Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
File:                     04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer (raw, json)
Hash identifier:          oG7vJxBkAHE/weI3I0T+vjYZzEIMWCNfKHMcfAiP8pg=
Subject key identifier:   71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584F6FDFDE7C6220C16445065710
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Oct 2026 19:21:15 +0000
Certificate not after:    Fri 14 Apr 2028 00:45:24 +0000
Subordinate resources:    AS: 14726
                          AS: 25619
                          AS: 395168
                          AS: 398912
                          IP: 63.248.0.0/16
                          IP: 130.51.68.0/22
                          IP: 148.59.142.0/24
                          IP: 148.59.240.0/23
                          IP: 158.51.201.0/24
                          IP: 162.250.152.0/21
                          IP: 206.168.180.0/22
                          IP: 2604:7e40::/32
                          IP: 2605:d40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:df:de:7c:62:20:c1:64:45:06:57:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct  8 19:21:15 2026 GMT
            Not After : Apr 14 00:45:24 2028 GMT
        Subject: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:31:b5:0e:47:b4:07:da:f1:88:b4:e6:a2:
                    c6:f7:6c:b4:94:06:77:e6:35:b4:5f:d4:c0:79:6a:
                    49:bf:3c:b3:1d:27:ff:65:88:df:7a:81:f2:10:23:
                    5d:85:b4:57:65:c7:be:e2:94:08:b1:92:f7:6c:9a:
                    2c:c8:5f:d7:dc:67:6d:3a:7b:5a:4a:88:96:5c:56:
                    8f:67:8e:b1:37:33:4b:81:be:12:3d:ed:1f:d4:16:
                    08:8d:bd:1f:55:d9:0e:59:44:fa:90:59:28:ce:0b:
                    e6:6d:04:61:3c:9d:d4:94:f1:a8:24:6b:17:37:37:
                    e4:2a:f2:76:43:19:95:50:c6:2f:94:aa:ed:8a:a1:
                    d8:1a:52:92:d2:18:fa:4c:3f:9d:e8:12:80:9c:bf:
                    fa:6d:81:2a:3b:71:a2:38:2c:1f:84:c6:3e:1e:6b:
                    df:70:57:0d:68:f6:24:5c:e8:2e:6c:8c:98:5a:ef:
                    f6:7a:44:54:5c:da:08:81:44:d9:41:a3:ef:7e:0c:
                    27:d2:2d:7e:d6:52:91:d0:49:8c:ce:d7:a8:20:9b:
                    5d:a4:c6:5a:51:bc:c6:90:53:4c:4d:cb:16:7c:33:
                    ec:ea:77:09:53:e6:47:12:98:e7:b0:46:ca:f8:d7:
                    ad:39:05:c3:89:99:ef:3d:b7:02:d8:65:b7:4f:7b:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.248.0.0/16
                  130.51.68.0/22
                  148.59.142.0/24
                  148.59.240.0/23
                  158.51.201.0/24
                  162.250.152.0/21
                  206.168.180.0/22
                IPv6:
                  2604:7e40::/32
                  2605:d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14726
                  25619
                  395168
                  398912

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:18:86:64:f9:c4:0c:6b:09:cb:0e:d6:8e:c3:b6:66:df:
         d6:31:44:49:09:87:fa:c7:7d:29:15:57:c8:c3:b2:92:2b:04:
         b8:20:6a:28:2b:2a:00:2b:49:2c:79:02:c8:2a:7e:c2:f7:7c:
         4f:d2:37:28:2f:2b:43:30:fc:d8:d3:c8:9c:c8:25:c5:3f:af:
         2b:c5:ae:93:db:30:88:47:af:4b:a8:a1:b2:eb:d3:e0:fe:4b:
         50:7c:6b:a8:93:23:2c:1e:a6:cb:44:13:cf:1e:36:75:5c:f0:
         57:af:9b:92:87:e4:28:7e:9e:0d:1f:c2:15:ca:96:8e:7b:49:
         83:6b:18:e0:62:8d:9d:b9:96:42:da:5b:79:44:b4:46:04:ea:
         15:54:d6:94:65:78:ad:20:3f:68:19:7c:95:be:69:61:6f:f6:
         50:89:ac:eb:d1:08:52:0d:a4:e7:25:26:69:eb:b2:0a:30:11:
         32:e3:bf:0c:67:20:4b:ce:e1:8a:31:78:07:be:1d:85:b1:cf:
         23:ee:90:e0:eb:f4:a0:6d:98:75:f7:cb:4b:88:57:ed:44:7d:
         79:b8:31:e1:88:96:82:d6:98:ca:39:85:3f:0f:38:ea:25:68:
         31:88:1c:81:f6:b2:00:2f:eb:cc:d8:33:b8:e0:99:9f:04:da:
         8b:10:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:36:24 2026 by rpki-client