Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
File:                     2780f5b3-6e58-46dc-9841-4c845dccd557.cer (raw, json)
Hash identifier:          mUb/oZy1LZvTyCUbdt4C2DjIiLR02bhDMPyWqBm6lzM=
Subject key identifier:   28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584CE1F51AD17BED404F98571880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Feb 2026 13:45:22 +0000
Certificate not after:    Sun 21 May 2028 12:45:22 +0000
Subordinate resources:    AS: 40034
                          IP: 66.81.192.0/20
                          IP: 104.254.96.0/23
                          IP: 162.210.68.0/23
                          IP: 162.222.224.0/24
                          IP: 162.251.87.0/24
                          IP: 199.79.60.0/23
                          IP: 199.191.50.0/23
                          IP: 204.11.56.0/23
                          IP: 208.91.196.0/23
                          IP: 2604:10c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:f5:1a:d1:7b:ed:40:4f:98:57:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 16 13:45:22 2026 GMT
            Not After : May 21 12:45:22 2028 GMT
        Subject: CN=2780f5b3-6e58-46dc-9841-4c845dccd557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:d5:a8:79:cd:7c:b4:a7:4b:c6:63:d1:35:
                    68:89:cd:d4:66:2a:df:f0:6d:2f:92:6a:72:db:c2:
                    11:d0:4d:66:d5:d6:3b:63:a9:c2:86:25:fc:81:88:
                    9f:07:d0:1d:16:dc:f0:5a:4b:c4:ab:c4:33:f4:a4:
                    58:04:bf:b8:26:9b:82:8b:c3:96:a7:80:a0:34:32:
                    77:23:d9:bc:ba:03:66:6f:1d:2f:cc:f7:9d:c7:76:
                    8f:52:e0:0c:cc:62:36:72:29:4b:11:3a:fc:85:7d:
                    7c:bb:57:e7:51:0e:da:78:a3:d4:54:da:40:20:47:
                    3e:f8:1e:8a:17:cd:88:77:90:4f:57:12:86:5b:9f:
                    fc:eb:98:d8:b0:2b:29:d3:9f:97:2f:1b:4a:92:79:
                    2d:f9:dd:27:00:fc:e1:c3:de:db:50:65:8b:4a:a4:
                    ca:90:0d:a7:90:3d:3b:77:71:44:d0:20:2b:f8:a8:
                    b8:0d:fe:70:11:05:51:4a:cc:25:14:72:4b:cb:3e:
                    b4:7d:07:e6:32:1e:c9:07:b3:a0:cf:66:b0:28:d3:
                    de:cd:d2:b8:9a:2f:fd:fb:e4:ae:ec:ae:8b:a9:e3:
                    b0:53:cd:b3:4d:2d:a9:33:33:ac:64:27:81:d0:50:
                    d5:df:6f:9e:ef:7a:9d:fc:15:8b:28:5c:8e:c1:2c:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.192.0/20
                  104.254.96.0/23
                  162.210.68.0/23
                  162.222.224.0/24
                  162.251.87.0/24
                  199.79.60.0/23
                  199.191.50.0/23
                  204.11.56.0/23
                  208.91.196.0/23
                IPv6:
                  2604:10c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40034

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ce:f3:38:7e:ab:98:a3:43:e0:a9:8e:49:9d:0a:3c:a3:89:
         7a:2a:7c:bd:d9:0a:db:64:02:b4:5b:aa:10:b7:57:94:d5:a1:
         32:e2:7a:2a:03:43:a2:fb:71:30:e0:02:3a:f9:e5:e5:ae:da:
         7f:70:a0:62:84:cb:5f:2b:8c:83:70:55:71:85:b4:33:49:e6:
         1c:00:b9:12:28:5f:13:bc:88:4a:39:e4:ee:73:89:f5:cf:39:
         94:c2:ff:42:d9:76:b1:af:a1:44:de:b2:3e:10:1f:1d:4c:3d:
         57:cb:05:0a:de:2b:0b:8b:5f:f5:a0:8b:ee:70:c1:1a:86:f0:
         64:b4:19:85:4d:cf:8f:7e:89:37:57:87:25:dc:56:e7:5c:3c:
         bf:01:83:55:e2:db:f4:4a:87:e7:66:1a:f5:a0:b2:46:25:5c:
         f1:5b:5d:00:ab:8c:19:40:11:0b:72:71:78:d1:c5:af:14:44:
         d3:0b:30:95:17:ca:1d:0a:1c:d5:2c:65:ee:25:49:7f:9e:7b:
         6a:28:c9:50:98:c6:b8:56:fb:f6:d5:e8:92:0e:b2:d3:a5:ae:
         37:54:67:ef:39:d2:10:c4:a4:f5:4d:76:2a:5d:3c:a3:7c:89:
         e1:f5:04:e2:da:91:b0:40:04:3d:db:f6:7e:bb:0b:38:d0:12:
         03:5c:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:18 2026 by rpki-client