Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.cer
File:                     030f5b07-e11d-4e3a-bbc7-072e2fee4a49.cer (raw, json)
Hash identifier:          EqKe2r+d6aR/lcHRFzrBbbqFn1fTR69Zb66mR19j9Rc=
Subject key identifier:   9F:54:D2:C9:26:E4:A3:35:75:94:15:AE:5B:BA:18:11:93:62:5E:57
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer:       /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial:       010D0C9F4328584FAD434F30605AD08448F1D200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 30 Oct 2026 19:05:55 +0000
Certificate not after:    Thu 01 Feb 2029 20:05:55 +0000
Subordinate resources:    AS: 33007
                          IP: 64.136.112.0/20
                          IP: 174.140.176.0/20
                          IP: 199.58.116.0/22
                          IP: 2605:11c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:43:4f:30:60:5a:d0:84:48:f1:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
        Validity
            Not Before: Oct 30 19:05:55 2026 GMT
            Not After : Feb  1 20:05:55 2029 GMT
        Subject: CN=030f5b07-e11d-4e3a-bbc7-072e2fee4a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:dd:ca:da:28:40:50:54:54:ef:e9:28:d2:
                    27:ab:b2:02:5b:8f:be:ba:76:e8:f3:f9:72:6a:cf:
                    76:c1:19:7d:e9:6c:95:22:e0:1c:85:71:29:c7:89:
                    09:35:41:41:a0:3e:de:c3:9b:e6:21:ce:28:a1:04:
                    f8:7d:bb:2f:c2:69:01:f6:6d:43:b1:8f:b2:44:70:
                    79:ba:ed:46:3b:8b:ff:d3:64:05:67:ab:dd:65:c3:
                    4d:4e:06:a3:cf:89:be:cf:0b:e7:f9:b8:4f:92:ab:
                    ef:78:da:d1:10:76:9c:47:54:62:2e:44:33:74:08:
                    50:b5:a0:e5:9b:7d:59:ba:47:77:72:66:ff:b4:8e:
                    3c:98:d6:a2:be:4a:4c:1f:a0:df:cc:5e:27:80:6b:
                    f0:dd:84:d6:8a:a5:12:e4:96:0a:bc:37:92:e5:c8:
                    90:0f:cf:ed:df:75:4c:fd:10:a2:d0:a9:37:93:e8:
                    d4:a2:c7:b2:d1:7f:45:0f:73:f3:6e:87:b9:12:b4:
                    71:71:62:1c:23:fd:f5:09:da:4e:3e:bc:e5:c9:c6:
                    d5:f1:2e:5e:53:09:63:09:61:13:3c:9e:68:09:2c:
                    10:60:b4:ba:1b:35:00:d4:95:96:89:f5:53:34:04:
                    23:a6:f0:f9:b9:71:67:ce:a6:c5:9c:c1:f3:4e:fb:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:54:D2:C9:26:E4:A3:35:75:94:15:AE:5B:BA:18:11:93:62:5E:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/030f5b07-e11d-4e3a-bbc7-072e2fee4a49/030f5b07-e11d-4e3a-bbc7-072e2fee4a49.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl

            X509v3 Authority Key Identifier:
                keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.112.0/20
                  174.140.176.0/20
                  199.58.116.0/22
                IPv6:
                  2605:11c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33007

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:13:d0:ef:4e:59:1a:74:7b:25:7b:fc:f5:1e:b0:96:30:
         58:ee:0e:ba:20:fe:bc:c7:59:34:b0:9d:ac:bb:a3:23:11:8e:
         f7:fa:52:19:3c:d3:e4:49:98:fc:7f:98:19:5d:a1:5e:db:1e:
         02:c0:ac:a7:6c:cf:03:1a:91:e9:be:f0:dd:22:0f:30:34:7d:
         3f:73:2a:ee:ec:84:8e:2a:71:67:ea:37:e6:b0:1e:c6:67:ce:
         3e:0d:fa:3d:78:9b:24:dc:47:d1:de:41:e7:75:5d:90:3e:a4:
         f5:f2:3e:7d:7d:7b:eb:72:4f:06:b0:84:04:30:8e:dc:29:ac:
         75:28:54:f6:1e:8d:89:a7:84:49:54:9e:08:df:05:81:dc:d2:
         b9:54:2a:a7:10:ec:6a:68:76:c9:60:65:6e:94:d3:4c:b0:3f:
         02:4c:1f:13:af:50:c6:f4:8e:60:4d:a9:5b:6a:8a:4b:73:ff:
         1e:f4:f3:88:24:ad:c9:85:89:ee:c6:0b:45:ee:24:66:6c:70:
         11:26:40:f6:cc:e9:5a:2c:52:a6:8d:f0:77:ac:e3:7b:7d:e8:
         93:13:2c:1d:24:05:a7:30:b5:d0:0a:97:5c:dd:34:fd:e4:03:
         e1:18:b6:78:4a:69:91:77:42:f7:06:07:04:82:b3:45:c5:16:
         73:1e:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:54:31 2026 by rpki-client