Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9412bbdb-967d-453f-9e57-5d488108598c.cer
File:                     9412bbdb-967d-453f-9e57-5d488108598c.cer (raw, json)
Hash identifier:          xZ+Z9pcRGmvsVx2p2VOeyaLGjXpa4Pk7cp1xGtd1qV4=
Subject key identifier:   60:BE:CE:42:9D:5F:9F:7A:3D:08:B4:F2:0A:D6:C2:42:C9:59:C3:D2
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer:       /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial:       010D0C9F4328584FB516C792FE482569FEB83A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9412bbdb-967d-453f-9e57-5d488108598c/9412bbdb-967d-453f-9e57-5d488108598c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9412bbdb-967d-453f-9e57-5d488108598c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Nov 2026 14:22:40 +0000
Certificate not after:    Sun 04 Feb 2029 14:22:40 +0000
Subordinate resources:    IP: 156.9.80.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b5:16:c7:92:fe:48:25:69:fe:b8:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
        Validity
            Not Before: Nov  2 14:22:40 2026 GMT
            Not After : Feb  4 14:22:40 2029 GMT
        Subject: CN=9412bbdb-967d-453f-9e57-5d488108598c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:c9:b4:b4:15:70:c2:45:b7:aa:23:2f:0a:
                    f3:bd:49:2c:e3:d0:99:c8:b1:e4:d6:bd:e2:f2:37:
                    69:44:5d:3d:92:76:7a:f9:84:d6:13:d3:6a:9f:df:
                    54:64:d4:f7:27:c7:34:1e:5b:00:9b:86:02:8c:43:
                    dc:d2:a5:a8:c3:f5:fa:bb:f4:94:09:5f:47:3f:da:
                    2a:2b:0c:ed:68:c1:6c:44:7a:5f:c7:fe:05:0d:32:
                    2e:ea:a8:ab:0a:09:04:5e:7b:aa:30:16:bb:89:79:
                    23:e0:93:6f:54:a1:3c:37:37:04:f1:42:17:6a:f0:
                    e1:ba:73:86:d3:db:e5:2d:b3:3c:b9:c8:c2:8c:b1:
                    6f:d7:fb:44:d6:ef:dd:59:ac:55:5a:33:85:0c:f9:
                    35:3e:f2:a6:9b:b9:f9:6a:5f:b0:b6:b3:3d:d1:56:
                    ba:4e:bc:86:b8:60:82:6b:c3:cf:59:6c:66:52:3c:
                    b2:67:d1:2a:70:6d:ae:26:58:88:9d:5c:84:02:8f:
                    cd:b1:79:1e:47:da:48:98:4d:01:b1:b4:da:d3:fb:
                    64:33:05:09:2a:c2:95:39:46:28:34:d1:43:d7:10:
                    1f:df:48:a2:ef:fd:39:2e:04:cf:db:02:df:f1:5e:
                    d5:62:0b:c0:46:76:b0:60:02:5f:dc:01:ab:e7:e6:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BE:CE:42:9D:5F:9F:7A:3D:08:B4:F2:0A:D6:C2:42:C9:59:C3:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9412bbdb-967d-453f-9e57-5d488108598c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/9412bbdb-967d-453f-9e57-5d488108598c/9412bbdb-967d-453f-9e57-5d488108598c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl

            X509v3 Authority Key Identifier:
                keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:a2:35:63:fe:39:4d:a2:ae:e9:eb:06:c6:44:c4:be:ae:
         67:43:7e:78:76:15:5f:94:e8:24:75:3b:ca:ca:1b:6d:17:e1:
         87:14:e6:82:2a:5b:d0:63:54:ef:8e:ed:fc:3f:a2:a5:e8:ca:
         de:5d:06:36:23:1a:ac:9c:ad:5f:f3:d8:eb:eb:1c:9a:bc:b5:
         03:d3:0e:43:41:fc:6e:ec:b6:a3:51:78:29:d7:4f:3c:e5:fe:
         7d:06:64:2f:a6:73:8b:20:b9:33:d4:0f:3b:c1:92:d8:be:e0:
         d2:7e:c4:1d:8f:81:48:47:2b:0b:7b:11:75:2a:65:e8:97:ac:
         39:98:16:08:30:58:b6:44:01:a8:ba:e6:89:07:b2:11:e6:ad:
         ff:60:56:79:63:0c:1c:3a:be:94:0e:5f:89:65:5c:f1:61:bb:
         32:1a:51:ce:dd:fe:48:81:d4:bd:a2:0b:2b:f6:9c:f2:bd:49:
         74:82:58:8d:e6:cd:43:b5:56:f3:6d:12:dd:81:b1:ca:46:63:
         8a:14:26:36:d9:2b:91:b1:aa:48:ec:8d:48:62:31:2b:02:af:
         65:a3:5a:36:93:a5:08:c9:25:ab:18:bb:4c:8a:e8:23:94:8a:
         c3:c7:21:f0:e3:20:e4:a8:f2:e7:ae:d0:67:7e:5d:52:80:b5:
         85:20:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:40:10 2026 by rpki-client