54:d9:79:ba:5b:87:9f:f5:f9:85:4a:08:
         96:5e:86:ba:82:c8:31:53:cb:37:37:99:5d:00:29:f5:39:60:
         35:64:9c:a7:87:41:8b:52:75:92:26:d3:f5:ef:b9:14:f7:d6:
         d6:a2:54:8e:12:2d:1d:64:2d:c7:a9:1b:db:91:d0:7e:48:5d:
         95:dd:60:d4:ad:8a:90:24:2e:8d:91:05:8f:3b:f1:9a:ed:10:
         00:de:99:62:e8:bd:84:7d:41:eb:9a:99:67:1c:fd:37:3a:00:
         07:4c:f1:af:f0:5a:07:89:3b:41:67:bb:d7:7a:ae:1f:66:98:
         0c:8a:45:aa:b5:03:b7:59:87:4f:2f:26:b6:a4:db:db:f8:0f:
         33:e5:ab:f3:17:d4:d0:ac:ee:9f:65:25:80:f7:d4:65:fc:23:
         1e:9e:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:08 2026 by rpki-client