Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer
File:                     9ffa2885-cbaa-44e8-babb-180936652b5c.cer (raw, json)
Hash identifier:          dw++C/9u+sFXQbQbBWuR3bm7pjPBc7fnd6NbvE2yhxU=
Subject key identifier:   1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584D825D9EBB45E39CA5F4795C20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Apr 2026 00:45:17 +0000
Certificate not after:    Tue 18 Jul 2028 00:45:17 +0000
Subordinate resources:    AS: 400410
                          IP: 206.168.94.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:5d:9e:bb:45:e3:9c:a5:f4:79:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Apr 15 00:45:17 2026 GMT
            Not After : Jul 18 00:45:17 2028 GMT
        Subject: CN=9ffa2885-cbaa-44e8-babb-180936652b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:1a:53:50:c5:12:1c:37:92:4c:1a:01:43:
                    e1:ba:5c:26:f5:dc:fa:dd:00:86:3c:fa:31:89:b8:
                    7b:ea:a7:91:87:40:49:40:80:b0:3f:7a:71:c7:37:
                    d2:aa:02:0f:96:01:0b:28:e6:eb:dd:79:6b:06:fa:
                    c7:8b:1e:1f:43:0c:8f:97:68:f5:26:7a:d2:46:27:
                    de:79:00:83:8a:67:38:09:45:a7:5e:ad:b7:bb:60:
                    f2:32:66:4c:20:3d:51:fb:2d:0b:dc:75:7a:f6:18:
                    e0:85:50:0e:55:ca:8d:44:80:8b:64:b4:23:ec:97:
                    a0:5f:5e:d4:3f:96:c7:22:f9:a1:a6:e4:c5:87:c8:
                    20:22:eb:bb:2a:9c:97:de:b8:79:c8:40:78:ed:16:
                    d2:85:e4:20:9c:63:b9:6e:6f:d7:5d:c7:cf:3e:b4:
                    bb:3d:c3:9a:58:fc:40:80:ea:ee:d7:b1:cd:8b:e7:
                    69:01:7f:f8:56:30:3f:7d:e3:49:db:2a:43:08:22:
                    26:47:18:25:75:d6:5e:a2:3a:7a:2c:bf:fe:ee:55:
                    3d:da:da:bd:1b:3a:fd:c4:24:e7:fe:b9:6d:12:f5:
                    f1:a5:dc:98:f4:4a:39:1d:bb:f2:87:8a:63:de:5d:
                    70:c2:76:08:26:eb:7a:63:a2:ca:da:3d:89:de:77:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.94.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400410

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:69:3a:18:94:7d:2a:2d:50:cc:6c:13:39:75:1d:02:09:
         a1:e6:b3:72:d5:42:ed:b4:d9:fc:2e:b0:f9:ba:ac:a5:b6:47:
         43:86:3d:44:bc:8f:d1:32:85:56:3d:e2:5d:25:0a:4e:be:85:
         7a:8a:6d:0a:f5:4e:6b:68:94:c2:9f:2e:c4:93:9d:3a:86:c9:
         1b:27:22:e3:3d:8a:0d:d5:7a:db:29:2c:3f:01:bd:65:eb:fa:
         99:06:8a:89:35:12:dd:27:f0:c7:19:69:34:b2:73:27:9f:83:
         e8:58:71:73:84:94:74:25:1b:47:d6:26:12:cf:fb:fb:fe:68:
         7b:d2:b5:e9:07:70:28:34:58:9a:e8:17:9d:28:c7:15:14:68:
         0f:f0:20:03:6a:2f:22:df:71:bc:34:ac:54:e6:bf:66:d1:70:
         32:f9:8d:fb:37:91:8e:9b:88:45:6d:f3:a0:a8:ab:56:8c:03:
         9b:94:4f:19:00:f4:95:d3:fd:a8:8d:3f:b8:4a:86:ba:8b:22:
         df:39:70:85:4c:bb:c7:aa:a7:00:68:65:bd:8b:5f:d2:84:9a:
         48:2c:c0:08:26:55:34:f2:4d:a3:86:2d:22:51:47:d6:ec:c4:
         f2:a7:da:88:ae:34:0d:3c:32:63:df:2c:7c:00:e4:8e:37:f0:
         fc:23:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:25 2026 by rpki-client