Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a.cer
File:                     01b6bcf9-4d43-44c5-8250-3042fd741a4a.cer (raw, json)
Hash identifier:          9PSgyUgmtY1VRzm9+KVwW1GdUjBk1LB7jGcFTSzYC1c=
Subject key identifier:   3E:7F:76:12:B6:EF:49:04:9A:07:B1:C3:A1:45:CA:22:5E:C9:C4:8B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584F1F8ACEEE2DE0C5CE9F1FC200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/01b6bcf9-4d43-44c5-8250-3042fd741a4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Sep 2026 00:45:11 +0000
Certificate not after:    Wed 13 Dec 2028 01:45:11 +0000
Subordinate resources:    AS: 402506
                          IP: 23.139.212.0/24
                          IP: 199.102.216.0/22
                          IP: 2602:f625::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:8a:ce:ee:2d:e0:c5:ce:9f:1f:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Sep 10 00:45:11 2026 GMT
            Not After : Dec 13 01:45:11 2028 GMT
        Subject: CN=01b6bcf9-4d43-44c5-8250-3042fd741a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:38:a5:aa:28:5f:96:4d:8c:98:53:b2:3b:
                    01:26:d3:61:ec:2e:ba:9d:7b:3b:4a:ed:3d:85:4d:
                    d8:95:0a:d4:67:4a:e1:5c:15:29:25:3d:78:7a:08:
                    65:1b:27:ca:40:4e:2c:c9:af:b5:ae:ab:a8:7a:5a:
                    a3:cd:70:83:d5:f8:07:72:29:cf:cb:c0:b7:07:cc:
                    ab:c3:da:04:46:77:95:40:2d:31:17:5c:b2:91:75:
                    10:07:9b:5c:07:a8:d4:6b:fb:91:16:69:8f:6f:68:
                    1d:23:76:04:13:a0:20:13:22:92:da:d7:28:16:68:
                    4a:e0:78:b8:02:91:a3:e7:cc:1f:2c:3b:22:42:b3:
                    a7:d5:bb:06:7d:fd:4d:5d:7d:28:16:cd:27:c3:e7:
                    1c:a8:eb:2f:14:9b:70:16:61:dc:4a:0d:53:a5:9f:
                    81:e0:9f:d6:02:3e:ff:ff:26:82:ce:35:00:6d:98:
                    3f:ec:39:81:a4:cc:8f:79:7f:76:9b:b9:12:0f:4a:
                    2e:26:a8:37:da:97:11:2e:df:82:08:41:20:2b:5d:
                    64:87:ff:c7:e1:b8:73:1a:ed:aa:85:74:26:2d:43:
                    a5:d0:49:d6:a8:9a:f9:74:74:bc:fc:d4:af:2a:9b:
                    63:61:be:26:0d:27:bc:cb:2a:e0:c8:df:38:1f:a3:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:76:12:B6:EF:49:04:9A:07:B1:C3:A1:45:CA:22:5E:C9:C4:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b6bcf9-4d43-44c5-8250-3042fd741a4a/01b6bcf9-4d43-44c5-8250-3042fd741a4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.212.0/24
                  199.102.216.0/22
                IPv6:
                  2602:f625::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402506

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:07:27:77:ae:01:df:80:60:4e:f7:b4:54:88:2a:3a:0e:
         1d:96:e8:22:9c:8a:79:56:41:36:be:86:9c:b8:57:93:27:8b:
         18:c2:29:8e:01:24:1a:e7:fb:20:b9:48:c7:40:44:45:af:c0:
         8e:9f:7d:07:19:72:b5:98:5c:f9:10:8c:4a:d5:38:00:2e:3a:
         bc:4a:b2:b7:f1:66:7e:3a:87:f0:f3:fc:0d:dc:0e:95:24:01:
         ba:df:96:b3:14:03:0e:50:f0:8c:4a:f8:5e:26:6c:b1:18:7d:
         e1:c2:b9:56:7a:e6:ab:27:cc:39:27:4c:6e:a4:0c:16:ca:c0:
         ee:33:84:5b:5e:fd:8f:1d:ac:e8:80:52:f4:f2:cc:c5:0b:73:
         36:2d:50:03:15:af:10:c6:6a:5f:b0:5f:e2:52:b9:92:14:c6:
         49:81:77:6c:00:c8:e1:54:33:0b:08:a6:1a:85:c6:47:67:52:
         33:76:0e:53:aa:ad:9c:ae:e7:f8:04:22:05:ef:22:af:c6:a6:
         36:17:c8:67:45:e0:2c:28:70:e4:59:3b:2e:1a:a9:77:24:e5:
         29:b6:d3:f7:81:4a:c7:a1:33:04:c6:6f:fa:3b:51:5b:f3:f3:
         77:4e:09:cc:de:60:ad:67:47:30:8d:34:00:f3:b2:05:06:70:
         c5:71:87:21
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE8fis7uLeDFzp8fwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI2MDkxMDAwNDUxMVoXDTI4MTIxMzAxNDUxMVowLzEtMCsGA1UEAxMk
MDFiNmJjZjktNGQ0My00NGM1LTgyNTAtMzA0MmZkNzQxYTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk84paooX5ZNjJhTsjsBJtNh7C66nXs7Su09
hU3YlQrUZ0rhXBUpJT14eghlGyfKQE4sya+1rquoelqjzXCD1fgHcinPy8C3B8yr
w9oERneVQC0xF1yykXUQB5tcB6jUa/uRFmmPb2gdI3YEE6AgEyKS2tcoFmhK4Hi4
ApGj58wfLDsiQrOn1bsGff1NXX0oFs0nw+ccqOsvFJtwFmHcSg1TpZ+B4J/WAj7/
/yaCzjUAbZg/7DmBpMyPeX92m7kSD0ouJqg32pcRLt+CCEEgK11kh//H4bhzGu2q
hXQmLUOl0EnWqJr5dHS8/NSvKptjYb4mDSe8yyrgyN84H6Mw7wIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFD5/dhK270kEmgexw6FFyiJeycSLMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w
MWI2YmNmOS00ZDQzLTQ0YzUtODI1MC0zMDQyZmQ3NDFhNGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzAxYjZiY2Y5LTRkNDMtNDRjNS04
MjUwLTMwNDJmZDc0MWE0YS8wMWI2YmNmOS00ZDQzLTQ0YzUtODI1MC0zMDQyZmQ3
NDFhNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXi9QDBALHZtgwDgQCAAIwCAMGACYC9iUAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYkSjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBthwcnd64B34BgTve0
VIgqOg4dluginIp5VkE2voacuFeTJ4sYwimOASQa5/sguUjHQERFr8COn30HGXK1
mFz5EIxK1TgALjq8SrK38WZ+Oofw8/wN3A6VJAG635azFAMOUPCMSvheJmyxGH3h
wrlWeuarJ8w5J0xupAwWysDuM4RbXv2PHazogFL08szFC3M2LVADFa8QxmpfsF/i
UrmSFMZJgXdsAMjhVDMLCKYahcZHZ1Izdg5Tqq2cruf4BCIF7yKvxqY2F8hnReAs
KHDkWTsuGql3JOUpttP3gUrHoTMExm/6O1Fb8/N3TgnM3mCtZ0cwjTQA87IFBnDF
cYch
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:06:00 2026 by rpki-client