Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer
File:                     e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer (raw, json)
Hash identifier:          lKArLtFn8MktXENZf0K5BHXyYin970a3OQ58fyD4HHM=
Subject key identifier:   44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584F3CDAFDB755F7BF079FBC2380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Sep 2026 12:45:11 +0000
Certificate not after:    Sat 23 Dec 2028 13:45:11 +0000
Subordinate resources:    AS: 10363
                          AS: 10668
                          AS: 33265
                          IP: 192.104.182.0 -- 192.104.231.255
                          IP: 198.175.232.0/23
                          IP: 204.238.114.0/24
                          IP: 209.96.0.0 -- 209.96.95.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:da:fd:b7:55:f7:bf:07:9f:bc:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Sep 20 12:45:11 2026 GMT
            Not After : Dec 23 13:45:11 2028 GMT
        Subject: CN=e7a41e2a-3e61-430a-b260-195a50cc7fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:02:30:ee:f8:9c:21:6b:e1:82:0f:58:2d:
                    b2:77:0c:f5:c6:5d:3c:95:bd:82:04:a6:92:7d:13:
                    4c:1d:55:e3:de:33:71:c2:bb:e6:95:99:c0:3f:fa:
                    b7:8b:4b:02:0a:df:79:ae:5d:c4:38:a8:5c:48:d7:
                    c8:ee:97:c5:56:d9:96:58:59:99:34:f7:4c:88:1c:
                    29:62:b2:6f:19:a1:2e:f1:3c:67:69:ed:a6:33:6e:
                    bf:6a:d4:8f:cb:0f:e8:0a:77:82:2c:12:fc:cd:b1:
                    19:8a:3c:71:c6:5b:e2:ef:76:b6:7f:d7:9e:36:3b:
                    68:92:51:51:49:03:c1:f9:01:ca:0f:69:7f:78:e8:
                    c0:79:11:43:5e:49:76:57:72:14:8d:da:a3:dc:6b:
                    3e:a1:35:c1:89:d7:c4:05:d8:d6:4f:a7:82:51:8a:
                    81:ec:ec:d3:e7:5e:78:5b:1c:cb:44:8d:cf:a4:29:
                    c1:60:90:40:d5:90:2b:f8:f5:af:52:ea:c6:f2:cc:
                    65:a7:a7:59:6c:f1:56:4e:cf:b0:2e:db:ba:e2:fa:
                    c8:50:27:f8:b7:a2:2b:c0:e8:d8:4f:d6:1c:b8:58:
                    ba:be:c3:d1:19:30:aa:2d:a7:71:e9:38:51:98:dd:
                    c0:c7:8f:28:87:e3:32:9e:66:c4:b9:7b:47:02:7e:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.182.0-192.104.231.255
                  198.175.232.0/23
                  204.238.114.0/24
                  209.96.0.0-209.96.95.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10363
                  10668
                  33265

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:00:24:07:47:d1:c4:4d:76:d6:db:72:19:55:5c:23:f1:62:
         13:95:c2:7b:4c:bf:5e:eb:7e:d8:2e:04:29:88:b9:27:56:9e:
         43:64:7e:35:f1:66:db:b3:5e:bb:60:cc:8f:73:d0:b7:e9:35:
         f8:b1:7c:5b:fb:be:e8:56:5d:fc:d0:79:d8:e1:e1:6b:3a:43:
         67:54:f6:30:4c:08:aa:1d:9a:0e:bc:94:a8:ac:34:ec:91:bc:
         57:5b:be:26:8c:8a:14:e5:e2:4e:2f:80:2e:e2:4c:88:cb:f7:
         90:2e:b7:cc:28:34:a4:20:e4:ef:be:a0:e5:f4:05:20:f0:40:
         68:1e:1f:0c:57:2b:41:d8:fc:9b:8e:f1:c5:5b:cf:a5:95:7f:
         09:0b:25:fb:66:52:c9:b6:21:58:21:04:98:b8:54:f7:4e:e3:
         59:4a:bf:25:c8:a5:53:80:d2:57:e3:aa:19:8b:f9:54:cd:56:
         84:e9:00:1e:89:5b:a0:3f:3f:63:31:5f:fa:1a:a7:aa:3d:e4:
         cd:c0:e7:b5:b7:7a:c4:40:f7:5e:ad:34:73:0b:78:72:94:dd:
         b7:a3:06:d6:bd:7c:27:d5:db:65:f9:4e:48:38:c8:c4:c1:6a:
         e2:6a:7d:a0:55:5f:9e:d2:b5:85:75:94:ca:5b:64:27:5a:02:
         5a:d4:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:05:29 2026 by rpki-client